Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1b0f030e-1afd-3365-902a-71462e426a1d.roa
File:                     1b0f030e-1afd-3365-902a-71462e426a1d.roa (raw, json)
Hash identifier:          P3q8YzBEgH8QLO1BIc7pM++fRgztw1vO8Ej1eEJfhFM=
Subject key identifier:   EC:1D:3E:97:14:10:6B:53:BE:81:E7:3E:CC:9A:D5:34:5C:C5:52:94
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A42758533CBBEF488FA9257E0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1b0f030e-1afd-3365-902a-71462e426a1d.roa
Signing time:             Sat 21 Jun 2025 01:00:48 +0000
ROA not before:           Sat 21 Jun 2025 01:00:48 +0000
ROA not after:            Fri 19 Sep 2025 01:00:48 +0000
asID:                     59253
IP address blocks:        104.252.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:42:75:85:33:cb:be:f4:88:fa:92:57:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 21 01:00:48 2025 GMT
            Not After : Sep 19 01:00:48 2025 GMT
        Subject: CN=c6af4f54-6f29-49f5-86bf-2c248f4fb084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d0:30:a8:13:a5:8e:65:99:d1:5c:78:f8:ed:
                    0a:2c:91:86:82:5d:49:32:74:9a:ff:29:d0:24:dc:
                    94:fa:0c:03:04:55:44:c9:ff:1d:3b:a3:20:da:f1:
                    11:71:82:96:d1:52:f6:9c:17:82:39:71:91:6a:92:
                    e9:3e:a3:f0:5e:30:c7:1b:79:97:eb:5f:45:ed:41:
                    8b:7d:05:35:71:0b:20:51:7e:a5:8d:d1:71:7c:0c:
                    25:b9:b0:fe:31:2e:d8:c7:de:d1:83:0d:19:a4:4d:
                    da:cb:c6:96:a6:0c:a4:63:0a:ae:7b:36:ea:cb:25:
                    b2:7c:60:e3:ff:ca:9d:23:c5:f8:f3:55:76:f6:b1:
                    28:79:c7:f1:7c:11:6f:1d:38:a5:7e:e3:52:31:44:
                    e3:d4:57:f4:25:82:f3:99:e7:b1:0b:51:99:61:85:
                    2f:0e:5e:72:e9:2c:2c:76:f5:a7:e8:2c:09:1a:92:
                    48:36:5b:2c:4d:81:ef:a1:4c:c5:09:f5:0c:0d:57:
                    06:c5:f2:cf:53:d9:a2:40:37:42:71:32:5a:c0:63:
                    ad:91:d4:3c:8c:01:e6:a0:ca:e7:41:cf:7b:10:b3:
                    45:95:9c:dc:d9:29:6c:9c:dd:38:6b:d9:fa:1e:12:
                    88:59:db:1d:82:5a:e3:62:50:87:a7:7a:ce:14:2c:
                    9f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1D:3E:97:14:10:6B:53:BE:81:E7:3E:CC:9A:D5:34:5C:C5:52:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1b0f030e-1afd-3365-902a-71462e426a1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:9a:90:ca:e3:05:0d:ca:f0:31:9f:ba:d2:26:2f:9e:fc:04:
         b7:a1:37:02:51:ac:f3:3b:d2:d1:a9:ba:89:69:31:27:44:1c:
         e8:12:14:a0:c2:77:49:7f:e8:a6:c5:92:88:ee:51:14:9b:2e:
         bd:ad:4a:d3:73:6a:c4:23:a4:5c:f6:2f:d3:4e:5f:bf:c9:20:
         e6:76:e6:89:5b:4a:ee:98:f4:ca:6e:b3:05:29:38:7c:2c:eb:
         c5:4b:74:06:94:a2:e7:cc:3a:bc:15:95:d0:38:4b:eb:b1:bb:
         5e:c0:f0:cf:4a:11:90:6d:a0:ee:18:63:fb:18:8f:76:49:75:
         a5:f4:5f:7d:c3:2a:3e:e1:5d:05:19:32:e8:74:76:33:be:26:
         dc:21:cd:5a:08:f6:fa:97:6e:4d:cb:0d:0f:9c:f6:af:37:2b:
         74:7b:61:4f:cd:b1:2f:80:57:e6:fc:c9:60:f0:dd:6f:dd:c5:
         0b:18:f4:7e:da:ea:8d:d8:03:8f:b2:b0:d1:e4:1a:2f:bb:4d:
         ab:8a:96:a7:0f:46:6c:2d:77:25:4b:8e:dd:85:fe:5b:61:57:
         dc:7e:06:76:2d:47:64:aa:f2:ec:d5:3c:4d:dd:02:a1:9c:ba:
         6c:8f:88:39:27:0f:c2:cc:a6:66:2c:5f:85:80:f2:7e:d9:08:
         10:a4:66:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdYUzy770iPqSV+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk
YzZhZjRmNTQtNmYyOS00OWY1LTg2YmYtMmMyNDhmNGZiMDg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtAwqBOljmWZ0Vx4+O0KLJGGgl1JMnSa/ynQ
JNyU+gwDBFVEyf8dO6Mg2vERcYKW0VL2nBeCOXGRapLpPqPwXjDHG3mX619F7UGL
fQU1cQsgUX6ljdFxfAwlubD+MS7Yx97Rgw0ZpE3ay8aWpgykYwquezbqyyWyfGDj
/8qdI8X481V29rEoecfxfBFvHTilfuNSMUTj1Ff0JYLzmeexC1GZYYUvDl5y6Sws
dvWn6CwJGpJINlssTYHvoUzFCfUMDVcGxfLPU9miQDdCcTJawGOtkdQ8jAHmoMrn
Qc97ELNFlZzc2SlsnN04a9n6HhKIWdsdglrjYlCHp3rOFCyfuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOwdPpcUEGtTvoHnPsya1TRcxVKUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMWIwZjAzMGUtMWFmZC0z
MzY1LTkwMmEtNzE0NjJlNDI2YTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPyMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFuakMrjBQ3K8DGfutImL578BLehNwJRrPM70tGpuolpMSdEHOgSFKDC
d0l/6KbFkojuURSbLr2tStNzasQjpFz2L9NOX7/JIOZ25olbSu6Y9MpuswUpOHws
68VLdAaUoufMOrwVldA4S+uxu17A8M9KEZBtoO4YY/sYj3ZJdaX0X33DKj7hXQUZ
Muh0djO+JtwhzVoI9vqXbk3LDQ+c9q83K3R7YU/NsS+AV+b8yWDw3W/dxQsY9H7a
6o3YA4+ysNHkGi+7TauKlqcPRmwtdyVLjt2F/lthV9x+BnYtR2Sq8uzVPE3dAqGc
umyPiDknD8LMpmYsX4WA8n7ZCBCkZk8=
-----END CERTIFICATE-----
Generated at Tue Jul 1 21:03:54 2025 by rpki-client