Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/549956e0-0df8-3f86-958e-8058c341edbf.roa
File:                     549956e0-0df8-3f86-958e-8058c341edbf.roa (raw, json)
Hash identifier:          tPpBJSUgI9RqL2Napuwr+2dRLofBciieEGrEwgL9Hyo=
Subject key identifier:   0B:73:31:2B:5B:D9:A3:1B:BD:10:47:A6:47:29:43:34:A4:01:81:FC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B2E5C591A6CBF18C8E1C74E00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/549956e0-0df8-3f86-958e-8058c341edbf.roa
Signing time:             Sat 13 Sep 2025 13:00:41 +0000
ROA not before:           Sat 13 Sep 2025 13:00:41 +0000
ROA not after:            Fri 12 Dec 2025 14:00:41 +0000
asID:                     214238
IP address blocks:        104.164.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2e:5c:59:1a:6c:bf:18:c8:e1:c7:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 13 13:00:41 2025 GMT
            Not After : Dec 12 14:00:41 2025 GMT
        Subject: CN=a415d644-d0a9-4648-af7f-581a66ff2837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:86:ba:33:08:b1:70:70:e6:e6:d3:12:7b:2a:
                    ec:b3:10:8f:be:5d:4f:e6:f7:c9:bf:f2:8c:44:2d:
                    dc:52:80:bb:27:05:4b:fd:90:17:ec:ab:61:8b:74:
                    ab:f0:9d:e6:5c:01:d0:5d:5c:1a:bf:f7:70:67:0e:
                    34:17:64:34:7b:6c:72:d5:3f:58:89:60:24:73:61:
                    d9:b1:c4:c6:7e:78:4b:61:f2:00:90:c1:a8:2d:03:
                    0d:49:9b:77:ef:0a:15:8f:c0:30:25:c2:00:30:32:
                    80:aa:57:5e:e7:a0:b5:dc:69:98:4b:f3:19:85:61:
                    41:3e:33:ef:93:c8:db:27:23:5a:49:05:e4:7f:1c:
                    2a:9f:e3:dc:77:a6:ac:ae:8c:de:1c:83:90:09:75:
                    b8:12:1f:5e:98:83:de:91:2a:53:28:41:e7:b2:cd:
                    95:d0:6e:b9:8e:71:05:b8:d4:62:94:97:9d:c9:d0:
                    de:be:7b:86:c6:28:ee:0b:7a:7e:fc:d5:92:8a:37:
                    d0:ae:37:2b:a2:58:5a:e6:50:6b:d0:29:1e:8a:2d:
                    26:56:2e:6d:bb:61:38:2a:69:55:36:92:b9:c9:df:
                    3c:4d:56:51:23:cd:17:ea:b4:b5:5a:72:46:22:41:
                    6c:1e:51:33:7b:db:33:da:ac:1a:db:98:25:eb:9c:
                    98:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:73:31:2B:5B:D9:A3:1B:BD:10:47:A6:47:29:43:34:A4:01:81:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/549956e0-0df8-3f86-958e-8058c341edbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:0d:f4:87:11:36:23:e9:f7:9c:f2:64:a2:32:15:f5:ae:b0:
         17:3e:62:8d:f5:74:bb:a2:29:20:97:fb:69:c7:6a:de:0d:17:
         89:51:be:7b:58:9b:35:40:c3:77:aa:91:c9:01:53:8c:b8:13:
         cc:54:4f:d1:25:1e:bc:75:e6:3b:d2:b4:bf:53:e4:4d:aa:47:
         86:fa:33:26:c4:61:9b:14:b4:d9:7d:fe:e5:c3:eb:3b:e8:b4:
         40:da:9d:f1:b2:3f:b9:8b:77:e0:40:7c:47:03:d3:d7:f8:80:
         e1:f2:8f:78:92:a4:70:dd:65:6d:f8:c9:15:f8:8b:47:8e:dd:
         d6:69:7d:30:52:ed:4c:7c:26:cc:31:91:5b:04:f0:67:73:58:
         b2:f4:59:72:5b:48:c8:b1:22:eb:14:5e:42:dc:98:54:60:d0:
         2d:fd:40:9c:b6:83:61:75:73:44:99:46:40:00:d5:5a:3a:9e:
         17:aa:e3:41:14:9c:38:1b:17:0f:e3:95:ed:aa:d8:09:d1:14:
         e6:03:af:69:d3:f0:72:87:ab:d7:17:c8:63:f7:4e:44:a2:33:
         2a:88:3d:ea:40:18:6f:cd:66:b3:ef:cb:c1:14:4a:06:56:cf:
         c8:0b:18:cc:94:14:af:0f:c2:3f:c9:98:98:62:5f:86:a8:c1:
         2c:62:af:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXFkabL8YyOHHTgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk
YTQxNWQ2NDQtZDBhOS00NjQ4LWFmN2YtNTgxYTY2ZmYyODM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooa6MwixcHDm5tMSeyrssxCPvl1P5vfJv/KM
RC3cUoC7JwVL/ZAX7Kthi3Sr8J3mXAHQXVwav/dwZw40F2Q0e2xy1T9YiWAkc2HZ
scTGfnhLYfIAkMGoLQMNSZt37woVj8AwJcIAMDKAqlde56C13GmYS/MZhWFBPjPv
k8jbJyNaSQXkfxwqn+Pcd6asrozeHIOQCXW4Eh9emIPekSpTKEHnss2V0G65jnEF
uNRilJedydDevnuGxijuC3p+/NWSijfQrjcrolha5lBr0Ckeii0mVi5tu2E4KmlV
NpK5yd88TVZRI80X6rS1WnJGIkFsHlEze9sz2qwa25gl65yYpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAtzMStb2aMbvRBHpkcpQzSkAYH8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNTQ5OTU2ZTAtMGRmOC0z
Zjg2LTk1OGUtODA1OGMzNDFlZGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKTGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJQN9IcRNiPp95zyZKIyFfWusBc+Yo31dLuiKSCX+2nHat4NF4lRvntY
mzVAw3eqkckBU4y4E8xUT9ElHrx15jvStL9T5E2qR4b6MybEYZsUtNl9/uXD6zvo
tEDanfGyP7mLd+BAfEcD09f4gOHyj3iSpHDdZW34yRX4i0eO3dZpfTBS7Ux8Jswx
kVsE8GdzWLL0WXJbSMixIusUXkLcmFRg0C39QJy2g2F1c0SZRkAA1Vo6nheq40EU
nDgbFw/jle2q2AnRFOYDr2nT8HKHq9cXyGP3TkSiMyqIPepAGG/NZrPvy8EUSgZW
z8gLGMyUFK8Pwj/JmJhiX4aowSxir6Y=
-----END CERTIFICATE-----
Generated at Sat Oct 11 11:14:52 2025 by rpki-client