Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4df05836-7c4f-3978-90bf-0f1daacf804d.roa
File:                     4df05836-7c4f-3978-90bf-0f1daacf804d.roa (raw, json)
Hash identifier:          pccAO0KM5HajkcgsHAzWoEf8+/DioARR4+2FoLAa3J4=
Subject key identifier:   B9:A8:3F:8C:F1:47:7D:CD:B0:90:58:C2:4D:77:E2:BC:A9:D9:F0:FF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849A61F4A23B1A31A209420B280
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4df05836-7c4f-3978-90bf-0f1daacf804d.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     10557
IP address blocks:        104.253.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:4a:23:b1:a3:1a:20:94:20:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=43f7b490-bc53-48b8-99b1-9a37f04496de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7b:62:be:5e:36:76:26:69:6f:89:89:9a:fc:
                    00:f6:08:8f:e6:36:c4:4d:12:db:ab:97:c1:b0:fe:
                    61:47:60:32:f3:0f:ed:e2:6f:43:92:b5:17:74:3c:
                    b5:48:d5:ef:ed:4b:b2:a0:86:d0:90:b4:d4:2f:70:
                    9f:90:a8:6c:be:8e:64:61:b4:86:3d:18:bc:50:93:
                    4f:23:88:05:56:18:4d:30:00:6e:22:8e:c8:20:97:
                    ea:26:ee:6e:80:36:23:c4:0f:8e:e7:cf:0e:ce:5d:
                    07:df:78:13:0e:74:db:0f:1a:3b:2f:2e:41:c0:1f:
                    c8:11:19:69:6d:84:b0:45:45:2a:e6:86:4c:70:3d:
                    08:8f:a3:4a:20:6a:2f:c1:19:11:6e:8d:df:1c:a4:
                    a9:6d:80:d4:c3:38:11:24:f1:84:36:4a:4c:58:6a:
                    8e:c6:88:6d:08:d4:01:9a:3d:8d:1b:ec:18:49:85:
                    9d:05:d5:7a:df:6a:43:91:99:a3:7f:5e:24:b4:e7:
                    a3:6e:03:50:31:8b:4f:17:f6:6d:ca:21:c4:75:47:
                    75:8d:46:db:d9:95:81:51:ca:44:62:0c:20:7b:b9:
                    12:95:01:dd:90:fd:09:90:56:d4:e2:20:b4:31:24:
                    83:4c:11:45:1f:8a:4f:7e:07:9a:44:c0:c7:de:88:
                    bc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A8:3F:8C:F1:47:7D:CD:B0:90:58:C2:4D:77:E2:BC:A9:D9:F0:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4df05836-7c4f-3978-90bf-0f1daacf804d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:e4:b4:37:35:ed:9e:43:7d:c3:78:d0:59:8c:12:65:f9:c8:
         d9:d5:09:87:69:80:22:45:36:cb:b3:dc:be:fc:41:2e:d5:2f:
         6b:46:df:75:01:3b:f3:77:c6:72:c4:95:4b:a6:27:22:4a:dd:
         52:cb:2f:db:3e:b9:3c:05:28:88:8a:35:af:d7:69:68:70:e8:
         2d:59:7c:96:34:8d:91:4b:27:46:b9:a2:af:4c:1b:85:3d:b6:
         34:84:e7:de:b5:0e:0b:8d:39:5d:9f:9f:9f:2e:4c:d1:49:5f:
         9d:6a:3b:ef:da:f7:ec:47:a0:49:d0:62:60:18:32:56:ae:5e:
         c8:50:88:31:c4:5a:6f:3f:30:dd:15:82:c0:6f:65:a5:24:d1:
         fa:fc:7f:be:2a:b8:d9:a2:b6:89:db:82:42:e1:4f:1c:33:8a:
         f2:40:e9:eb:42:51:4c:51:8f:6a:16:ed:e0:ff:e5:db:bb:d6:
         49:16:3a:52:6c:19:de:ba:14:09:dc:31:cc:0b:c8:8c:a7:b9:
         f6:af:b1:d6:15:c9:a9:d3:20:c4:11:69:b5:c8:69:d3:9f:58:
         53:08:02:37:83:56:f5:61:1e:31:b8:a8:77:fb:29:64:95:e4:
         7c:b8:18:5c:bf:80:cf:31:09:d3:59:3d:38:2e:53:0d:b1:98:
         1b:8e:89:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:06:35 2025 by rpki-client