Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2c4cb7d4-0c71-3a3f-9050-d3182f3fb907.roa
File:                     2c4cb7d4-0c71-3a3f-9050-d3182f3fb907.roa (raw, json)
Hash identifier:          aABDnIwsLDyOQz4xcje6x8+dbRJ2dQRC9EhN/aUVG3A=
Subject key identifier:   8B:02:DA:05:26:88:DC:4D:D0:C3:13:DC:AE:A8:D3:86:6F:1F:32:4D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A49705D1CC5FF487970F26240
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2c4cb7d4-0c71-3a3f-9050-d3182f3fb907.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     44133
IP address blocks:        104.253.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:5d:1c:c5:ff:48:79:70:f2:62:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=b162ca12-6532-4a37-b0ae-785848f603d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:93:6a:f3:44:b5:c6:e4:31:ed:49:f2:87:f4:
                    e7:0a:1c:c2:4f:d7:ff:a5:65:0c:29:d6:63:48:51:
                    26:18:84:02:10:1d:04:d5:64:44:3e:9d:ec:dc:c2:
                    f3:09:2b:13:14:66:f7:f9:21:99:88:e9:7c:c6:9b:
                    44:c6:a7:82:70:96:d9:b7:aa:3d:18:3d:f4:26:5b:
                    3f:42:d3:5c:f6:1d:a1:50:15:e7:c0:04:f0:23:63:
                    da:d0:74:c8:b8:12:9b:16:f9:ca:44:6d:f4:40:47:
                    db:c4:ab:3b:03:ad:08:a0:5f:a1:40:c6:c6:50:b2:
                    1b:da:35:58:d2:c0:3d:80:a1:95:a3:1d:26:52:35:
                    ef:20:6c:09:3d:e0:56:7d:04:38:f4:54:c8:d0:7c:
                    79:e1:71:75:92:8f:b6:bf:02:46:62:5a:1e:3d:c2:
                    75:17:f1:90:0b:1d:98:b5:56:e7:5d:75:7a:0a:7e:
                    1b:fe:95:e9:3a:dd:98:1b:94:e1:86:c9:f2:b5:51:
                    6b:5b:ff:ea:8e:fc:44:e9:60:6e:ca:72:eb:0b:a4:
                    a7:c2:32:74:62:6e:46:5e:8b:28:9a:84:1a:62:9a:
                    74:69:4a:f5:de:aa:64:35:3a:7d:01:b6:40:4c:6c:
                    73:2a:cc:c3:d0:31:55:3e:b0:20:74:aa:c6:a8:06:
                    2f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:02:DA:05:26:88:DC:4D:D0:C3:13:DC:AE:A8:D3:86:6F:1F:32:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2c4cb7d4-0c71-3a3f-9050-d3182f3fb907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:65:06:38:ed:b9:3e:9c:ad:ac:16:c8:db:10:95:62:7f:66:
         dc:31:e8:df:a2:2b:4d:bd:12:31:f4:cd:dd:e2:b7:3b:ad:67:
         0c:56:86:2a:9f:30:12:ce:4d:26:e6:9e:de:b8:51:cc:5a:78:
         83:3e:b9:b5:3d:d7:ec:f6:d9:16:3c:3e:3f:e1:f4:bd:5f:bc:
         c4:e5:2f:e2:5e:d9:a9:7c:78:b8:0a:18:73:d3:e4:0f:02:67:
         ca:f4:81:5c:51:5b:4e:8e:04:3c:c2:39:c4:19:04:43:8d:a8:
         b5:4c:c9:c5:0a:56:54:ef:60:65:d8:2f:42:3a:89:67:b3:da:
         7b:6f:14:da:c0:b5:dd:be:d0:6d:e2:a8:38:ac:ef:80:4d:8d:
         15:60:af:cf:61:1c:01:6c:af:ce:d9:35:29:6d:21:fb:a6:0d:
         53:2a:5d:1f:14:63:2b:2e:06:e5:83:fd:cc:ba:23:a2:73:ea:
         48:bb:d6:82:a4:70:2a:bc:28:0f:c4:e0:b8:1b:1b:c0:50:31:
         cb:e3:59:e7:92:03:3c:59:07:1a:30:24:6e:48:f7:ef:4b:3b:
         d1:76:35:5c:47:76:fb:72:83:ff:7c:bf:d4:0d:f6:43:91:54:
         08:fe:77:e8:2c:3f:0e:ee:86:ad:44:f6:7b:95:88:76:0b:a2:
         fc:39:dc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:44:52 2025 by rpki-client