Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4ee8154f-f735-3db7-8d5b-961cb688f989.roa
File:                     4ee8154f-f735-3db7-8d5b-961cb688f989.roa (raw, json)
Hash identifier:          KVXT709eCDk0+jpn1izn2po7cdrcnaf0o8/aGEjaPB0=
Subject key identifier:   5E:24:BF:2C:AE:E5:02:21:29:BD:F4:FB:F8:51:A7:89:C3:34:0A:82
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AF0F14C31E1DE6A00D3DAD180
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4ee8154f-f735-3db7-8d5b-961cb688f989.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     9009
IP address blocks:        104.253.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:4c:31:e1:de:6a:00:d3:da:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=20ad1fe0-f893-4f16-b608-f45b76c346b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6c:a0:ad:4f:86:d2:8d:5a:06:88:99:9d:87:
                    42:a0:49:b7:c1:da:c9:96:c8:c7:75:c7:b2:3c:83:
                    3f:13:c6:15:b4:29:e2:af:0b:80:4b:ce:9b:79:c2:
                    d9:ec:0a:90:3d:20:64:c1:55:f9:66:c4:38:cf:5a:
                    15:89:1f:a8:3a:cc:04:d5:ff:bc:33:4b:c0:c1:1d:
                    7b:07:ac:2e:e7:a3:1f:d0:3b:7f:c1:1d:a8:a4:ad:
                    3c:6e:5f:21:62:c3:df:97:38:b2:0f:f1:42:8d:5a:
                    e0:ef:48:6f:fc:83:96:26:75:6e:bb:e0:d4:78:b6:
                    c4:0d:96:8c:a8:d1:9e:0f:cf:2d:3f:e2:fd:24:ba:
                    7d:67:72:d1:af:46:c4:fe:b7:b3:3c:55:6a:a8:e9:
                    e5:fd:a7:7e:d9:48:0e:8b:7a:77:bd:33:6b:c6:d3:
                    20:e3:a4:40:32:c4:2e:09:7f:6c:f0:d2:38:80:5f:
                    6d:bd:ac:24:9b:c6:b4:58:5c:5c:1e:30:64:db:85:
                    19:f3:61:7b:73:00:ca:df:4b:b1:e0:e9:43:ab:ba:
                    d3:84:be:fd:af:fb:5d:dc:79:5b:3c:89:7b:c5:df:
                    70:83:dc:01:81:ac:12:38:23:5f:3c:f9:3f:28:cd:
                    30:db:bb:f7:13:c8:e4:68:0c:f1:92:a0:58:b8:95:
                    79:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:24:BF:2C:AE:E5:02:21:29:BD:F4:FB:F8:51:A7:89:C3:34:0A:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4ee8154f-f735-3db7-8d5b-961cb688f989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:d5:c7:3d:b2:06:fa:6b:5e:e1:cd:bf:36:60:af:a3:b3:ee:
         13:a7:1a:8d:cc:d9:e6:69:49:8f:fb:0c:14:cc:41:ce:bb:da:
         d1:e4:32:8e:16:04:bd:d7:c6:8e:08:86:63:73:73:91:f9:38:
         a9:bd:41:b8:ab:a8:e1:5f:4f:94:64:a9:75:31:88:22:81:20:
         e6:52:91:c8:1a:69:02:0b:6f:3f:69:ce:14:4c:6a:95:f5:1e:
         6e:47:fd:3e:81:d6:f5:4d:0f:bf:90:0d:77:ad:91:a2:fe:6b:
         d0:3a:0f:ae:dc:21:bc:dd:f9:95:9d:56:2c:62:b4:d0:e0:3b:
         6c:f4:66:90:40:8b:cf:8f:2a:a9:38:97:ea:60:a8:d8:2c:7c:
         30:c5:d8:64:91:3f:ed:e3:12:72:b4:cb:04:26:27:9e:07:f9:
         9f:42:28:9e:0f:1b:2f:66:cb:f7:1e:7e:f6:e7:90:4d:48:1d:
         0f:16:3c:41:84:a8:5a:99:52:16:c5:07:28:a3:77:d5:ea:33:
         84:3e:c6:44:08:e8:02:5e:3c:d4:c8:68:b4:ba:db:11:4e:91:
         f5:36:fa:2e:95:46:0a:34:19:d9:5f:3d:bc:1a:e0:66:30:b9:
         da:42:97:86:51:6d:92:84:11:c1:38:d0:f7:f0:ed:16:a3:bf:
         fb:59:fe:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:31:04 2025 by rpki-client