Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/686782f6-4564-3f98-85da-0793e1042719.roa
File:                     686782f6-4564-3f98-85da-0793e1042719.roa (raw, json)
Hash identifier:          B6LqJCiKgRLupS/B4nTbJDA+SCPP+0UITqMvECSLSl4=
Subject key identifier:   C2:11:3F:74:5E:6B:81:87:6C:9B:D5:B5:CC:5F:19:85:E5:27:7A:A9
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849DF14C5A44C771301C770AD20
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/686782f6-4564-3f98-85da-0793e1042719.roa
Signing time:             Fri 16 May 2025 10:40:56 +0000
ROA not before:           Fri 16 May 2025 10:40:56 +0000
ROA not after:            Thu 14 Aug 2025 10:40:56 +0000
asID:                     9009
IP address blocks:        104.252.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:14:c5:a4:4c:77:13:01:c7:70:ad:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 16 10:40:56 2025 GMT
            Not After : Aug 14 10:40:56 2025 GMT
        Subject: CN=43741198-6d1e-4cc5-8c1f-d703a12e8bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1b:89:35:15:a9:53:cd:88:80:5f:3e:b2:4f:
                    28:f1:f4:e4:52:d9:cd:d5:20:eb:75:3f:36:f6:57:
                    17:ec:0d:11:35:f9:67:5a:e3:bb:4f:bb:96:3b:c7:
                    16:f3:24:53:57:31:fe:8a:83:0c:43:ac:d8:30:30:
                    5f:c9:77:c6:a6:b1:ce:a8:d4:a4:44:79:38:57:4d:
                    89:67:bd:d2:c9:7a:67:2d:64:9e:1c:72:0f:74:8d:
                    cb:c4:f8:68:a9:42:92:ff:b4:09:0f:55:f7:d3:99:
                    0d:b8:f8:77:cd:27:f4:03:ae:c8:b2:04:dc:05:4a:
                    4d:20:77:95:d8:73:80:34:fd:9b:a3:13:83:98:ab:
                    fc:a3:6c:49:96:21:b2:9f:a5:90:a5:bc:12:26:02:
                    c6:0a:3f:86:db:d7:ea:e0:d5:a5:ed:79:d1:ea:56:
                    dc:1d:d3:66:fe:60:98:c3:2e:4d:8f:f9:da:a3:ba:
                    a3:8c:80:49:ee:a1:7e:74:8b:7e:3e:55:3c:1b:6a:
                    f2:47:83:63:cd:b0:d9:14:7b:0c:08:c2:d4:12:d3:
                    1d:03:af:7d:e9:cb:51:38:2c:ed:2f:86:03:86:a2:
                    19:26:ee:22:03:78:b5:f2:63:85:e0:7b:ce:62:b8:
                    ac:ed:68:19:51:1b:48:f3:28:0c:69:23:9f:a6:dd:
                    db:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:11:3F:74:5E:6B:81:87:6C:9B:D5:B5:CC:5F:19:85:E5:27:7A:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/686782f6-4564-3f98-85da-0793e1042719.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:25:a9:b3:67:eb:3c:90:e4:bc:5d:f4:3c:8f:dc:15:5b:5d:
         e7:8d:10:fc:30:dd:65:c2:da:3a:24:90:e9:90:ea:3a:34:42:
         64:d1:7e:d1:f5:77:cf:bb:1a:f2:13:3c:e6:26:ad:2b:53:8b:
         89:f7:af:81:d0:8a:23:44:97:cc:5b:d1:84:38:67:fe:25:36:
         3a:fa:8b:bf:8d:1c:b7:85:da:73:c0:c8:17:5f:1e:7d:e9:51:
         5b:95:fe:1f:c2:b1:2d:64:ed:3f:aa:9c:91:41:a5:dd:33:c9:
         db:2d:fe:dd:18:6b:23:ce:fe:9b:57:08:99:99:25:e7:bb:98:
         e0:d8:2d:0e:89:c3:1f:5a:95:60:d4:5b:64:8a:35:05:6e:b3:
         a8:f1:02:69:d6:3e:90:da:68:84:ea:dc:8c:2c:b0:bf:d4:13:
         d2:f0:0a:ed:e4:fe:58:1a:52:59:41:79:74:fd:a0:c0:d1:09:
         d0:98:3e:2d:ee:20:cf:31:eb:f9:e5:0c:7f:08:11:9a:13:fb:
         f9:40:28:6d:10:8b:fc:85:f9:09:79:73:8a:19:d0:bb:be:ea:
         bd:00:21:7d:f1:0b:5c:9e:e8:a0:26:c4:c0:bf:25:1f:8e:f3:
         b3:41:93:52:c5:9f:4f:e3:1c:b9:ae:f2:e5:39:84:64:75:b2:
         32:61:82:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 13:21:47 2025 by rpki-client