Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3292365d-4083-306b-95e2-541e53848ee4.roa
File:                     3292365d-4083-306b-95e2-541e53848ee4.roa (raw, json)
Hash identifier:          krIjh9eJvP3vPk+euh2bXVXFP1FrfmmH803P4Z8g400=
Subject key identifier:   5C:37:66:C8:A9:EC:5E:06:72:7C:E6:E8:D5:32:29:DB:33:C4:AD:21
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AAF560ECE5F85EE9C46176B60
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3292365d-4083-306b-95e2-541e53848ee4.roa
Signing time:             Wed 30 Jul 2025 01:00:32 +0000
ROA not before:           Wed 30 Jul 2025 01:00:32 +0000
ROA not after:            Tue 28 Oct 2025 01:00:32 +0000
asID:                     18779
IP address blocks:        104.165.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:af:56:0e:ce:5f:85:ee:9c:46:17:6b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 30 01:00:32 2025 GMT
            Not After : Oct 28 01:00:32 2025 GMT
        Subject: CN=d30629b3-8c95-4361-a3a5-d8c6fc7b1271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0a:7b:4d:c8:7b:f4:8a:66:46:c6:75:d3:5d:
                    75:e7:d6:93:d1:fc:07:a4:08:b8:da:b3:94:43:ef:
                    29:38:2b:7f:2e:af:a3:69:b9:dc:28:29:b4:45:8b:
                    98:47:1a:97:f9:22:a9:80:6b:b5:d0:94:8c:bb:11:
                    46:f7:03:b6:54:d3:75:0d:b9:0b:4a:23:82:4d:41:
                    7d:9b:8b:61:e1:4c:4e:18:67:d9:6c:a3:08:30:0f:
                    af:d5:ae:ca:d0:30:7d:fa:82:f2:de:6d:5c:80:86:
                    9d:b3:32:82:a4:e2:a7:d6:17:4c:e6:64:85:b3:1a:
                    b6:72:9d:ba:c5:89:1a:cd:a3:25:eb:78:9b:cb:f9:
                    4d:19:ae:ac:f4:60:b8:db:ff:5c:ef:f6:3b:a7:fe:
                    23:03:c0:d7:5c:e8:56:9a:41:7a:23:68:08:e8:45:
                    17:5b:e7:f6:6f:8c:7f:58:47:78:8e:f4:3a:35:6f:
                    6c:5d:77:51:03:db:6b:58:61:2d:17:bd:9c:13:6e:
                    24:96:95:78:24:0b:94:30:ba:44:e9:ae:b6:96:2b:
                    35:82:0f:56:30:fd:90:c9:47:15:9f:17:6c:93:16:
                    66:7e:ad:8c:62:4c:77:fb:c5:d1:51:36:41:ed:e3:
                    28:ff:e1:8f:02:09:59:ab:ca:90:8d:a2:04:43:ef:
                    c5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:37:66:C8:A9:EC:5E:06:72:7C:E6:E8:D5:32:29:DB:33:C4:AD:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3292365d-4083-306b-95e2-541e53848ee4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:42:6f:c9:9d:f2:fb:2a:b3:83:50:df:b0:4b:8b:f1:5a:e9:
         99:31:a8:59:72:81:89:e4:6b:0c:a8:9d:71:b1:2b:17:68:07:
         6a:8a:83:c8:fe:78:43:db:88:4b:1e:69:09:71:39:46:04:55:
         7e:cf:4e:f8:3d:c5:b8:3a:f6:19:5c:b2:79:29:93:b9:fd:9d:
         1d:75:ea:d5:21:b8:50:55:2b:62:04:da:32:48:65:74:1e:6a:
         05:0e:2d:2f:07:1e:a5:74:d7:61:00:ae:b1:10:fa:32:21:fb:
         5b:7e:ea:f3:0f:4e:57:46:cd:2a:13:ce:ef:b2:81:00:84:38:
         89:0b:49:df:03:31:b8:a9:91:96:55:77:bf:2a:97:2e:67:03:
         f6:4d:3e:95:25:61:81:01:e9:cf:ad:e9:41:22:58:ac:b6:52:
         14:b7:dc:b1:5b:cc:13:66:fb:de:a5:7f:34:2f:5f:6b:92:3b:
         8c:cc:87:08:4f:d1:15:26:28:71:c4:ef:8d:07:e2:b5:08:e1:
         5d:0e:50:5f:43:55:93:0b:6c:43:e0:35:77:ec:b9:2d:e6:e3:
         a1:8e:c9:78:f7:f1:59:36:11:b4:74:34:98:17:92:ad:c7:c0:
         61:d6:51:92:f9:c2:cb:08:ea:3a:22:f6:de:65:2c:dc:a6:f1:
         a7:fd:a1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:23:43 2025 by rpki-client