Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2cd9d128-6746-372b-ab37-00c33409d546.roa
File:                     2cd9d128-6746-372b-ab37-00c33409d546.roa (raw, json)
Hash identifier:          6UgxA5OENtmgg4YbvO4Y7QMQr0WgWYwsnRwMX7d+1aY=
Subject key identifier:   01:93:3E:25:A6:26:D9:D2:ED:02:AE:44:42:00:B1:06:AE:4E:F6:F1
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849D164F72D3DDC51535CDA2FC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2cd9d128-6746-372b-ab37-00c33409d546.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     18779
IP address blocks:        104.252.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:64:f7:2d:3d:dc:51:53:5c:da:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=bfbd8110-2215-421d-b560-71402caf9a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:da:45:6a:80:24:fd:56:8d:b4:ea:94:71:92:
                    82:6a:de:39:cf:3c:a8:b0:fc:b8:0d:25:e9:74:99:
                    b8:0b:fd:24:23:c9:33:68:0c:b8:bd:8c:4b:39:dd:
                    60:86:4a:eb:86:88:25:74:17:d5:cd:07:91:9f:43:
                    11:9b:b4:45:22:57:22:37:7a:d1:37:ed:02:0b:de:
                    1a:c2:da:ad:7d:70:16:67:6e:e6:8d:04:5a:a9:c0:
                    f4:db:37:7d:c4:9c:db:53:87:4b:42:9b:15:7b:93:
                    d3:a4:10:95:e1:83:97:12:85:b8:6d:c7:b4:f3:98:
                    a7:87:2b:ee:a6:97:84:60:7b:6b:55:9a:5b:19:51:
                    df:bf:c4:c7:e4:7e:34:3d:18:0a:1b:91:85:b1:ac:
                    04:f2:d3:40:e8:1e:d3:bd:df:fa:c5:9f:31:24:bc:
                    7f:f0:2d:8f:08:08:16:e1:7b:a9:87:66:7a:15:a3:
                    7a:f9:5e:6c:8b:f4:52:9c:18:2b:7c:4b:02:81:ef:
                    85:87:21:0b:4c:31:fb:e2:ef:2a:31:7b:ed:30:9b:
                    5b:b0:f6:11:9d:ca:fb:c9:40:74:2b:85:e2:ae:b5:
                    72:d6:21:ab:b1:ac:b5:a9:99:7b:03:0a:f9:6e:21:
                    31:7a:fc:9b:e9:8e:61:c8:7b:60:7b:de:be:30:b4:
                    d4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:93:3E:25:A6:26:D9:D2:ED:02:AE:44:42:00:B1:06:AE:4E:F6:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2cd9d128-6746-372b-ab37-00c33409d546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:f2:1b:2b:f5:83:36:26:ab:f4:ab:75:86:48:88:23:b2:b9:
         d6:aa:f7:18:d5:03:25:68:0a:00:fa:01:7f:bc:af:74:cf:96:
         9c:ab:73:a5:ca:61:7d:f5:45:11:c0:9b:10:d6:75:56:55:62:
         51:07:d0:c3:34:40:b5:dc:fe:8b:b1:46:c4:56:ef:d4:11:ab:
         d3:1f:5c:6f:12:d8:ad:78:eb:08:d7:6e:a5:c7:f7:ff:a1:c4:
         87:f3:1e:25:74:f2:6b:e4:46:e4:53:7b:15:ba:88:f6:fa:fa:
         b1:e6:aa:35:cd:1b:c1:26:ce:b4:b2:40:26:82:de:43:a1:f7:
         38:13:10:f8:a5:c5:97:7d:05:10:cc:1f:aa:20:f0:38:ce:32:
         cc:bb:35:f7:1c:71:cb:a1:9f:97:36:43:b3:92:e7:1d:94:77:
         33:09:fe:91:5e:de:04:9d:28:44:23:b8:f7:08:54:a5:49:53:
         74:4a:b2:cc:81:81:d6:5a:62:5d:5c:a5:35:ca:62:44:22:7f:
         1f:c0:71:b9:08:4d:4d:3e:dd:7b:7e:87:a5:57:8a:79:81:48:
         e4:44:0c:d4:2f:4a:67:e1:c1:6b:65:ff:14:64:bc:c4:83:32:
         90:81:fa:5e:ec:99:c9:84:58:05:a6:90:cb:51:d3:38:26:05:
         61:72:59:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:53:34 2025 by rpki-client