Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/28aebff2-4a22-3b89-babf-2aa2be517bda.roa
File:                     28aebff2-4a22-3b89-babf-2aa2be517bda.roa (raw, json)
Hash identifier:          6GtkU+7ObXdgiBmu+xPHBb3o8x5/t2N5NlzgEtwriiI=
Subject key identifier:   3D:DB:9A:98:6E:B5:B4:2D:02:AB:88:8A:C4:DF:D1:DC:BD:CC:62:F9
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A82AB514BB2E7C5747B7F2D00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/28aebff2-4a22-3b89-babf-2aa2be517bda.roa
Signing time:             Mon 14 Jul 2025 01:00:50 +0000
ROA not before:           Mon 14 Jul 2025 01:00:50 +0000
ROA not after:            Sun 12 Oct 2025 01:00:50 +0000
asID:                     7922
IP address blocks:        104.165.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:82:ab:51:4b:b2:e7:c5:74:7b:7f:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 14 01:00:50 2025 GMT
            Not After : Oct 12 01:00:50 2025 GMT
        Subject: CN=f4bc70d4-af43-46f9-95cd-9deb58970714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fd:e2:35:2b:6d:67:e7:3c:b9:7d:bd:8c:af:
                    18:59:d8:ee:5b:c4:6c:6d:85:24:3e:da:57:c0:3f:
                    bc:80:42:95:31:68:cc:20:42:2f:06:e3:87:00:dd:
                    b0:4e:a6:6a:2c:4b:4b:0a:a9:e9:ba:61:6c:1e:77:
                    72:71:e7:98:38:44:aa:f1:69:f2:3f:59:f5:8c:e7:
                    a4:09:19:5f:1e:19:c3:4d:3c:1c:9f:9f:b7:9a:f3:
                    6d:51:12:46:6e:2e:15:29:8d:0d:59:79:37:9d:8f:
                    9d:b6:0d:9f:10:a3:31:7b:0a:5f:b6:25:7b:d8:a1:
                    e7:78:5e:0b:91:c8:8a:da:37:8e:fd:12:4e:25:9d:
                    63:fc:37:a8:29:a4:30:c2:32:35:94:66:59:44:aa:
                    76:d9:b5:e8:3a:ac:4b:7e:3d:38:02:cd:b5:28:f2:
                    3a:92:6f:b0:25:95:59:c4:70:56:88:18:69:46:55:
                    9e:46:cc:8c:0c:ad:36:a3:aa:7c:92:f6:4e:fa:6d:
                    92:13:a7:83:7d:b0:e6:40:c6:67:37:e9:4f:a7:bf:
                    3b:37:ee:d5:89:e7:b6:9f:8a:ca:6a:89:40:3c:77:
                    f4:16:e1:f4:17:f7:b6:9a:cd:cf:dd:7a:c5:20:b7:
                    47:e8:11:ba:05:49:91:2f:d4:81:3f:0f:35:4d:5c:
                    4b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DB:9A:98:6E:B5:B4:2D:02:AB:88:8A:C4:DF:D1:DC:BD:CC:62:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/28aebff2-4a22-3b89-babf-2aa2be517bda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:d7:04:d2:13:7d:9b:02:00:53:ac:02:1b:37:29:dc:ce:55:
         96:8c:27:6c:5e:9d:68:c2:fd:cc:a0:4a:2e:c7:eb:cd:2e:c1:
         bc:7d:b4:43:d5:02:93:78:16:dc:8c:44:c0:2a:60:ba:69:60:
         57:be:86:93:7f:71:b9:dd:c1:6d:96:6d:4d:e4:ba:ef:2a:fd:
         1e:28:df:71:97:f0:f1:da:00:03:ea:0b:62:2a:be:84:f6:23:
         7a:d6:e9:ce:7a:3e:fa:be:d1:e1:c1:0b:28:f1:b9:64:e7:c4:
         f5:37:95:b1:97:64:d9:3f:ec:bc:c5:d2:af:76:07:ac:7d:ae:
         64:3f:64:3a:63:d1:47:d8:2d:de:aa:38:a0:93:35:13:e6:bc:
         15:05:f4:18:ce:fe:ed:5e:6a:55:7f:b4:f0:f1:f5:2b:52:54:
         21:05:ca:5f:f4:96:f0:30:a9:7b:8b:95:d3:8f:4b:88:48:08:
         9f:bd:cb:0f:a9:2b:bf:01:38:97:2a:e4:73:ef:46:19:26:e7:
         7f:73:79:ee:b4:69:82:96:b6:c0:fa:35:69:07:c5:9c:be:85:
         9f:8d:72:25:e1:48:15:75:14:9d:63:56:d2:24:5f:cc:85:c5:
         6e:ac:3b:4e:4f:13:01:55:e6:e8:22:2e:22:8c:3e:4b:0b:fd:
         e7:1d:37:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCq1FLsufFdHt/LQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk
ZjRiYzcwZDQtYWY0My00NmY5LTk1Y2QtOWRlYjU4OTcwNzE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/3iNSttZ+c8uX29jK8YWdjuW8RsbYUkPtpX
wD+8gEKVMWjMIEIvBuOHAN2wTqZqLEtLCqnpumFsHndyceeYOESq8WnyP1n1jOek
CRlfHhnDTTwcn5+3mvNtURJGbi4VKY0NWXk3nY+dtg2fEKMxewpftiV72KHneF4L
kciK2jeO/RJOJZ1j/DeoKaQwwjI1lGZZRKp22bXoOqxLfj04As21KPI6km+wJZVZ
xHBWiBhpRlWeRsyMDK02o6p8kvZO+m2SE6eDfbDmQMZnN+lPp787N+7Viee2n4rK
aolAPHf0FuH0F/e2ms3P3XrFILdH6BG6BUmRL9SBPw81TVxLcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD3bmphutbQtAquIisTf0dy9zGL5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMjhhZWJmZjItNGEyMi0z
Yjg5LWJhYmYtMmFhMmJlNTE3YmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKXPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAELXBNITfZsCAFOsAhs3KdzOVZaMJ2xenWjC/cygSi7H680uwbx9tEPV
ApN4FtyMRMAqYLppYFe+hpN/cbndwW2WbU3kuu8q/R4o33GX8PHaAAPqC2IqvoT2
I3rW6c56Pvq+0eHBCyjxuWTnxPU3lbGXZNk/7LzF0q92B6x9rmQ/ZDpj0UfYLd6q
OKCTNRPmvBUF9BjO/u1ealV/tPDx9StSVCEFyl/0lvAwqXuLldOPS4hICJ+9yw+p
K78BOJcq5HPvRhkm539zee60aYKWtsD6NWkHxZy+hZ+NciXhSBV1FJ1jVtIkX8yF
xW6sO05PEwFV5ugiLiKMPksL/ecdN0E=
-----END CERTIFICATE-----
Generated at Mon Aug 4 08:31:20 2025 by rpki-client