Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f9c6c573-67b1-30eb-99d5-1d52e8e94d33.roa
File:                     f9c6c573-67b1-30eb-99d5-1d52e8e94d33.roa (raw, json)
Hash identifier:          7G5UxKggKsy52vVpK39t9sBVQrGarRvq5fdNBqf3DTM=
Subject key identifier:   25:68:F3:7F:0D:2A:A9:DF:76:A7:79:3A:4A:45:7C:DE:D0:DD:92:97
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848D6412EF7AF584B572ADD7F40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f9c6c573-67b1-30eb-99d5-1d52e8e94d33.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     400536
IP address blocks:        104.253.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:2e:f7:af:58:4b:57:2a:dd:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=332b36db-ffc4-4f3e-8f58-0f1ac0b43eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e1:20:27:c9:53:a6:48:92:d7:56:61:7c:b9:
                    7e:55:b2:85:b1:68:64:47:6d:ee:a8:16:83:8c:ea:
                    fb:49:76:ba:1d:62:60:e4:29:a9:43:6e:85:cf:fb:
                    1f:99:9f:62:f8:21:36:9a:ce:6e:5f:68:27:ef:cb:
                    fe:86:83:24:ee:2b:7a:f0:da:ef:a4:59:53:f9:15:
                    7f:f3:8f:67:83:a7:99:1d:5f:6b:53:b7:66:57:f3:
                    09:6d:60:b5:6c:89:2c:c1:9a:15:fa:95:a8:af:67:
                    87:61:c2:ff:1d:5e:8e:4b:4c:66:88:b4:8b:72:74:
                    e9:f6:ee:f5:f7:e6:46:2b:a0:d9:73:e1:48:55:f0:
                    bc:11:c5:16:b2:a0:b9:b1:5c:ad:66:e3:c1:6b:c2:
                    39:ed:ed:53:5e:c3:af:c5:fb:88:bf:b3:46:e2:71:
                    7f:25:34:92:ba:0c:12:21:f3:93:61:ac:7a:7e:a6:
                    2e:5b:ce:50:78:27:7d:59:05:c1:de:ae:be:98:09:
                    75:68:da:0d:6e:52:03:b3:72:e2:27:cd:ee:cc:a4:
                    14:39:ce:a2:e4:13:bb:57:03:fc:46:73:96:94:18:
                    0c:dd:7f:51:bc:7f:80:d4:26:fd:f0:0c:e1:7c:a0:
                    4c:df:70:94:1d:c6:3c:8c:af:cb:68:8d:98:3f:5b:
                    e1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:68:F3:7F:0D:2A:A9:DF:76:A7:79:3A:4A:45:7C:DE:D0:DD:92:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f9c6c573-67b1-30eb-99d5-1d52e8e94d33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:78:3f:ad:f3:0d:04:02:23:f7:6f:22:4d:be:6b:43:da:03:
         79:63:8e:a0:e2:4e:5c:20:f0:a3:81:0a:cd:ea:79:b7:03:13:
         d8:93:1e:de:f3:08:65:e4:3f:17:e9:03:68:29:58:0d:9f:4b:
         98:ee:49:35:1c:df:03:8b:c2:b6:83:f8:85:49:ef:5b:70:55:
         43:24:53:af:7b:49:e2:e9:39:90:f6:ae:c4:df:c5:43:aa:eb:
         38:97:5d:b6:de:12:fb:f2:47:1c:dc:68:dd:8a:4a:63:2b:c6:
         7b:e6:de:77:5a:11:f0:2c:28:a3:3c:bc:a1:12:ae:17:68:00:
         8e:56:b7:20:46:02:67:2d:a8:43:4f:bc:76:9a:56:c0:f7:8d:
         e4:7a:dd:c4:4b:7f:08:64:9d:d8:75:f2:de:3e:28:84:fa:66:
         3a:1b:6e:23:75:5a:23:ad:46:00:73:c2:ef:87:18:24:a8:a8:
         fe:a6:ef:e6:f3:7b:61:3d:f0:58:83:ea:78:b8:df:cc:03:79:
         77:3e:a0:ad:c5:c2:a3:8e:17:8c:a6:68:1a:d8:8b:a2:35:39:
         51:07:7e:52:b6:10:dc:72:94:7e:e2:32:f7:0d:8c:bb:db:e4:
         1d:46:85:70:0e:0d:45:45:32:1b:d1:6c:8a:ce:67:06:a4:e1:
         e1:7f:90:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:03 2025 by rpki-client