Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8582cabb-2e5e-30a8-8229-a455b005e6b8.roa
File:                     8582cabb-2e5e-30a8-8229-a455b005e6b8.roa (raw, json)
Hash identifier:          UUGsc0wDk4ZWDryEgflqyiofpNthaUCp+MPMBiMk4K8=
Subject key identifier:   BC:E9:9C:9F:FB:70:BD:E9:92:39:BB:95:41:3B:85:8C:C6:E3:5C:86
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AEE2691291B1337B1FEEC9C80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8582cabb-2e5e-30a8-8229-a455b005e6b8.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     396356
IP address blocks:        104.252.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:91:29:1b:13:37:b1:fe:ec:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=3a56288c-0207-4430-b3a1-d993591287b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:58:69:39:52:19:e4:84:eb:da:3c:01:78:be:
                    02:21:9f:a5:f8:e3:ba:70:77:3c:ce:53:02:5d:07:
                    a5:95:2d:23:5f:c1:10:01:91:85:3e:26:34:f9:5e:
                    03:c7:e0:e2:4b:9d:90:f6:4c:47:7f:a3:74:3b:e8:
                    b4:80:45:68:4d:61:e8:ae:e3:d8:bb:03:5f:57:92:
                    64:cd:1e:4c:6d:9d:89:c3:71:d4:fc:57:a7:2a:72:
                    f9:0b:70:94:8e:fd:a2:18:3d:ad:50:7c:3c:cc:e6:
                    f3:f8:2c:d2:5f:5a:f9:4d:f4:7e:34:f5:f4:dd:41:
                    0d:bf:98:9a:a4:f0:39:ed:1b:53:ce:1e:f6:0b:fb:
                    de:ee:98:a6:3b:6d:32:81:19:ee:ad:96:f4:c8:7e:
                    87:56:5b:95:08:1a:72:c7:1f:f3:fc:a6:a7:71:6c:
                    ae:f7:cd:bf:d5:f1:d6:04:d9:0d:ad:55:ba:fc:c3:
                    c0:37:fd:42:b1:26:56:64:ab:5c:6d:3b:09:65:ac:
                    d3:8c:7b:5f:3d:27:bf:47:1d:c3:55:6f:40:84:31:
                    d8:06:3e:65:41:21:85:15:12:fc:66:e4:84:e7:b9:
                    5c:53:3f:a0:fa:82:ab:bc:63:be:05:03:c9:aa:f1:
                    01:f9:4b:45:60:fd:d3:62:dc:5f:0f:c4:f8:ce:94:
                    e7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E9:9C:9F:FB:70:BD:E9:92:39:BB:95:41:3B:85:8C:C6:E3:5C:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8582cabb-2e5e-30a8-8229-a455b005e6b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:06:ba:d8:d2:5c:b9:87:cc:80:89:36:7f:d3:7c:39:52:31:
         45:cb:0b:1c:93:cd:e8:7c:f8:b8:73:b0:e0:24:ca:09:e0:3e:
         d4:19:0a:d5:db:fd:3a:50:e8:c0:16:ed:e2:c5:54:b1:9e:60:
         e5:a2:61:f8:b0:c0:9e:71:aa:37:dc:a2:7e:45:3a:fe:cd:e1:
         01:0d:79:39:62:f5:a6:e3:73:30:a8:3f:bc:79:b6:1c:29:77:
         45:54:08:3d:63:f8:86:97:61:b2:d6:8f:2c:bf:6b:9c:65:d0:
         16:98:42:e2:33:c2:20:cc:52:55:73:ac:af:bd:f2:d2:27:6b:
         e3:48:db:ab:70:59:1b:10:12:a0:40:af:c2:18:86:15:cb:3c:
         4d:f9:cd:23:76:59:df:9d:2c:e0:da:22:eb:9d:a6:fb:66:76:
         3a:71:53:38:25:fc:db:66:23:4a:7f:71:12:e9:11:55:d1:84:
         88:bc:60:f6:8f:26:e3:ce:de:ff:f8:41:5c:5a:0f:39:9f:00:
         5d:53:60:38:2e:e6:50:6a:2d:93:e5:92:99:d0:29:36:48:51:
         31:0d:b3:24:32:14:d1:98:45:6a:10:0a:19:79:ab:73:8f:87:
         48:7b:6f:76:70:77:36:87:7e:24:42:39:9e:ec:85:a1:f1:88:
         83:14:5b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:40:34 2025 by rpki-client