Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ea8bd4cc-5f92-3d20-b5ca-9b5b5ef7e687.roa
File:                     ea8bd4cc-5f92-3d20-b5ca-9b5b5ef7e687.roa (raw, json)
Hash identifier:          8N5IacrTPZs4zPtZpWDfrrN5e/HxIaym5gYMbcz0Eew=
Subject key identifier:   2E:6F:27:25:77:64:21:3F:E5:42:00:EB:13:C6:CE:BD:D1:0B:BE:4A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A852EA63B3D77434E49DC5340
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ea8bd4cc-5f92-3d20-b5ca-9b5b5ef7e687.roa
Signing time:             Mon 14 Jul 2025 22:37:16 +0000
ROA not before:           Mon 14 Jul 2025 22:37:16 +0000
ROA not after:            Sun 12 Oct 2025 22:37:16 +0000
asID:                     44559
IP address blocks:        104.253.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:2e:a6:3b:3d:77:43:4e:49:dc:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 14 22:37:16 2025 GMT
            Not After : Oct 12 22:37:16 2025 GMT
        Subject: CN=63a6d877-373c-42be-8726-361093019683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a9:e9:bb:65:59:f2:38:63:71:a6:6e:d5:e5:
                    e9:01:93:21:97:a1:7c:01:72:7e:4e:17:05:2b:ea:
                    94:b1:4d:b3:fd:7b:db:d4:19:98:a3:12:42:bb:34:
                    30:e3:20:17:4b:27:08:ff:bd:97:d0:e9:40:9c:54:
                    9f:d5:63:f5:d9:37:93:29:4a:1f:d0:35:57:53:8c:
                    2b:17:46:7b:43:da:26:04:f6:f1:7b:5e:10:0c:22:
                    30:a9:ac:c7:32:71:8c:ff:64:d8:72:ae:35:a0:8a:
                    63:49:99:e6:8d:c0:9d:0d:d7:a5:19:a0:7b:47:67:
                    75:c5:67:bf:c4:cb:9a:83:ef:01:ad:fa:ee:a8:b7:
                    9e:7e:34:ca:8b:60:41:ea:38:1b:90:8f:3d:94:d7:
                    da:50:70:34:b4:c7:76:2a:01:37:3f:8d:a4:68:dd:
                    d5:61:64:93:74:32:5e:82:db:f1:ce:e7:00:64:2c:
                    85:81:e7:38:00:2c:c4:af:31:9d:10:68:e6:85:12:
                    7e:46:06:54:47:cb:d8:1c:9f:90:d9:d4:5c:4f:c4:
                    84:df:0d:30:a6:e0:89:d3:b8:86:83:7f:9c:23:32:
                    c1:88:b4:4a:0d:74:3b:3b:59:22:02:ce:77:b2:fd:
                    60:72:fe:63:d6:d1:65:c4:d4:1c:d5:88:9d:fb:87:
                    b0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6F:27:25:77:64:21:3F:E5:42:00:EB:13:C6:CE:BD:D1:0B:BE:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ea8bd4cc-5f92-3d20-b5ca-9b5b5ef7e687.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:63:68:de:2b:7c:d1:91:a6:15:e9:a8:6e:43:1c:ef:ad:eb:
         85:bd:d7:4f:0d:65:91:ae:be:b5:ed:b3:40:07:1e:1d:6c:25:
         00:d6:00:95:9d:45:38:2c:fd:d8:d2:f8:51:b3:a2:f2:90:a4:
         75:2e:2d:6f:a9:ad:11:f5:aa:cc:9f:b4:7c:b9:eb:f3:56:9d:
         6b:10:59:cd:10:40:28:45:43:90:91:eb:f5:b4:42:d3:9f:c1:
         62:be:39:f6:55:64:ee:b4:ae:40:34:1b:3c:36:f5:fb:91:8a:
         33:e7:55:af:76:1f:c1:4c:7e:20:b2:77:b0:8c:06:48:5b:b4:
         5b:c3:3a:aa:fa:4d:11:22:5f:72:47:dd:8f:f7:96:52:f8:2a:
         ea:9f:a9:e7:21:54:91:82:91:1b:54:79:25:82:04:ef:1c:ca:
         6a:2f:5e:79:60:fd:b6:9c:ee:c5:06:c9:49:84:ca:99:bf:9b:
         c9:48:a6:df:45:72:5e:3e:06:62:3b:76:45:66:40:74:82:4f:
         50:ce:48:f9:49:82:d5:e2:71:8e:02:01:fe:8b:d2:c8:8b:04:
         3b:b1:88:7b:36:8a:fb:c3:c8:f6:6f:0e:96:40:70:18:64:44:
         f1:44:46:59:f6:54:b3:70:d1:5c:89:4f:09:64:9b:0c:fe:d9:
         3b:62:1c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 13:07:10 2025 by rpki-client