Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/6e86b93b-2a30-3a25-8c6e-210cf5593a9d.roa
File:                     6e86b93b-2a30-3a25-8c6e-210cf5593a9d.roa (raw, json)
Hash identifier:          +OlmWbqX3gjNpgr47oNqX2b71YWlvPuxTCpTqW8TVlQ=
Subject key identifier:   10:97:D3:BA:01:B0:85:C8:55:20:9E:86:DD:FE:0C:8B:9E:BC:A1:CC
Certificate issuer:       /CN=8fe40320-74dc-4444-a6ef-bd88d604a876
Certificate serial:       010D0C9F4328584ABD4B73AC1D0C304821F8C700
Authority key identifier: 06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/6e86b93b-2a30-3a25-8c6e-210cf5593a9d.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     18450
IP address blocks:        104.224.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:73:ac:1d:0c:30:48:21:f8:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fe40320-74dc-4444-a6ef-bd88d604a876
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=b902f38d-d364-4b5a-8599-488773b30925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:62:e3:af:4c:66:f2:cc:28:67:ba:42:47:57:
                    01:cf:1f:83:4a:93:34:c4:80:22:40:9b:19:29:df:
                    c2:01:c5:0e:e4:04:10:22:5c:20:04:67:82:61:e8:
                    bc:41:a5:36:85:83:76:96:a3:85:78:47:98:22:f0:
                    17:24:78:c2:6a:34:54:9c:33:eb:5c:9d:b8:6b:53:
                    31:f4:6a:b2:e8:2e:cb:17:6e:09:77:f3:47:bc:91:
                    38:c7:ac:80:9c:95:22:70:36:c0:ca:45:2e:ce:2b:
                    a7:a4:15:d6:46:12:bd:78:d1:d0:56:b7:56:9b:ee:
                    90:35:d4:79:4f:ed:28:59:2c:31:58:eb:1e:9d:e4:
                    73:cc:6f:14:bd:39:fd:4a:f3:c0:84:47:78:b2:c6:
                    40:0c:45:d1:ab:44:cc:33:7f:f9:e7:7b:74:5c:c2:
                    cb:77:66:21:15:55:c5:f7:40:f5:eb:db:ef:8e:43:
                    d6:a6:47:0f:a7:2b:c8:37:ab:ea:e6:0d:0f:c9:b7:
                    16:13:5f:2a:ce:54:a6:f0:b2:22:d5:71:b6:dc:33:
                    50:73:8b:df:a5:26:f8:c4:7e:e6:4e:4b:df:ee:a5:
                    8e:9a:69:df:5a:f3:63:12:c3:1c:90:67:ab:1e:70:
                    c0:f8:e5:91:c6:09:c7:bf:82:59:73:e3:e9:25:e7:
                    cb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:97:D3:BA:01:B0:85:C8:55:20:9E:86:DD:FE:0C:8B:9E:BC:A1:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/6e86b93b-2a30-3a25-8c6e-210cf5593a9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.crl

            X509v3 Authority Key Identifier:
                keyid:06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:30:5a:55:e0:9a:ec:d2:92:5a:cf:48:e1:18:d7:a0:fe:55:
         81:d7:f0:17:90:21:c8:3d:cd:a3:ce:ed:23:3b:4e:cb:6d:9a:
         4c:36:70:a0:5b:6e:93:e9:56:c7:1f:a0:2b:d5:48:8e:b5:7d:
         47:7e:68:41:81:2e:e3:2b:da:28:09:bc:0e:e4:60:32:38:d0:
         34:3d:da:fe:02:29:54:05:a6:9d:a5:52:8b:aa:b5:42:08:af:
         8b:54:84:99:31:e2:72:2a:b0:22:79:60:cf:75:80:97:42:1a:
         7f:54:c5:21:ab:a5:5d:83:ca:d2:fe:ed:27:66:6b:92:f9:ea:
         df:df:67:fe:71:2d:57:84:7f:eb:6c:eb:8e:2a:2b:87:16:b1:
         ef:97:aa:3d:ed:46:2b:c2:f7:d6:ab:b3:63:45:0f:da:77:5d:
         9b:c3:8e:82:38:f0:55:d5:1e:d8:17:73:31:2e:52:96:70:09:
         1f:11:23:b5:5a:4a:67:73:c1:bf:00:d2:da:39:6f:9c:f7:8b:
         77:c7:9f:e5:2d:a1:eb:da:51:fb:14:c7:e0:0b:e0:9c:40:17:
         e7:d9:20:a6:58:17:34:f1:1a:8d:77:7f:0a:9c:44:9f:0f:29:
         32:1b:4a:6e:d4:b0:5d:99:2f:bf:a0:22:ce:c5:75:f1:13:9b:
         92:e6:2f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:04:45 2025 by rpki-client