Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4d40517c-326c-3ff1-aa47-19d0331c1bb0.roa
File:                     4d40517c-326c-3ff1-aa47-19d0331c1bb0.roa (raw, json)
Hash identifier:          QXtj3ElKjuVedbIkd1b18vX1oAnoo8txc47Bshjqe3o=
Subject key identifier:   1E:A0:27:3C:59:4D:13:89:68:C9:F1:D0:08:62:4A:E8:FE:CE:9B:5D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A8DC1582EC945CEB0F8DC87A0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4d40517c-326c-3ff1-aa47-19d0331c1bb0.roa
Signing time:             Fri 18 Jul 2025 00:19:18 +0000
ROA not before:           Fri 18 Jul 2025 00:19:18 +0000
ROA not after:            Thu 16 Oct 2025 00:19:18 +0000
asID:                     6939
IP address blocks:        104.253.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:c1:58:2e:c9:45:ce:b0:f8:dc:87:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 18 00:19:18 2025 GMT
            Not After : Oct 16 00:19:18 2025 GMT
        Subject: CN=098c2cda-c401-4830-b6f5-c39704081a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:48:92:2a:7d:67:5d:f8:b2:34:77:0d:09:7a:
                    5d:4a:fa:b6:32:ce:83:3b:04:be:c7:25:7f:09:e4:
                    35:52:f8:4e:06:08:62:ca:94:eb:6a:f7:01:47:94:
                    e3:ae:d5:88:ef:97:9e:f7:70:f5:37:5a:54:01:9f:
                    8b:f2:45:a9:ec:0c:a3:f2:f7:0d:e3:b2:4b:33:ee:
                    e4:a3:93:20:73:83:0a:49:37:63:e7:d7:36:3d:30:
                    07:42:65:06:89:1e:52:5f:ef:51:e3:cc:5f:97:8a:
                    2d:a7:ee:ca:11:40:a7:ce:1b:73:e2:a5:60:51:14:
                    48:22:2d:4e:f8:4a:bf:9c:85:e7:27:5f:ae:50:26:
                    75:7e:ed:13:5a:b1:99:43:4f:39:ec:be:5e:16:8a:
                    cd:6b:43:8f:1f:8b:72:29:63:43:94:10:e3:ac:13:
                    41:77:56:c7:02:d4:bc:97:5d:2f:93:09:a0:92:05:
                    bc:38:2c:17:5f:2f:a2:3b:78:b1:d0:d6:40:e1:ca:
                    f7:83:a7:de:3d:2c:6b:5a:2d:ee:92:7e:84:0e:1d:
                    b1:a4:39:09:0f:e0:90:94:2f:b8:aa:7e:d1:a5:af:
                    48:2e:d2:4d:1a:74:5b:ba:6d:e3:46:70:f9:17:24:
                    64:8f:6b:6b:e1:56:73:51:99:39:95:5e:89:80:be:
                    68:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A0:27:3C:59:4D:13:89:68:C9:F1:D0:08:62:4A:E8:FE:CE:9B:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4d40517c-326c-3ff1-aa47-19d0331c1bb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:f1:e5:19:35:13:bd:50:10:0a:da:d9:40:4a:31:2e:0c:f4:
         f6:ec:aa:1c:9c:90:de:ec:c0:35:4e:76:18:f5:fb:6f:e8:3d:
         97:d5:05:9a:d7:cd:5f:f7:63:d4:2e:6b:79:79:b2:3c:95:e3:
         9a:c6:ec:e2:df:41:3c:e4:e4:21:ef:db:7b:cc:9f:89:52:c2:
         4a:ce:d9:e4:81:4e:32:ab:f4:f4:e5:46:25:b1:b5:96:fa:1a:
         b0:22:1d:bb:45:e0:ab:82:3e:74:a7:35:d0:84:27:00:f9:0c:
         c2:2c:3e:fb:0b:c6:d9:06:f3:e2:2f:4a:1f:fc:b5:54:16:a6:
         7d:f5:9e:d9:de:df:ea:fc:b7:23:c7:1e:80:73:ae:32:17:f4:
         2e:8d:35:22:05:80:36:ad:9e:92:e8:d3:f7:38:87:41:b5:36:
         4c:4a:a8:37:fe:23:eb:f8:1f:2e:3e:51:de:89:5a:e2:63:f3:
         56:3c:5d:1b:59:ec:35:62:d8:29:c5:02:cd:15:6b:ab:95:ea:
         fc:5d:49:ba:b3:40:e6:8b:a8:14:42:03:e2:d7:79:08:9e:b3:
         6c:2e:d3:b2:0e:51:d9:c9:58:fd:3c:24:67:d3:d8:7b:31:7c:
         ea:65:63:4d:4e:65:89:14:77:4b:f0:64:04:0e:3c:f0:42:3d:
         e1:a2:23:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:18:15 2025 by rpki-client