Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/33c64224-1c10-3358-ae30-982f066bab74.roa
File:                     33c64224-1c10-3358-ae30-982f066bab74.roa (raw, json)
Hash identifier:          2Jv7ySUOV7cFnZ55FXYhr+uzk56vD2Lv3N1PgUKnaM8=
Subject key identifier:   A2:EF:90:6B:14:13:FB:36:DB:68:6F:31:D4:D8:15:41:85:FA:BF:BC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B2E5C45507E3E3C15893A5680
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/33c64224-1c10-3358-ae30-982f066bab74.roa
Signing time:             Sat 13 Sep 2025 13:00:41 +0000
ROA not before:           Sat 13 Sep 2025 13:00:41 +0000
ROA not after:            Fri 12 Dec 2025 14:00:41 +0000
asID:                     214238
IP address blocks:        104.165.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2e:5c:45:50:7e:3e:3c:15:89:3a:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 13 13:00:41 2025 GMT
            Not After : Dec 12 14:00:41 2025 GMT
        Subject: CN=fe1eb1ac-1bbf-41ab-b3f3-8e19f9cc4e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:00:b3:2a:60:4b:8e:6c:ac:c3:7e:57:68:d5:
                    08:ba:c4:5f:a3:6d:49:60:4d:8c:23:03:ce:4f:22:
                    dd:8f:7f:13:15:a0:b8:20:f0:37:34:d0:2d:e5:15:
                    97:77:a8:b7:a8:53:ef:38:9f:11:bf:ee:83:03:6b:
                    52:6a:da:10:02:91:22:43:98:87:54:c8:ef:f2:89:
                    a7:6e:34:80:5c:a1:4e:e9:85:0d:4b:46:fd:3f:b5:
                    4a:42:d8:df:c5:1a:76:ef:7c:39:df:10:44:36:46:
                    b4:fd:6b:ec:b6:7c:71:22:1f:d7:06:ab:e1:e2:02:
                    e8:0a:aa:29:36:3a:44:a9:0a:a7:63:8a:aa:92:c1:
                    bb:2c:70:c1:e6:7d:dd:8e:1f:e3:4e:83:64:02:c5:
                    9a:ed:46:1c:df:e1:cf:63:41:d2:08:86:b3:90:7c:
                    eb:e4:e1:98:bc:8d:8e:ff:d9:66:9c:41:1c:be:90:
                    4e:24:db:eb:b7:88:c0:29:45:e1:e0:35:ec:a7:47:
                    49:57:17:16:c7:3d:7b:0c:fe:ef:fe:fa:24:86:f7:
                    92:dc:0c:4b:0a:bb:42:1e:49:46:7b:5e:51:b9:ed:
                    7d:7d:5f:87:bc:fa:33:2c:23:1a:dc:76:ac:f1:5c:
                    c2:be:1e:59:0e:ad:ef:df:ca:57:b6:d7:9a:f7:4f:
                    09:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EF:90:6B:14:13:FB:36:DB:68:6F:31:D4:D8:15:41:85:FA:BF:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/33c64224-1c10-3358-ae30-982f066bab74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:7b:40:8e:03:4f:e5:4f:a3:14:de:88:cb:ce:2e:c5:e5:1d:
         87:7c:ef:e1:e7:6d:54:1b:f9:dd:4a:d8:56:5c:0a:37:53:a6:
         5f:a9:2a:2a:4a:3f:fc:2f:d1:31:44:bb:4f:dd:4d:91:89:60:
         60:a7:6f:29:c3:b6:c4:71:a3:50:36:35:82:cb:e7:c3:4a:79:
         66:21:5a:cf:e7:31:38:9c:1b:ed:93:a4:71:46:71:f2:5f:a5:
         41:a6:ae:2e:d9:4c:48:c9:b0:48:45:44:7c:9d:37:c4:1e:da:
         5f:56:c3:39:a9:ba:57:c1:32:2f:9d:e9:b6:38:5f:14:bc:7a:
         6e:6e:52:40:54:bb:fe:fc:1e:fa:0c:4d:06:96:91:4d:7b:f3:
         a8:d7:69:76:57:ed:4b:b2:8c:ce:89:4b:ea:2d:45:59:3a:a2:
         57:cd:3b:1d:0b:e4:cc:e4:5a:31:a2:47:be:3f:d8:c3:bd:50:
         ac:70:25:70:44:41:9c:9e:d8:9f:45:15:8a:d0:ff:44:4a:c8:
         59:17:cf:f3:ac:a4:25:bc:96:66:8c:72:1e:9f:db:5f:80:2e:
         ff:60:3f:d8:bb:3d:1a:31:d5:94:0f:ab:f8:d1:2a:33:d5:64:
         aa:aa:15:02:a9:2a:c8:b6:eb:f0:da:8d:ad:cd:fc:bc:ba:9f:
         08:ba:40:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:15:54 2025 by rpki-client