Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9a5c8f8f-cd1e-3c98-b0f9-ebeec78b0525.roa
File:                     9a5c8f8f-cd1e-3c98-b0f9-ebeec78b0525.roa (raw, json)
Hash identifier:          Cpo50FyHgQ52/N5/TrKmewSiNfZvohXofwB+Rvi6+PY=
Subject key identifier:   4A:4A:9D:FF:27:5A:44:80:26:7B:98:47:1C:A4:57:68:5B:EE:1C:80
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B92DD8F5E24089938E6F1C8E0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9a5c8f8f-cd1e-3c98-b0f9-ebeec78b0525.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     18779
IP address blocks:        104.253.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:8f:5e:24:08:99:38:e6:f1:c8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=cbc7cdfc-f8f0-4dcd-9092-6587faefa58b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5d:ea:6c:91:8c:12:08:f5:b8:6f:ba:12:9a:
                    76:de:e5:13:f9:13:20:9a:53:3e:f3:23:3b:05:da:
                    67:f9:a9:f4:19:60:6f:03:4c:13:63:b5:2b:87:11:
                    a7:40:a6:0f:45:36:30:d2:65:b5:c6:e6:a9:ee:4b:
                    1f:b7:a2:cd:cd:51:ca:7c:82:d7:99:0f:e2:d7:74:
                    1d:30:0b:3d:02:8c:56:03:e6:02:74:a5:70:5b:23:
                    c2:9f:41:33:09:cf:cd:50:c3:0c:80:83:aa:0b:fc:
                    f3:8d:61:ca:bd:4f:1b:67:a9:47:52:57:6c:89:da:
                    a6:5d:88:fb:b0:06:5a:76:d0:f1:66:84:39:bf:c4:
                    2c:ca:fb:4f:6f:66:53:54:8b:5c:4a:7a:73:0f:1c:
                    a4:c4:67:0f:b9:16:e9:32:1a:e5:11:73:c0:8a:17:
                    86:5e:91:ce:97:37:5d:13:82:4e:63:88:ad:ab:6e:
                    bf:6b:a9:1a:37:04:c0:40:68:0a:51:08:d1:a8:e7:
                    2d:23:05:e6:97:51:fc:68:fc:b7:65:77:5a:f1:93:
                    05:1a:07:3a:df:cb:a1:e8:8a:70:d6:a3:f7:64:67:
                    91:06:0a:45:a6:d4:f3:2b:e4:33:c7:8d:c5:be:49:
                    bb:11:6c:a9:51:83:24:92:4b:f1:42:60:05:ef:73:
                    00:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4A:9D:FF:27:5A:44:80:26:7B:98:47:1C:A4:57:68:5B:EE:1C:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9a5c8f8f-cd1e-3c98-b0f9-ebeec78b0525.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:7c:0d:84:16:d9:31:fa:f0:f6:62:ea:33:72:da:da:6f:0a:
         b6:a4:2a:04:2c:48:57:c4:40:cf:52:dd:a6:12:c4:dd:e5:2a:
         20:53:a2:90:e4:b7:31:ae:e1:5d:3e:51:61:fc:18:4f:53:8a:
         14:b4:e7:2a:77:be:c9:f9:58:74:ca:fe:a2:f3:d5:fa:65:b4:
         9c:54:de:64:e7:90:ff:04:d5:03:d9:5f:39:91:52:9f:ee:86:
         8d:c2:77:14:3f:dd:25:f2:ab:dd:95:75:7f:55:12:4f:48:40:
         c2:89:1e:8d:b7:2f:06:8f:81:b4:19:b7:35:7d:ec:63:ad:a1:
         77:ba:dc:46:ce:e5:8c:ce:e6:f8:9d:0f:28:cb:a8:a0:ee:d1:
         ea:c0:f2:63:83:a5:8f:9a:0f:d1:46:c5:e5:cb:84:bf:2a:3e:
         48:1a:b1:9e:48:68:36:cc:f8:08:24:5f:9b:ec:a9:37:45:a0:
         0d:5e:69:74:f6:1b:74:52:48:df:96:4e:dd:ea:a0:68:80:2c:
         0a:36:05:7f:be:8e:4e:11:45:01:0b:be:71:19:a3:c7:1c:e0:
         8e:d4:7d:2b:2c:26:4a:ca:b8:38:f2:1e:1d:d6:6d:93:d4:c8:
         c8:89:42:cd:6b:db:30:7a:be:2e:92:f3:49:a8:51:c1:29:b8:
         76:a0:bb:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3Y9eJAiZOObxyOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk
Y2JjN2NkZmMtZjhmMC00ZGNkLTkwOTItNjU4N2ZhZWZhNThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi13qbJGMEgj1uG+6Epp23uUT+RMgmlM+8yM7
Bdpn+an0GWBvA0wTY7UrhxGnQKYPRTYw0mW1xuap7ksft6LNzVHKfILXmQ/i13Qd
MAs9AoxWA+YCdKVwWyPCn0EzCc/NUMMMgIOqC/zzjWHKvU8bZ6lHUldsidqmXYj7
sAZadtDxZoQ5v8QsyvtPb2ZTVItcSnpzDxykxGcPuRbpMhrlEXPAiheGXpHOlzdd
E4JOY4itq26/a6kaNwTAQGgKUQjRqOctIwXml1H8aPy3ZXda8ZMFGgc638uh6Ipw
1qP3ZGeRBgpFptTzK+Qzx43Fvkm7EWypUYMkkkvxQmAF73MA4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEpKnf8nWkSAJnuYRxykV2hb7hyAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOWE1YzhmOGYtY2QxZS0z
Yzk4LWIwZjktZWJlZWM3OGIwNTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP2JMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADt8DYQW2TH68PZi6jNy2tpvCrakKgQsSFfEQM9S3aYSxN3lKiBTopDk
tzGu4V0+UWH8GE9TihS05yp3vsn5WHTK/qLz1fpltJxU3mTnkP8E1QPZXzmRUp/u
ho3CdxQ/3SXyq92VdX9VEk9IQMKJHo23LwaPgbQZtzV97GOtoXe63EbO5YzO5vid
DyjLqKDu0erA8mODpY+aD9FGxeXLhL8qPkgasZ5IaDbM+AgkX5vsqTdFoA1eaXT2
G3RSSN+WTt3qoGiALAo2BX++jk4RRQELvnEZo8cc4I7UfSssJkrKuDjyHh3WbZPU
yMiJQs1r2zB6vi6S80moUcEpuHagu4c=
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:48:15 2025 by rpki-client