Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e0f16bbd-2bd1-324c-9d07-40cbf719ee5f.roa
File:                     e0f16bbd-2bd1-324c-9d07-40cbf719ee5f.roa (raw, json)
Hash identifier:          heoUGt07a1cDtJYUf4PdbLXmeTxqfC+jydiYqGp15VQ=
Subject key identifier:   75:51:FA:B2:FB:4A:E8:0D:E3:2A:C1:B4:D3:05:AD:26:C6:38:BF:E7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849D164FA335ACAE2A626CB1820
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e0f16bbd-2bd1-324c-9d07-40cbf719ee5f.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     18779
IP address blocks:        104.253.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:64:fa:33:5a:ca:e2:a6:26:cb:18:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=b85e7020-4e81-4329-b243-75c485e5c47a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:25:9d:8f:2a:26:1e:6d:4b:9c:52:cf:ba:36:
                    60:4d:18:63:4f:c8:96:06:e9:dd:23:46:84:f0:fd:
                    23:32:3c:1c:3b:78:01:c4:bd:fe:22:52:c5:6e:54:
                    08:b6:b5:60:be:c0:80:cd:0a:a5:0f:9f:79:dc:05:
                    57:7e:f2:5f:06:c1:71:9f:ba:d6:04:7e:53:7b:4d:
                    ca:af:18:25:61:9a:e4:eb:4b:2a:c1:74:21:1f:20:
                    42:14:c0:5d:cd:65:4b:5e:81:16:29:33:2f:af:c5:
                    a4:a2:83:d2:f0:42:ad:5e:81:dc:a8:27:11:17:de:
                    29:8a:2b:3a:71:ef:a1:7e:69:5f:88:33:5a:1d:2d:
                    a1:b9:d9:76:5f:e4:2d:a8:33:aa:6e:53:82:75:ab:
                    5b:02:01:f0:1f:22:89:b8:60:3b:b5:c7:39:73:44:
                    21:25:cf:ee:aa:22:26:c7:b7:7c:7c:1d:70:25:75:
                    fd:18:8d:41:93:b1:e7:41:ae:81:aa:f9:9e:93:cd:
                    a9:c4:12:fc:8a:e1:93:cc:15:ec:a2:9f:33:38:19:
                    18:d9:2f:8d:c0:fb:76:61:a1:91:36:7d:c3:45:3a:
                    1f:0e:23:43:79:4a:9f:6a:40:36:06:d6:7b:91:9d:
                    ad:fa:e2:d3:e5:8b:0f:4b:46:10:a7:bb:59:2d:da:
                    f4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:51:FA:B2:FB:4A:E8:0D:E3:2A:C1:B4:D3:05:AD:26:C6:38:BF:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e0f16bbd-2bd1-324c-9d07-40cbf719ee5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:5d:dd:e5:53:50:03:a0:2b:f3:96:68:33:fc:c4:99:a7:25:
         cd:66:56:1f:66:e1:32:df:31:14:34:fa:f5:a8:9e:1f:f7:54:
         a1:f0:db:2a:48:3a:d9:80:8b:53:e3:33:08:6b:48:c3:05:5e:
         01:fb:0d:a8:a8:25:28:30:12:0f:0c:98:8a:26:70:e6:e3:ce:
         27:b5:00:9d:bd:46:06:22:91:3d:a5:d8:32:cc:74:f1:8d:4d:
         c2:6d:04:cb:23:eb:e3:41:2c:7f:78:da:5f:81:32:58:e3:ed:
         12:1b:49:2d:7a:a9:7c:a6:6a:5b:b8:fc:10:59:03:b1:5e:f5:
         f1:55:b8:37:7a:6f:0b:db:e1:74:63:aa:9c:35:a2:81:87:0b:
         7a:55:a5:d3:59:4b:ad:52:f5:99:88:13:11:89:53:eb:1d:0c:
         36:9d:22:fd:ef:82:b7:4f:63:0c:fb:2d:9d:4e:1c:b9:eb:c6:
         c1:2d:19:58:31:9a:44:0f:52:99:65:ae:43:1c:b7:2b:77:3d:
         0b:ce:12:db:85:31:11:79:37:d7:75:b0:7f:fa:2a:07:2e:e5:
         cb:8c:2a:d1:7d:8e:31:bd:1b:99:de:4a:a5:75:8a:fb:cc:03:
         b8:26:86:48:99:c4:d2:3a:8a:22:ba:9e:ce:00:4d:de:dd:82:
         e7:a8:17:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:43:33 2025 by rpki-client