Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9e98758e-4038-360d-83f8-226cfba1c4ec.roa
File:                     9e98758e-4038-360d-83f8-226cfba1c4ec.roa (raw, json)
Hash identifier:          uBhevY0iA+vEBfmQiIl83GnZe17ABu0d1R4cwyCGEBA=
Subject key identifier:   6E:A9:57:29:FC:70:74:ED:7C:BC:83:2D:B6:47:F0:E2:9D:DE:C0:99
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AEE26927E9934D2BF0EEB0EC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9e98758e-4038-360d-83f8-226cfba1c4ec.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     212238
IP address blocks:        104.252.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:92:7e:99:34:d2:bf:0e:eb:0e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=be5304a0-18bd-42af-966a-3174d58da0dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:00:6d:c8:46:5d:17:ae:e5:89:ef:62:36:7c:
                    10:4b:15:8e:60:42:0a:a3:b7:71:61:70:16:51:d9:
                    e3:c7:aa:c0:94:9d:d9:fb:38:4d:e7:85:f5:cc:52:
                    eb:4a:e3:40:a3:7e:d8:f8:00:c9:60:e3:5c:c8:b1:
                    f3:af:1b:ee:28:fb:79:7d:c7:49:3f:40:c5:1d:bd:
                    04:bb:f0:e7:bd:bc:98:84:de:af:f2:28:ca:fa:b6:
                    7c:4d:b8:79:82:3d:1b:88:2e:ee:27:76:9b:2b:dd:
                    6c:35:3a:69:87:6e:aa:87:5b:1b:97:f7:cc:4f:19:
                    57:65:3b:69:61:f2:ac:c3:68:ec:37:85:bf:77:19:
                    f4:df:77:77:f5:c0:e1:42:b5:9e:b6:38:20:1e:b0:
                    d1:6b:83:75:56:39:c9:73:00:9f:b3:8e:8c:08:29:
                    a1:94:a4:23:55:c6:ec:69:fa:10:be:c7:a4:b2:c1:
                    b5:6f:fa:ab:41:ec:a8:ea:36:a3:1f:b5:4b:04:4d:
                    0e:f3:c1:b8:17:c5:b7:71:86:a7:51:65:99:80:1f:
                    e0:d9:b4:2c:af:d5:20:df:4a:00:ad:c0:fa:90:ab:
                    29:94:53:4d:7a:77:64:1e:d4:a9:4a:36:fd:e9:9c:
                    42:a1:6c:7b:5a:e2:01:ec:e8:bc:85:8b:ba:a4:cf:
                    f4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A9:57:29:FC:70:74:ED:7C:BC:83:2D:B6:47:F0:E2:9D:DE:C0:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9e98758e-4038-360d-83f8-226cfba1c4ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:5e:df:9c:2d:ef:c5:2b:b8:16:16:bd:b7:0c:0b:1c:63:5f:
         60:23:74:52:b1:b5:de:74:82:6d:3c:59:5e:3c:8c:8f:ad:86:
         db:f1:17:08:f0:8c:3b:58:cb:d7:2e:9d:55:6d:cc:21:76:00:
         35:ee:0d:7a:19:93:06:3a:7a:96:60:e0:47:bc:e4:60:fe:fd:
         0c:a5:74:73:56:42:86:33:f6:6b:f6:7b:d7:cd:1b:aa:20:33:
         3f:e3:fc:35:81:ea:3e:49:00:69:d5:cb:20:83:3d:c6:9e:db:
         53:96:02:54:ee:95:22:2e:5b:1b:5f:d0:81:81:0a:17:71:38:
         53:07:59:04:e4:8f:fc:1b:21:ee:7d:b5:fe:7d:a9:3b:50:5a:
         6e:9e:41:12:27:6f:42:cd:34:24:9b:93:50:78:a9:2b:07:a9:
         16:68:b9:d0:06:69:0e:17:6b:ca:f6:82:8f:a8:4a:2a:f3:a9:
         cc:eb:f2:10:a1:72:2b:7b:0f:92:06:a7:41:44:6d:b5:1b:33:
         97:bd:71:25:0e:d0:44:55:69:ce:a1:1d:95:25:02:24:aa:5f:
         c4:ba:65:ff:6f:5f:0f:93:30:66:6d:ee:3f:c8:4e:e3:75:a5:
         05:dc:b7:7f:dc:79:db:7d:d4:ab:2e:c9:fd:fe:c9:39:12:9e:
         dd:34:92:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:26 2025 by rpki-client