Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5765161a-dcc7-3ff2-8359-3048a388a735.roa
File:                     5765161a-dcc7-3ff2-8359-3048a388a735.roa (raw, json)
Hash identifier:          gz3PuP8DMjbI1oayhRt6wQVgAgQ18ep5y9tHqCiI+aM=
Subject key identifier:   E7:C3:52:BF:6B:86:14:64:ED:33:D1:3B:34:65:38:33:41:C6:78:F5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849CBCF8333425612E2D0786500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5765161a-dcc7-3ff2-8359-3048a388a735.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     7018
IP address blocks:        104.253.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:83:33:42:56:12:e2:d0:78:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=64939f7b-d00b-46e6-9403-d096a9388e04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d7:5a:5a:29:b0:6a:91:e6:5d:73:a6:c4:df:
                    ea:d5:43:c9:3a:84:88:62:61:f2:0a:0f:15:75:dc:
                    8a:56:47:b8:ac:1d:44:26:d5:08:71:9a:28:14:31:
                    50:11:ca:6b:00:1c:70:fd:2b:62:83:5d:56:56:19:
                    02:9f:f0:54:44:18:6f:33:39:d8:18:9b:5e:ab:98:
                    29:85:3a:20:96:e5:82:69:b2:7f:29:0f:80:e0:fa:
                    c2:b8:26:49:2c:d2:e1:5a:c0:fd:92:95:34:c6:6d:
                    cf:12:a9:85:8f:69:1b:c5:cd:9a:6e:53:65:fb:9d:
                    18:6b:d2:52:b0:37:0c:98:c6:23:25:06:70:8d:e1:
                    7d:83:f3:64:e7:16:a9:6d:d2:42:1f:94:47:32:84:
                    2b:31:b4:ea:e7:a3:f3:2b:b5:cb:97:c8:e2:9b:50:
                    76:33:67:71:e6:aa:4d:4a:c2:82:48:bd:5d:dc:3e:
                    58:71:c6:93:89:c9:83:85:8a:79:61:51:00:81:09:
                    2f:30:c1:02:70:31:9b:d9:28:69:1f:c9:66:d6:65:
                    44:50:e2:93:c9:8b:cf:bc:7d:49:85:aa:f5:3e:32:
                    4a:ad:4c:89:92:68:c6:d7:c4:5b:9c:03:b4:97:bb:
                    69:56:30:25:14:ce:6e:5a:75:93:a6:0e:95:bb:28:
                    d3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C3:52:BF:6B:86:14:64:ED:33:D1:3B:34:65:38:33:41:C6:78:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5765161a-dcc7-3ff2-8359-3048a388a735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:32:59:8f:bc:79:7c:82:42:ae:2c:13:f2:90:d9:5b:62:a7:
         3e:eb:03:15:c2:ac:d6:4f:49:39:0e:47:73:1f:de:86:c9:7c:
         62:22:9f:a7:7c:43:5d:79:ff:4f:53:ee:c6:f9:59:7e:10:96:
         89:44:09:c3:36:92:7f:2f:4e:47:be:ee:97:6b:43:d9:8d:1e:
         b4:9b:91:cf:c2:b9:8f:8c:34:3f:35:0e:e4:ef:89:4b:a5:80:
         05:c9:c2:0e:06:58:ba:e6:37:88:a8:d2:22:6a:03:b5:82:5a:
         1e:f8:1b:15:83:bd:b0:a0:1e:34:c5:d5:0f:b3:e8:c6:c6:7b:
         00:57:f2:8b:8d:64:a5:f7:6f:93:be:9a:6d:4b:66:00:99:75:
         e0:95:7f:04:f7:6f:56:78:6c:b0:84:3d:de:16:b0:a8:01:ad:
         a8:43:5f:57:a9:02:d5:f0:08:c9:b8:82:51:98:f3:bf:0b:21:
         2d:40:10:3d:2e:f2:45:6c:ca:10:a3:85:36:e3:08:40:b2:43:
         67:cd:5b:aa:8f:66:47:61:7c:95:c4:ae:c7:ce:bc:e9:c4:7b:
         33:70:eb:53:62:a9:b7:2b:e8:f6:c8:67:02:c5:c5:04:75:2e:
         2b:fc:77:a0:47:7f:2c:79:1b:43:38:e5:26:76:76:46:4c:4d:
         d2:01:58:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:11:45 2025 by rpki-client