Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3e1e4021-fcd8-34ed-920b-26488e360366.roa
File:                     3e1e4021-fcd8-34ed-920b-26488e360366.roa (raw, json)
Hash identifier:          OzhKqzLIMLZ9kRYMjGSfrA7UU0x2UwrCIOpXQtLFyws=
Subject key identifier:   9C:C9:FB:4D:A5:A1:EE:2D:C2:FD:DB:87:C1:76:1D:01:4A:C7:09:00
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AD23C349928F6ACB87C2C2500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3e1e4021-fcd8-34ed-920b-26488e360366.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     214238
IP address blocks:        104.253.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:34:99:28:f6:ac:b8:7c:2c:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=8ca5506d-ad9b-4666-96be-e8a6943ef25e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2e:d5:d7:3d:60:69:c4:00:21:9f:ad:cd:1a:
                    36:40:e4:2e:ac:f5:6c:13:36:95:76:ab:0a:2f:75:
                    ad:ef:d5:92:c6:eb:47:75:ae:9f:77:3f:55:80:2a:
                    52:c0:e7:46:35:57:39:5e:c8:be:8b:81:fc:84:32:
                    d9:12:00:c1:c0:e0:58:c1:b5:ba:c7:15:6e:1e:a9:
                    3d:0a:98:eb:cd:95:3f:c7:b9:0b:e1:78:90:40:97:
                    74:c5:51:6a:1c:ac:89:1b:c5:32:62:c7:82:77:81:
                    f9:10:20:ac:16:de:a0:e6:4b:98:63:db:1e:b0:d1:
                    a6:98:92:02:1d:6c:b7:2e:92:6a:0e:b7:fb:c2:32:
                    01:3c:8d:2a:2e:78:25:8a:7c:c3:5e:91:1b:29:38:
                    3f:f3:53:cd:15:c4:b9:90:60:da:9a:dd:25:c6:58:
                    e4:9d:aa:9e:8b:c8:14:47:83:da:72:1e:9d:2b:1e:
                    0e:19:d8:33:1d:cf:39:5e:38:c1:02:81:65:f5:19:
                    89:c3:78:2d:26:b3:c4:7c:2d:61:5f:d5:77:c0:cb:
                    1f:fb:aa:bd:50:10:b7:56:9e:1e:71:d6:91:34:8f:
                    d3:d2:50:ec:88:ed:84:f2:b0:aa:24:48:16:49:48:
                    9f:e3:5c:96:ef:ea:f9:89:0b:87:da:c2:bb:8a:45:
                    f4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C9:FB:4D:A5:A1:EE:2D:C2:FD:DB:87:C1:76:1D:01:4A:C7:09:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3e1e4021-fcd8-34ed-920b-26488e360366.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:11:18:09:50:ad:74:d3:53:a2:25:20:94:bd:b7:12:ac:cc:
         76:3e:b4:95:4d:7c:57:21:a7:bf:32:7d:48:bf:74:e0:96:a8:
         47:c0:7e:7e:fc:e6:13:03:88:d9:30:5a:02:b7:ec:e6:94:d2:
         dd:91:40:46:26:7b:58:d8:c1:3e:83:d0:b5:77:7a:37:45:0d:
         77:bc:f8:7a:d2:99:c6:3d:0b:a5:c1:88:cf:ea:88:6f:bf:71:
         00:71:7a:fc:81:9f:8f:1f:ab:f8:96:7c:70:57:a4:1d:8f:46:
         22:9d:77:7f:88:e6:73:80:4c:b4:bb:83:00:91:0d:c9:9b:92:
         42:00:5c:94:6f:a8:8c:81:be:6d:f8:17:ae:da:be:d6:6d:a8:
         5d:d2:bc:4b:47:03:f3:a9:68:82:9c:64:f1:e6:a4:ab:f7:0d:
         b6:be:12:91:2e:d6:ea:cc:80:d3:b7:20:fa:db:80:1f:43:af:
         f5:e4:31:5e:3e:d6:b6:be:2b:dc:80:d1:80:f1:5d:ac:c5:16:
         90:c4:23:3a:4f:65:94:7e:65:af:c4:14:9c:6e:3c:2e:e8:33:
         02:73:04:76:9e:22:d0:ff:b7:f1:a2:83:7e:3d:55:e3:47:5b:
         15:3d:fa:4b:7a:e7:5d:5d:ec:7d:08:eb:3b:c4:c8:70:7b:93:
         e1:51:9c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:33:43 2025 by rpki-client