Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/10029b29-7aab-3c24-ab07-53a19d96ea6b.roa
File:                     10029b29-7aab-3c24-ab07-53a19d96ea6b.roa (raw, json)
Hash identifier:          VgU1xGirHiE0ErFwRx8hYDJObM5WCRMXy1JPjrYbFfU=
Subject key identifier:   04:E8:42:87:C1:34:A8:CA:EE:5D:39:C6:9E:28:5E:E5:94:13:72:AC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B0FA6BB37D229D1E7FF897380
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/10029b29-7aab-3c24-ab07-53a19d96ea6b.roa
Signing time:             Tue 02 Sep 2025 13:00:42 +0000
ROA not before:           Tue 02 Sep 2025 13:00:42 +0000
ROA not after:            Mon 01 Dec 2025 14:00:42 +0000
asID:                     400536
IP address blocks:        104.164.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0f:a6:bb:37:d2:29:d1:e7:ff:89:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep  2 13:00:42 2025 GMT
            Not After : Dec  1 14:00:42 2025 GMT
        Subject: CN=ba5384ee-959e-4e33-9685-78fd89aad55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:18:dd:2e:55:82:2c:9f:12:f6:e8:d7:90:89:
                    b8:97:71:32:6c:5a:8c:18:5e:42:a7:ff:6f:8f:ac:
                    a6:eb:3a:b1:21:b2:cc:d0:dc:f1:d1:ee:a6:78:32:
                    eb:1f:b5:74:80:2f:1c:8e:0b:78:cd:e4:af:6c:31:
                    fd:70:bb:15:19:0c:32:45:ea:e6:bd:67:a9:71:fe:
                    14:64:6a:71:16:97:a5:92:eb:b3:0c:75:5d:94:97:
                    2b:ac:2f:c1:8b:49:17:31:00:9a:e7:3b:68:f2:f3:
                    2c:93:c1:b2:57:70:8e:6f:45:33:c0:6c:2e:c2:90:
                    30:fe:15:cb:f9:6c:95:38:ba:7e:53:1b:22:99:01:
                    34:64:0e:49:8b:76:33:ff:60:14:b1:ec:5b:1d:bb:
                    62:8d:be:dc:5d:2a:9e:a8:78:b3:f1:d0:a9:a3:da:
                    59:fc:35:b9:ac:b6:e0:27:88:1e:1b:38:c1:a2:0b:
                    d6:a9:85:6e:c0:45:c1:6f:d5:6b:91:13:74:3d:aa:
                    c8:19:a0:6e:f3:73:e8:e2:cd:68:6d:e6:88:cb:c8:
                    a2:42:f3:36:85:c3:42:27:57:4c:a1:f1:f0:a5:b4:
                    de:52:b7:65:a7:cb:87:9a:ce:da:3f:e3:f5:5d:d6:
                    d7:08:16:ef:ea:e1:93:d1:59:49:7f:10:2c:cf:e0:
                    52:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E8:42:87:C1:34:A8:CA:EE:5D:39:C6:9E:28:5E:E5:94:13:72:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/10029b29-7aab-3c24-ab07-53a19d96ea6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:8b:82:47:14:88:bf:ec:e4:1e:d9:31:70:c6:d0:cd:ce:89:
         d8:b9:62:a7:53:7b:c3:e7:b0:59:33:e2:a7:7a:ec:1b:2e:f1:
         ff:77:61:2e:d4:21:d0:90:e1:fd:3d:bf:15:95:40:e1:44:6e:
         2d:66:c3:d4:ca:bb:c1:a7:65:a0:40:a1:94:d2:7a:61:9c:c9:
         48:82:53:d7:b6:1f:65:56:e3:83:86:bc:b9:f6:e4:8e:d1:f4:
         6e:94:76:9d:be:ef:cc:9a:b0:d4:d4:75:02:fa:a9:86:21:42:
         53:e9:ea:bb:14:2b:8b:a4:37:09:54:0f:ed:11:d3:97:2e:b9:
         59:5b:02:1c:3c:7f:3c:3a:35:2a:fc:c2:5c:46:9f:a2:4f:c3:
         0c:5a:c3:0f:ac:a3:f8:fe:0f:bb:fd:bd:ac:6e:94:30:21:cd:
         7b:21:83:d3:27:97:ca:13:6d:ab:2d:e1:36:11:7d:46:5c:52:
         14:23:f7:95:a4:89:a1:d7:42:4e:f8:3c:88:4f:03:6a:35:88:
         73:7e:be:e2:90:57:91:71:85:19:fd:c5:b5:72:5a:4f:6f:00:
         2e:ce:eb:ef:47:37:bb:81:ec:45:85:7d:eb:46:85:16:bb:51:
         45:23:4f:fe:3a:7d:6f:eb:d7:6f:32:4a:13:70:2c:a5:5e:13:
         c4:e7:b8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 13:27:17 2025 by rpki-client