Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5de76767-fab8-333f-aaba-feab299a9953.roa
File:                     5de76767-fab8-333f-aaba-feab299a9953.roa (raw, json)
Hash identifier:          9z7WVfg9o42yR4NN8R+1kMgOvk6jnOyqlcuAmEQp+gg=
Subject key identifier:   37:3E:46:38:C9:01:99:9E:41:38:EB:9C:77:24:A8:A7:ED:3A:E3:72
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AEE2690FD2F28A192F3272D80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5de76767-fab8-333f-aaba-feab299a9953.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     396356
IP address blocks:        104.252.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:90:fd:2f:28:a1:92:f3:27:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=0c61517e-886a-4eb6-bfbe-b693a5bafdde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3b:a2:59:e9:0d:65:16:c7:7b:82:63:22:60:
                    ce:24:a8:be:b6:fe:51:ca:95:cc:0b:63:ab:5d:4f:
                    00:be:f4:4a:3a:1c:ba:90:de:22:25:83:75:2d:70:
                    60:60:d0:e3:29:e1:17:13:86:54:48:25:b9:10:a0:
                    45:7c:bf:d4:40:f0:62:60:76:f9:86:30:2c:b2:22:
                    bc:0f:59:ef:4b:b3:78:d3:da:b3:af:cf:d7:3b:a7:
                    9d:2b:92:e0:5b:37:dc:09:b7:6c:58:b6:b8:35:51:
                    22:8c:19:d1:dd:95:ba:d6:df:7d:9f:97:33:08:0f:
                    fd:34:0f:c9:b2:91:f9:3b:3b:90:be:57:1e:cf:e4:
                    1e:89:83:83:3e:38:d3:9c:f2:2a:7a:03:01:70:a5:
                    28:84:11:2f:96:52:77:32:7c:5d:f4:72:1e:3f:b8:
                    17:13:74:f1:25:42:89:bf:1a:96:b7:41:ec:47:fe:
                    68:2d:dd:35:dc:cb:f1:f6:8f:9f:da:c2:d3:fd:6c:
                    a3:bf:85:91:cd:a9:d8:1c:1e:67:1e:35:cd:c9:6d:
                    58:32:1c:0b:28:0b:68:8f:f1:be:02:58:3a:13:d7:
                    64:91:ec:78:e5:6d:fb:4b:06:d2:01:c1:09:5d:33:
                    e3:d9:52:20:00:5d:12:97:6c:1e:36:ed:f1:34:7e:
                    d4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3E:46:38:C9:01:99:9E:41:38:EB:9C:77:24:A8:A7:ED:3A:E3:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5de76767-fab8-333f-aaba-feab299a9953.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:be:83:26:32:b4:ed:b3:cd:2f:06:05:99:79:9f:a0:01:8a:
         87:6c:aa:ce:d4:c9:33:f9:2e:8a:73:2e:33:f1:dd:8b:55:93:
         e3:1b:86:ec:f9:ee:ed:e9:34:1c:16:29:1d:a9:26:41:5c:6f:
         de:a5:bd:74:90:ac:de:3e:70:a4:2c:fd:90:0f:53:bb:b5:a0:
         b6:6b:2c:3a:8c:c8:52:f0:80:f6:be:e8:5c:d3:db:8b:ce:79:
         4b:db:34:1c:6f:4d:e0:99:b3:0c:1a:75:8e:67:5c:e0:70:69:
         9f:1d:0b:06:ef:6a:42:07:97:9c:e2:58:11:19:0f:2d:0c:95:
         ab:f8:e6:cd:81:c4:a5:a0:fc:21:fb:8a:7c:7b:d0:c2:96:d0:
         c6:85:0e:70:b1:c5:3a:dd:d6:e8:3f:c2:ae:98:e6:99:84:17:
         73:c3:12:0e:3c:07:49:e0:e5:87:f9:c2:10:9d:a8:31:a8:be:
         6b:bd:96:eb:3c:44:4a:c7:bd:28:45:a3:83:34:0f:f8:88:c4:
         df:d2:ac:be:60:ed:05:50:5a:d8:6c:88:a6:45:9d:f1:b1:04:
         db:31:c6:04:43:4f:36:3b:58:60:40:cc:b2:da:a9:31:c2:24:
         05:0b:3e:14:36:b5:52:b0:1f:90:69:97:ad:b1:c5:2a:00:e2:
         05:ac:c6:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJpD9LyihkvMnLYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk
MGM2MTUxN2UtODg2YS00ZWI2LWJmYmUtYjY5M2E1YmFmZGRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTuiWekNZRbHe4JjImDOJKi+tv5RypXMC2Or
XU8AvvRKOhy6kN4iJYN1LXBgYNDjKeEXE4ZUSCW5EKBFfL/UQPBiYHb5hjAssiK8
D1nvS7N409qzr8/XO6edK5LgWzfcCbdsWLa4NVEijBnR3ZW61t99n5czCA/9NA/J
spH5OzuQvlcez+QeiYODPjjTnPIqegMBcKUohBEvllJ3Mnxd9HIeP7gXE3TxJUKJ
vxqWt0HsR/5oLd013Mvx9o+f2sLT/Wyjv4WRzanYHB5nHjXNyW1YMhwLKAtoj/G+
Alg6E9dkkex45W37SwbSAcEJXTPj2VIgAF0Sl2weNu3xNH7UTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDc+RjjJAZmeQTjrnHckqKftOuNyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNWRlNzY3NjctZmFiOC0z
MzNmLWFhYmEtZmVhYjI5OWE5OTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPzdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACq+gyYytO2zzS8GBZl5n6ABiodsqs7UyTP5LopzLjPx3YtVk+Mbhuz5
7u3pNBwWKR2pJkFcb96lvXSQrN4+cKQs/ZAPU7u1oLZrLDqMyFLwgPa+6FzT24vO
eUvbNBxvTeCZswwadY5nXOBwaZ8dCwbvakIHl5ziWBEZDy0Mlav45s2BxKWg/CH7
inx70MKW0MaFDnCxxTrd1ug/wq6Y5pmEF3PDEg48B0ng5Yf5whCdqDGovmu9lus8
RErHvShFo4M0D/iIxN/SrL5g7QVQWthsiKZFnfGxBNsxxgRDTzY7WGBAzLLaqTHC
JAULPhQ2tVKwH5Bpl62xxSoA4gWsxqo=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:26:52 2025 by rpki-client