Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d9bb8d27-03fc-3f20-8d43-aaa1efa685cc.roa
File:                     d9bb8d27-03fc-3f20-8d43-aaa1efa685cc.roa (raw, json)
Hash identifier:          TBtLaSutY7vybO1lanPAiJDQ/aLHcsrMsEQ5JYBJliI=
Subject key identifier:   77:47:CE:7D:8E:AD:59:20:82:7C:88:21:79:8A:25:13:B1:E0:2C:CB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584BBE116B698F4F77DB9B48FF80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d9bb8d27-03fc-3f20-8d43-aaa1efa685cc.roa
Signing time:             Tue 04 Nov 2025 00:26:23 +0000
ROA not before:           Tue 04 Nov 2025 00:26:23 +0000
ROA not after:            Mon 02 Feb 2026 00:26:23 +0000
asID:                     834
IP address blocks:        104.165.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:11:6b:69:8f:4f:77:db:9b:48:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov  4 00:26:23 2025 GMT
            Not After : Feb  2 00:26:23 2026 GMT
        Subject: CN=1597ec0d-b3eb-470c-89b0-38d967699691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d7:3b:5e:f3:32:87:d6:66:06:a7:e7:c7:d3:
                    65:35:7c:70:83:49:1d:89:be:72:22:5c:4f:70:6f:
                    8d:4f:37:10:99:0d:3c:91:27:49:24:ac:04:c4:72:
                    04:f8:34:8e:13:5e:bd:2b:43:7d:28:25:d1:a4:c3:
                    a5:de:b1:ff:fa:cd:f9:7c:bf:b2:ba:b4:80:92:d5:
                    91:77:65:17:9c:6f:cc:17:e4:a4:32:56:74:20:dd:
                    db:38:64:f3:c4:9f:ce:cc:34:8c:ba:7f:56:a6:51:
                    e9:67:29:25:7e:c1:3e:33:4e:4a:00:dc:8f:70:9b:
                    0c:2a:26:f0:18:a7:1e:75:12:1c:2e:44:bf:48:3e:
                    55:90:00:a2:a7:55:d1:ab:8e:a6:92:a0:cd:6a:27:
                    da:81:f1:b3:71:d1:f7:58:3b:4e:3b:96:7a:d8:e5:
                    a6:6f:63:55:9b:2f:47:03:a9:50:92:53:a5:00:18:
                    9d:1a:9a:c1:dd:9b:9d:07:73:8b:cf:0b:af:14:71:
                    fe:70:52:b7:d5:ef:0d:65:fe:5f:f7:a7:cd:48:4f:
                    9f:6c:2a:3f:61:de:9a:d7:d8:03:b9:21:1c:bb:d3:
                    0e:ca:69:66:01:57:00:eb:2d:2b:25:9b:d7:05:2d:
                    73:ab:ba:06:1f:58:c6:5f:d3:75:00:b6:e7:58:55:
                    3a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:47:CE:7D:8E:AD:59:20:82:7C:88:21:79:8A:25:13:B1:E0:2C:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d9bb8d27-03fc-3f20-8d43-aaa1efa685cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:15:bb:39:dd:2e:fc:8e:a8:a6:82:dc:2a:e7:c9:f9:3f:2c:
         25:21:8b:94:a3:b3:b0:e3:eb:47:fc:d3:02:12:34:18:a1:e7:
         b9:80:e3:81:68:c9:2b:5c:ac:13:9b:8d:d5:33:fd:90:0a:f6:
         00:f9:00:c0:3f:2d:1d:8c:47:93:c4:99:4b:51:04:c9:8d:cf:
         b2:65:05:b8:c6:6e:d7:f0:99:90:6f:21:d2:1d:c0:a5:d4:cc:
         e1:1e:8e:ce:19:15:91:94:0d:14:ce:6b:58:95:1a:87:39:ca:
         5b:a2:10:0f:82:c8:b0:5a:e0:41:81:6b:9f:4d:31:e1:9e:00:
         91:8a:da:f3:80:0f:40:78:71:ac:a9:3a:1c:61:58:9f:61:06:
         f9:d8:76:0b:53:0e:94:cc:8b:d3:fc:06:e7:52:5d:b9:25:6c:
         64:21:8d:52:6d:90:34:a7:4e:9c:21:a2:fb:9a:73:21:2d:0c:
         89:d1:6e:16:7c:8d:77:42:95:42:4e:6a:15:21:e2:54:18:26:
         97:9c:bc:bd:cf:0b:b0:60:47:ab:5a:3e:77:37:26:1f:3a:86:
         1c:82:c9:4d:e4:48:1b:e2:28:01:01:29:1b:2b:d7:ac:a2:08:
         ae:07:22:aa:e6:28:ce:1d:63:df:05:ac:38:d5:15:b7:1e:ca:
         7b:4f:de:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:38:31 2025 by rpki-client