Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/134800a2-3dcd-3e70-ad2c-006929d8e6cd.roa
File:                     134800a2-3dcd-3e70-ad2c-006929d8e6cd.roa (raw, json)
Hash identifier:          c8wAMj+EGhwf5oDyoIGYwU9QFfy8XZFJcHWT4Gy1kKw=
Subject key identifier:   E0:DA:1E:10:A0:3E:C4:6E:35:CF:6A:FF:DD:31:C0:4B:6F:27:70:CE
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A10354F7943E920877832C740
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/134800a2-3dcd-3e70-ad2c-006929d8e6cd.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     9009
IP address blocks:        104.253.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:4f:79:43:e9:20:87:78:32:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=a1fdceb9-5234-4e68-be65-7826b6d2b489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:15:74:0c:21:0b:9c:14:cb:4a:3c:2d:e3:90:
                    ea:1d:af:99:e2:59:1c:9c:83:92:61:37:c9:d6:52:
                    d1:db:cc:19:6c:6a:34:a9:ee:cc:fd:2e:a7:1c:8b:
                    20:62:b5:ee:da:01:60:5c:62:b7:7b:7f:71:b5:4a:
                    1d:09:c8:c7:72:c0:cd:61:61:29:6b:6d:da:8f:25:
                    72:5f:1e:da:d2:79:17:0c:41:0d:eb:bc:48:ed:e4:
                    f2:a9:b4:1e:6d:a3:35:4d:1f:b5:ee:41:20:6e:ab:
                    c2:cb:18:fd:be:b0:15:e7:66:99:e8:e8:0c:4a:1d:
                    4f:24:5a:8f:cf:c9:b7:21:3f:aa:dc:8f:f3:7c:80:
                    6c:a6:65:34:c6:d6:bc:7b:12:1d:f5:31:d4:b0:6c:
                    60:29:b9:30:58:ec:9f:0f:66:97:0f:3f:da:4f:ab:
                    ff:de:5e:a8:6b:d8:40:96:c3:06:b7:6a:e3:55:7f:
                    d7:2f:94:22:86:c4:a3:f7:61:61:0a:e2:7c:f6:ba:
                    e5:b5:be:cc:68:65:2e:e2:27:d8:15:26:9f:f7:2b:
                    63:19:fe:27:04:6f:a5:f6:88:15:ec:34:56:d5:13:
                    f9:a0:d1:8a:5e:e5:88:86:77:76:6f:fd:aa:9e:3a:
                    84:19:dd:45:dd:27:ac:88:5d:e8:5b:71:26:3c:89:
                    11:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DA:1E:10:A0:3E:C4:6E:35:CF:6A:FF:DD:31:C0:4B:6F:27:70:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/134800a2-3dcd-3e70-ad2c-006929d8e6cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:f7:93:09:e3:a7:85:be:21:b6:c7:39:63:b7:2f:a7:da:9c:
         0d:bb:f4:18:2b:97:77:80:9b:9c:cc:74:18:87:83:c7:ae:66:
         5e:21:88:42:b7:a1:98:ba:8f:79:af:93:5e:c0:fc:66:25:0f:
         3d:a6:a4:98:45:d8:16:ee:85:8d:d3:7f:00:43:dc:d9:d5:48:
         98:52:f9:c3:11:21:95:d8:d1:1c:69:34:9a:b1:c6:c1:c9:da:
         2c:0d:08:8c:70:eb:f3:57:3c:9f:55:9e:1f:08:b5:1a:7c:92:
         a8:a2:39:fe:c8:89:40:3c:96:ce:3b:0f:f0:d5:74:85:22:a4:
         23:74:1b:f6:1f:f6:58:b8:e4:a8:b0:cb:fa:fd:c8:84:89:01:
         fc:b5:63:8e:d9:71:c3:4e:5d:8c:40:73:97:2c:e1:79:be:97:
         ff:32:ed:9b:18:c7:af:78:30:cc:ef:6f:da:e4:50:66:9c:f2:
         83:24:03:79:d7:94:4d:18:19:06:2b:bd:15:d1:3e:72:0e:f5:
         97:37:e6:8c:7a:35:61:08:a1:84:f0:a3:47:23:be:57:55:8d:
         90:94:a4:18:e5:fa:e2:04:99:27:43:2f:cc:0e:87:63:1d:2c:
         2d:9b:84:a4:41:a3:98:39:d2:52:22:ce:f6:70:97:35:b7:07:
         85:19:3c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 10:14:34 2025 by rpki-client