Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6368b0d6-54dc-3e14-9c96-ef9992a53554.roa
File:                     6368b0d6-54dc-3e14-9c96-ef9992a53554.roa (raw, json)
Hash identifier:          D/JB5lod9nxQHj81E9pprWXAc6WUsnpce+t6zGdbOfs=
Subject key identifier:   86:A2:24:15:14:6E:39:B6:F3:CB:35:79:0B:D0:60:6B:88:6A:5B:1B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A85075678D2395B3D720C7840
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6368b0d6-54dc-3e14-9c96-ef9992a53554.roa
Signing time:             Mon 14 Jul 2025 21:18:03 +0000
ROA not before:           Mon 14 Jul 2025 21:18:03 +0000
ROA not after:            Sun 12 Oct 2025 21:18:03 +0000
asID:                     44559
IP address blocks:        104.165.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:07:56:78:d2:39:5b:3d:72:0c:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 14 21:18:03 2025 GMT
            Not After : Oct 12 21:18:03 2025 GMT
        Subject: CN=45b2ad42-4494-485f-ab91-4eb558d4fc16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4c:cc:f1:e8:56:aa:ca:0e:f4:09:56:d4:05:
                    6c:8d:5f:6c:e7:2e:c9:66:d5:f2:1a:0b:1d:5b:86:
                    7c:14:0f:9f:91:ea:36:57:7c:3b:ee:96:02:db:69:
                    73:e8:6d:81:38:dc:97:fd:65:f9:a8:2d:41:f5:f4:
                    27:e2:bd:a6:5b:5b:37:b1:f0:e1:0d:d4:5e:14:7b:
                    b7:67:95:df:a3:e4:17:94:9b:90:22:4e:c1:bb:23:
                    6c:48:e3:00:74:27:0a:7c:f6:04:1c:e5:fd:9a:d9:
                    5a:81:0f:13:0f:dd:e7:cd:d4:18:51:17:47:84:ae:
                    1d:f1:24:fa:e1:f2:79:fb:b3:c8:09:c7:dc:05:64:
                    9e:16:38:2a:9b:33:f4:ba:99:5d:de:95:91:0f:62:
                    7e:3a:8c:31:3f:d3:cb:51:16:bd:c0:e0:c4:69:b3:
                    59:b3:15:6a:78:69:71:ed:9c:de:b9:a5:13:5a:43:
                    7c:3d:a9:9e:56:42:14:28:94:30:7f:7c:8a:95:03:
                    aa:81:10:69:8c:1e:69:3e:a0:2b:a0:21:93:93:90:
                    48:7f:7b:66:95:95:c2:62:a4:2e:8a:24:a4:63:1e:
                    d2:f2:f8:a1:2a:78:16:26:74:ac:d3:64:8a:7e:bc:
                    25:db:58:3c:6e:0f:97:6e:71:d3:ff:1c:30:9e:c0:
                    e9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A2:24:15:14:6E:39:B6:F3:CB:35:79:0B:D0:60:6B:88:6A:5B:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6368b0d6-54dc-3e14-9c96-ef9992a53554.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:a9:30:af:49:60:5d:54:4c:9d:12:0d:a3:80:1f:2a:ed:11:
         c6:70:0e:61:7b:90:5f:3c:15:58:48:29:fa:ad:7e:aa:e6:f3:
         cc:20:8f:9c:e9:2a:19:37:d6:93:f0:c1:da:c0:ff:15:db:b8:
         c5:a4:8b:79:d2:ed:df:a7:08:89:54:2b:db:9d:e1:52:2c:bd:
         a6:a9:11:9d:65:34:b1:91:8f:26:90:13:80:60:7c:56:f2:b7:
         5c:11:e8:8c:42:cd:35:25:9b:be:29:30:33:85:7c:a0:f3:09:
         a8:c9:92:55:30:35:4e:a6:e7:8d:f2:12:0e:48:bc:31:76:29:
         71:37:c5:c6:b7:42:5d:c6:3f:03:d4:d7:c0:bb:b8:cc:ff:59:
         c6:92:40:17:e0:95:5e:93:a7:1e:44:39:63:c0:c8:e2:05:bf:
         d1:45:42:fa:9c:56:dc:57:a5:8f:f1:bc:62:d8:7d:5c:36:f5:
         2a:8c:b2:30:02:ea:27:c1:82:f4:f4:16:ad:b7:f1:23:8a:13:
         93:c3:4e:34:74:dc:ef:68:80:bb:66:bb:bc:12:13:2b:dc:82:
         38:56:d2:1b:4f:01:f7:bb:5d:c3:17:c0:d4:3a:4e:7d:43:cc:
         71:15:8c:f8:89:af:95:08:41:c2:4b:c9:6a:01:c3:06:c5:c0:
         52:76:68:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:42:53 2025 by rpki-client