Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fc8de490-d575-3a31-b4be-2fbad5594e3d.roa
File:                     fc8de490-d575-3a31-b4be-2fbad5594e3d.roa (raw, json)
Hash identifier:          KAg35DaeyuqlxXZz4Oa/u3uLBxPagMHjjeUOuT87thc=
Subject key identifier:   04:88:91:6B:D8:30:4D:F9:10:D8:40:26:E0:DC:A1:DF:62:70:0C:54
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A2EEABDA99FC53061CA9B5700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fc8de490-d575-3a31-b4be-2fbad5594e3d.roa
Signing time:             Sat 14 Jun 2025 01:00:49 +0000
ROA not before:           Sat 14 Jun 2025 01:00:49 +0000
ROA not after:            Fri 12 Sep 2025 01:00:49 +0000
asID:                     44477
IP address blocks:        104.165.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2e:ea:bd:a9:9f:c5:30:61:ca:9b:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 14 01:00:49 2025 GMT
            Not After : Sep 12 01:00:49 2025 GMT
        Subject: CN=c71e3dc1-11f9-4cb2-83ea-d144d08a3bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1c:18:e0:2c:a5:20:8a:2d:c5:4f:bf:e6:1d:
                    c8:e4:77:74:43:86:07:87:c3:bc:fd:76:55:15:0b:
                    44:23:77:fd:6b:22:5e:2c:d9:0e:33:2f:17:79:11:
                    13:90:50:e7:ee:c4:86:1b:48:3d:04:d3:26:30:03:
                    c5:57:1a:4a:de:33:f1:01:f8:6d:72:98:05:9e:11:
                    be:3d:08:fa:4c:10:0f:1f:4c:98:10:80:9e:47:ce:
                    60:2e:fc:d4:19:d1:73:42:2f:b2:d9:0e:2d:d7:59:
                    ca:ac:73:33:98:9d:24:07:ec:43:e3:8b:a7:dd:27:
                    76:53:eb:cf:6f:b0:d1:78:ba:72:55:2e:ba:14:c4:
                    34:fe:0b:0b:fe:a5:24:82:ed:70:95:1b:6e:56:67:
                    a4:a2:a2:da:95:6a:28:2f:e0:18:f6:87:2a:6b:bd:
                    13:7b:fd:78:e5:58:bf:57:6c:ce:27:4a:48:60:77:
                    18:11:2d:77:bf:8e:80:06:3b:37:a1:c4:18:6e:e6:
                    11:0a:7d:8e:e5:c2:ce:19:ac:1b:78:fe:96:04:0f:
                    a3:69:1e:7b:e3:6e:b5:1f:d3:04:5f:af:f2:8f:d1:
                    6f:18:da:fb:58:1e:c6:fc:5a:cc:af:e5:05:80:71:
                    57:d2:29:08:8a:41:92:a9:15:1b:5b:9f:d7:7c:be:
                    14:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:88:91:6B:D8:30:4D:F9:10:D8:40:26:E0:DC:A1:DF:62:70:0C:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fc8de490-d575-3a31-b4be-2fbad5594e3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:9a:51:70:9b:27:b1:cb:e8:fa:0d:bc:42:c9:b8:4b:31:df:
         95:6c:31:11:db:a8:ac:b5:04:84:7e:cc:0d:d0:dd:da:ef:e4:
         8e:f9:91:8f:3a:33:7a:bc:28:b8:9c:6d:a9:01:17:71:e1:50:
         3d:4e:48:09:e4:50:7a:93:07:82:ef:42:fa:4d:5b:69:58:c3:
         31:ed:ba:62:21:6e:4a:61:c9:4f:b9:9d:b7:9d:23:61:4a:df:
         fd:59:9d:03:1b:e8:d7:a8:33:93:10:a2:26:38:70:9a:05:9b:
         b1:e7:cb:5b:7a:26:01:70:aa:d9:1c:71:24:b2:a6:04:77:34:
         29:7e:d3:29:72:98:8e:4c:1b:7a:1a:e7:b9:a1:e0:07:d2:3f:
         9c:1c:f6:5d:2e:5b:b5:9d:5e:24:41:ef:6e:26:2b:36:a4:f3:
         a6:7f:4b:ae:03:19:04:7d:95:10:63:f6:44:55:89:59:ee:e2:
         a6:3b:b2:a1:03:c9:86:e8:1f:3b:ed:3e:fa:d9:52:d7:5b:e8:
         53:cf:19:e4:44:b2:8e:3c:49:e1:86:f4:61:83:aa:8b:b6:91:
         94:56:e1:1b:05:e7:aa:79:14:45:17:46:f2:9a:cd:5f:6c:7e:
         e6:b4:7c:c4:6d:2c:28:d9:a7:b9:cc:b5:8a:c0:c4:c9:39:37:
         e3:82:83:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:04:51 2025 by rpki-client