Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/27d4f928-b538-3405-8023-16b36c925b1f.roa
File:                     27d4f928-b538-3405-8023-16b36c925b1f.roa (raw, json)
Hash identifier:          3hO+08r8BAKcuG3q0uOMs2m8oIgftjP14sLanafrQXo=
Subject key identifier:   C8:74:12:3B:0F:CE:B6:D0:6F:A3:AA:2C:F1:6A:F5:41:F3:3C:6F:DB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B64CE38504EACE50202BD0FE0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/27d4f928-b538-3405-8023-16b36c925b1f.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     10557
IP address blocks:        104.252.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:38:50:4e:ac:e5:02:02:bd:0f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=5fb53d96-a3ac-4082-975f-c42ad2b1382e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b3:52:ce:86:b7:07:1b:30:28:7e:f7:02:83:
                    6e:a5:31:93:85:76:a7:f9:39:d5:73:0a:99:a1:6b:
                    ae:1f:15:12:b8:47:13:7b:c5:6b:f5:6e:1a:92:be:
                    ea:32:33:9a:95:7d:c2:dc:ba:e9:28:e7:e1:5e:c0:
                    5c:94:ae:97:7f:39:21:f6:05:68:e7:b5:d5:c9:91:
                    a9:a1:49:9f:f6:88:12:e5:b6:5e:a5:b1:87:dd:4e:
                    6c:53:22:5a:e7:99:1f:ca:59:4c:1b:c5:08:a9:6e:
                    22:78:20:db:02:60:a2:4f:54:2e:62:bf:50:46:37:
                    0d:79:fb:4e:5f:99:ed:a5:3d:14:c8:4e:eb:ff:d8:
                    f3:c4:54:06:97:36:71:20:43:58:7e:2c:b6:aa:df:
                    b7:bb:c7:2d:4d:79:d0:96:09:94:b7:a8:c5:51:53:
                    dd:a5:8d:77:35:72:04:fc:2f:1b:d0:c3:98:28:3c:
                    62:62:60:05:ce:aa:72:e1:75:0c:3b:1d:b7:f1:7b:
                    55:ef:0e:3c:51:e7:4e:ca:1f:77:a6:3f:dd:a3:14:
                    3d:fd:e5:c2:36:ba:01:ca:d6:cc:31:7d:16:62:55:
                    01:b3:19:7c:98:7a:29:28:50:9c:c1:05:cd:3b:c5:
                    7e:c3:92:9c:2d:74:b7:2f:55:aa:38:27:0e:3d:cf:
                    40:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:74:12:3B:0F:CE:B6:D0:6F:A3:AA:2C:F1:6A:F5:41:F3:3C:6F:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/27d4f928-b538-3405-8023-16b36c925b1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:58:0b:e6:41:24:99:5b:f2:b8:83:df:58:ff:bc:07:06:4b:
         0b:8b:ca:71:d5:24:c5:85:a2:c9:5e:3a:8a:ef:ea:02:17:e5:
         ca:25:0c:d5:01:44:93:a7:ff:bb:3f:a3:3d:13:ad:81:d5:ac:
         75:f5:3f:7e:bd:22:9b:a3:12:40:5d:d9:e1:b1:bc:e4:28:1d:
         af:61:3e:4b:cd:8d:15:36:d0:7b:2c:d8:43:df:63:55:a7:f1:
         d4:93:50:3e:a9:c9:67:81:b5:d0:f5:d8:56:f6:a5:8e:39:08:
         a5:74:e2:73:8d:42:3e:a1:52:db:a5:7c:fc:12:ef:c8:3f:a4:
         24:5c:90:f8:00:c0:ee:71:1c:11:92:93:fb:0f:0e:fa:ff:a5:
         27:80:e4:16:b3:2f:a4:7a:d1:18:eb:cb:e3:94:62:08:fb:ba:
         18:64:2a:d5:c8:cb:cb:ec:49:75:38:b1:18:c0:91:6c:da:9a:
         2c:9d:f6:f9:f6:28:81:a6:96:73:d7:e6:c6:ca:88:f8:27:91:
         46:13:62:37:e3:13:0e:c3:1d:a6:78:f8:74:23:ac:3f:50:2c:
         d1:3d:43:53:57:0c:74:dd:cc:e0:0e:7c:2b:59:51:71:94:6e:
         fd:74:de:bd:f8:2f:cc:85:dc:a9:c1:ed:e0:36:b4:b1:07:3b:
         e3:05:a1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:16:00 2025 by rpki-client