Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5956ed83-f288-3f9e-b9a8-16859573745f.roa
File:                     5956ed83-f288-3f9e-b9a8-16859573745f.roa (raw, json)
Hash identifier:          Avl1s8Pr11H6mh8taP/pp7mvP8VaG6llsdNnCSTe8VI=
Subject key identifier:   10:81:DE:9C:AD:24:97:A2:D6:21:4A:66:50:E3:26:3C:57:53:12:28
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AAD81E663843CDEA7332BC480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5956ed83-f288-3f9e-b9a8-16859573745f.roa
Signing time:             Tue 29 Jul 2025 09:17:20 +0000
ROA not before:           Tue 29 Jul 2025 09:17:20 +0000
ROA not after:            Mon 27 Oct 2025 09:17:20 +0000
asID:                     18779
IP address blocks:        104.164.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:81:e6:63:84:3c:de:a7:33:2b:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 29 09:17:20 2025 GMT
            Not After : Oct 27 09:17:20 2025 GMT
        Subject: CN=0f84e3ce-d0f9-4d73-b856-d40bba8a9ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3d:3f:d2:11:c2:40:0c:90:5c:fc:d9:65:c6:
                    63:fb:22:ef:22:79:42:ce:f9:bc:cf:88:fb:82:2d:
                    ea:86:f1:bb:f5:b5:18:0b:e2:1a:18:29:30:f2:b8:
                    7b:3e:fb:f0:19:db:b3:73:1a:c7:0a:59:a4:1e:fb:
                    7d:d5:f1:b8:e2:93:80:fb:e9:16:79:b9:a2:c4:f0:
                    a3:93:2d:08:24:33:d2:d3:3c:5f:98:bc:3c:19:68:
                    7f:cf:63:60:2a:89:05:2f:ad:83:db:36:c2:de:6f:
                    99:51:ee:fc:1b:06:a7:cc:db:ce:4c:e4:09:68:97:
                    52:83:a5:65:24:fd:e4:c1:38:e0:77:63:10:3e:98:
                    c5:9b:84:65:50:e6:a2:cf:8c:ed:31:72:69:6b:e9:
                    91:57:d2:08:bf:98:ff:0c:69:0f:00:2f:c9:cf:e3:
                    65:2c:89:7e:57:67:5e:4e:55:1f:18:45:53:9d:dd:
                    ab:af:36:97:99:b6:06:b8:90:e7:26:70:1f:e1:53:
                    64:66:6b:97:2f:e4:2e:40:fa:35:81:3a:2e:56:ab:
                    b9:0e:29:5b:db:a4:4a:a8:90:47:47:32:78:40:24:
                    53:af:cd:18:99:6d:ab:e2:67:fb:06:3e:2c:c0:e3:
                    f4:5e:43:20:84:dd:cf:fe:cb:0d:0a:02:05:0d:1d:
                    6a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:81:DE:9C:AD:24:97:A2:D6:21:4A:66:50:E3:26:3C:57:53:12:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5956ed83-f288-3f9e-b9a8-16859573745f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:6e:ab:c8:21:36:be:63:ec:4f:f3:db:f7:2c:dd:2a:09:71:
         e7:2c:33:f8:a0:0a:bc:78:34:07:ce:ee:53:05:54:9c:82:c9:
         3e:56:77:b5:95:62:b8:0b:1d:b5:32:1c:e3:80:90:85:52:c0:
         8d:0d:06:7f:63:04:52:b3:de:96:22:28:92:0f:2a:0f:07:88:
         c7:ad:12:88:4e:45:d3:a5:6a:2d:f6:c2:bb:fe:f6:f8:be:8c:
         6d:6c:85:29:db:7e:ab:96:83:f8:c3:a5:07:5e:c2:66:6c:90:
         ab:d7:07:cd:82:48:56:74:04:f4:c1:e3:be:d2:9b:32:d8:de:
         29:af:2a:ff:25:9b:af:9c:c9:20:fa:bf:a1:34:af:21:1e:4c:
         b0:bc:24:ab:36:4a:79:b7:ba:85:7a:4e:45:72:a2:b6:61:6b:
         07:48:5e:d0:ce:24:51:57:b2:43:5c:f4:a5:f2:fd:55:43:21:
         29:dd:c1:f2:86:85:c5:26:76:03:a4:0a:7b:f9:63:43:33:4b:
         60:07:27:74:83:aa:9a:e4:0d:1c:6d:3a:42:e6:ad:8c:6a:e8:
         ef:44:36:1e:ed:d5:f0:62:0f:89:9e:75:18:54:67:75:7a:57:
         cf:ea:82:b4:90:20:46:2f:7b:d7:e9:92:ea:cc:b2:82:ae:83:
         47:2e:b7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:23:14 2025 by rpki-client