Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2679a45b-9abc-3ca1-aace-ea6b25872ae4.roa
File:                     2679a45b-9abc-3ca1-aace-ea6b25872ae4.roa (raw, json)
Hash identifier:          k1n78OoGNS2kLjEQStN4m52D+3p/e4lyNHMaqSAuLaI=
Subject key identifier:   4F:61:43:55:C9:74:A7:3B:BF:AF:BF:A1:94:E0:D2:37:4A:DE:57:F9
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B8A7CD609DA7568034FBB8400
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2679a45b-9abc-3ca1-aace-ea6b25872ae4.roa
Signing time:             Thu 16 Oct 2025 13:00:38 +0000
ROA not before:           Thu 16 Oct 2025 13:00:38 +0000
ROA not after:            Wed 14 Jan 2026 14:00:38 +0000
asID:                     25198
IP address blocks:        104.252.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8a:7c:d6:09:da:75:68:03:4f:bb:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 16 13:00:38 2025 GMT
            Not After : Jan 14 14:00:38 2026 GMT
        Subject: CN=264adf75-3db5-475c-8221-7c7235711845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e9:70:b9:57:52:df:02:c7:1f:58:95:ea:7f:
                    81:a3:af:51:54:be:71:a5:66:90:d6:e6:56:9e:0a:
                    47:9b:4b:dc:d7:a9:3d:25:71:81:cd:24:59:29:ed:
                    ea:e1:26:18:83:38:48:2d:78:d3:62:58:8f:bd:1b:
                    57:5c:3d:c2:e8:c1:d1:80:49:bb:e4:7a:f8:e1:47:
                    47:a2:dd:61:b7:38:d6:13:30:c6:cd:2c:b6:06:14:
                    5a:a5:80:0c:dd:ca:aa:e7:cc:df:a3:2d:71:3e:d7:
                    6b:b4:7c:9e:99:8b:cf:5d:b2:c0:25:9a:4c:92:1d:
                    31:f9:fb:49:a7:b8:24:1c:da:62:2c:e5:69:8a:2c:
                    07:77:58:5f:76:62:57:bf:d3:16:42:35:09:90:c0:
                    f3:84:05:41:af:f3:7e:44:6a:60:04:07:03:39:3a:
                    da:87:d8:64:46:90:79:18:db:b9:9a:73:72:80:d2:
                    ff:a8:0b:b3:1c:84:be:fc:7a:19:10:55:7c:a0:a1:
                    65:d6:d8:b9:9a:1d:5f:a7:87:97:ef:75:64:b1:8a:
                    35:4c:7a:fa:8d:cb:b5:af:f8:c3:26:b1:21:f2:7f:
                    0b:dc:ea:9a:cd:48:f5:d2:0c:cb:de:44:c7:23:7b:
                    f3:13:e8:a8:bf:09:1c:30:d3:fa:90:9e:5c:2c:32:
                    37:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:61:43:55:C9:74:A7:3B:BF:AF:BF:A1:94:E0:D2:37:4A:DE:57:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2679a45b-9abc-3ca1-aace-ea6b25872ae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:76:b8:bd:24:54:31:79:b5:30:17:b5:91:a1:83:5f:07:cb:
         df:c8:e9:78:ed:50:f5:b9:cf:0d:e1:d9:3a:b2:b2:c0:c1:5e:
         b9:7d:31:40:d2:0d:8b:53:57:1b:fd:4c:a0:98:32:9e:99:a7:
         02:22:7e:02:f9:ce:a5:29:4a:7a:88:3e:20:3a:2d:5e:68:8f:
         94:ac:90:5a:93:34:33:60:01:5c:ff:13:14:43:cc:ef:05:5e:
         ec:2b:00:76:60:d8:dd:40:db:d6:17:b0:26:0f:5a:89:28:8b:
         a0:1a:92:d6:1d:37:da:1d:51:27:83:2d:f5:81:b3:c1:7e:75:
         79:53:dd:95:62:0a:6b:86:8e:d0:c3:d1:df:79:13:dd:f8:cb:
         f0:d7:97:98:1b:64:38:79:c6:6c:ab:5e:72:1d:8d:22:cf:17:
         cf:87:a1:2f:10:c4:cd:6f:13:b5:5b:a9:04:e4:15:40:84:99:
         74:43:51:74:b4:4a:e4:1d:1f:fc:b8:a4:79:6b:d5:f1:66:1a:
         1d:1e:c4:a0:c4:ed:89:8b:70:50:60:da:0e:44:7f:0c:3b:91:
         17:85:f3:41:37:72:69:ba:c1:46:4e:10:ab:ec:5a:cf:aa:67:
         0f:41:56:60:69:77:29:2b:f5:a7:ab:de:99:94:95:09:0f:aa:
         cc:fe:2a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:31:19 2025 by rpki-client