Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/32bce3c7-4124-37b3-abf3-aa2f79db27aa.roa
File:                     32bce3c7-4124-37b3-abf3-aa2f79db27aa.roa (raw, json)
Hash identifier:          cYztre+tYpNlASGS9ldE3rNwvpXZ5weUZoZHbYXhbpE=
Subject key identifier:   F7:86:3F:A6:8E:FD:C0:F6:F2:69:1C:E7:15:3E:4D:97:09:A4:B0:97
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B758CB08143F0E458DDF95090
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/32bce3c7-4124-37b3-abf3-aa2f79db27aa.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     212238
IP address blocks:        104.164.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:b0:81:43:f0:e4:58:dd:f9:50:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=67989d25-5048-410e-9956-b0023bb635ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ec:15:62:95:5c:50:27:4e:fe:fb:60:8f:29:
                    58:3d:b9:58:74:cb:c0:bb:06:92:38:7b:31:57:b4:
                    1d:c9:01:bf:db:2a:57:e9:4b:92:11:98:88:0a:e6:
                    40:7e:24:ec:f8:da:56:08:a1:9c:39:fc:ff:5d:a9:
                    d8:a9:f0:3b:f7:fd:82:9c:3d:8a:cc:e0:ea:3c:03:
                    a1:86:2e:d2:57:96:8c:eb:8f:71:b5:bf:a7:bc:a5:
                    5e:9a:48:c5:45:25:7d:6e:ba:e0:5e:02:11:e2:68:
                    7e:0b:05:67:68:01:4d:ba:2a:ef:69:8e:51:c0:0b:
                    52:56:a3:2e:1f:51:56:10:1a:87:ca:ad:f0:c4:89:
                    06:de:03:69:fa:97:0a:69:0c:3a:aa:3a:05:4d:0b:
                    ef:16:23:2f:46:65:50:8e:af:48:71:e2:03:3c:16:
                    47:30:39:08:d8:3a:49:75:70:ed:7f:f3:d6:2e:85:
                    98:72:28:ed:5b:85:5f:43:2a:bc:27:6f:cf:49:19:
                    b8:0a:42:95:f9:44:a9:a0:fe:17:78:fd:ed:a8:a5:
                    c9:0a:5f:7d:12:eb:f8:46:7a:f2:58:dd:9c:57:bc:
                    03:77:84:36:f2:26:a7:68:52:43:8f:de:9e:41:f7:
                    37:78:a5:82:c9:3e:cf:f0:45:59:93:74:e3:b4:ed:
                    9d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:86:3F:A6:8E:FD:C0:F6:F2:69:1C:E7:15:3E:4D:97:09:A4:B0:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/32bce3c7-4124-37b3-abf3-aa2f79db27aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:93:b4:67:03:2f:59:24:b5:8c:4b:e9:f9:3d:18:ff:d6:67:
         b1:e8:fc:26:95:09:27:72:19:9f:77:88:03:6c:27:94:28:b2:
         59:ad:bc:0b:3b:a3:d1:87:e9:50:26:a6:df:ab:8d:34:39:5d:
         b2:c9:f2:34:e1:77:32:a8:12:9a:9f:e8:62:4a:a7:29:ce:1a:
         6a:24:82:f2:83:ca:b6:64:43:e1:94:ec:6c:2a:f8:52:f2:dc:
         fe:c7:6a:ff:ed:06:f5:3f:f8:96:9d:37:6b:15:b8:c9:5a:cb:
         10:15:bc:20:39:79:4a:14:94:42:24:dc:3a:51:4c:7d:e6:c0:
         c9:e0:20:83:43:65:53:55:8e:8f:15:31:f7:b8:ea:e3:2d:7f:
         db:49:25:c2:93:38:88:3d:1e:08:a8:63:cc:a0:18:d4:1d:54:
         d5:a6:8c:05:4a:a5:e9:fa:3e:bc:b4:a1:f9:9d:a9:c2:a6:c5:
         1e:d9:ef:40:cc:0a:20:34:73:fc:60:07:ff:84:c7:f0:e4:c5:
         54:f4:e0:19:af:a0:b6:4f:7d:c0:92:4f:e3:c4:d2:32:1a:1d:
         06:58:ae:b5:cc:76:83:48:ca:6c:1a:0b:eb:07:79:c9:af:09:
         b2:a8:4d:87:39:62:e1:ae:96:96:42:38:70:3b:4e:16:53:be:
         db:f7:19:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:09:11 2025 by rpki-client