Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8acbae56-b511-3593-a57a-c7036921d162.roa
File:                     8acbae56-b511-3593-a57a-c7036921d162.roa (raw, json)
Hash identifier:          tNEQGNj+pRVWRu7LM6jXLfH/OOHTnQYL20V2+BQvJBw=
Subject key identifier:   FE:0C:A5:D5:4D:36:06:5C:0C:A4:8F:8B:96:89:AC:CC:2B:16:E7:58
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B758CA2899D2DEB703ADB2A00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8acbae56-b511-3593-a57a-c7036921d162.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     54600
IP address blocks:        104.165.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:a2:89:9d:2d:eb:70:3a:db:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=2322be39-9e1e-4ff9-bfbc-9be41cc3515a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d9:f7:e7:b1:27:23:7e:8c:42:c5:27:0b:92:
                    f9:38:47:4d:38:5d:ea:9c:dd:e4:e8:40:a2:13:90:
                    ea:b6:57:de:2c:4d:64:57:c0:ce:95:3a:ff:55:34:
                    96:f6:d9:98:be:36:33:17:26:60:17:64:37:9a:97:
                    56:c1:33:31:d2:24:80:08:e6:a1:33:54:61:c7:fb:
                    8d:0d:da:d1:5f:b4:b1:b9:0b:47:42:ae:6d:a3:52:
                    0e:0f:16:10:a0:4e:6c:93:53:97:c3:05:21:ba:5e:
                    f5:ec:40:cd:b6:6a:75:15:95:ba:c9:ab:8a:f4:05:
                    5f:1e:45:53:de:1d:1a:b0:da:b7:f6:d6:5e:f1:09:
                    92:68:52:dd:86:8e:fd:17:53:b3:6f:61:fd:08:69:
                    a2:b3:3f:5b:cd:b7:28:61:d6:ee:f0:1a:09:af:5e:
                    31:7b:44:c9:6d:99:d3:fa:4f:7a:0d:8c:1f:3c:76:
                    8b:71:19:90:65:79:2a:08:39:2f:4b:d3:43:48:f1:
                    3a:c8:9c:f1:8c:cb:c6:da:4c:d4:a3:3c:bd:5f:ae:
                    84:f6:4d:33:ec:3a:7c:d2:a2:26:92:4c:ee:3f:1a:
                    a1:62:8b:fb:3e:58:8d:6b:a8:2a:0c:a2:11:c8:b8:
                    e8:78:4a:84:db:cd:e1:ce:91:9d:58:88:6f:3c:5a:
                    d9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:0C:A5:D5:4D:36:06:5C:0C:A4:8F:8B:96:89:AC:CC:2B:16:E7:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8acbae56-b511-3593-a57a-c7036921d162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:51:2f:2e:23:7c:37:d8:99:a0:ed:f8:6a:c7:a8:17:ba:07:
         b6:5e:f1:b3:3a:05:65:ca:77:2b:97:e2:a8:81:61:49:1a:30:
         41:db:cf:95:db:7a:8a:ce:28:cf:30:30:76:be:6c:79:65:f0:
         98:8d:94:08:42:a5:bc:05:d9:01:7e:a4:f7:40:3d:bb:06:36:
         f1:3a:fb:f9:00:1b:be:15:58:45:ff:50:89:ab:6f:6d:2e:fd:
         6d:0a:d9:92:0f:30:00:05:40:be:c4:45:b1:1c:63:55:fb:f0:
         f2:0f:a2:3a:c2:bb:53:e4:94:07:d9:e4:dd:4e:a4:32:8d:79:
         aa:ff:f3:d8:91:71:90:f2:b7:f3:da:36:f2:60:fa:fb:13:dd:
         1c:82:66:af:45:2b:89:42:76:0b:d3:23:ed:bd:b3:30:e4:c8:
         11:4f:0c:41:cb:67:9b:1e:16:02:51:44:d7:1d:bd:26:4d:47:
         b3:b3:1b:d8:8c:b7:fb:a4:1c:7a:e7:e6:cb:67:d6:06:20:49:
         cf:ef:96:4e:23:85:3d:e0:85:c2:75:ea:1e:2c:0f:79:98:58:
         e4:da:c9:d8:fa:2f:5c:91:eb:e3:9d:2b:db:9e:d3:b6:cb:25:
         cf:05:27:a1:ff:7e:21:45:b1:c5:c4:e3:30:99:3f:0b:90:ce:
         ff:11:d4:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jKKJnS3rcDrbKgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk
MjMyMmJlMzktOWUxZS00ZmY5LWJmYmMtOWJlNDFjYzM1MTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtn357EnI36MQsUnC5L5OEdNOF3qnN3k6ECi
E5DqtlfeLE1kV8DOlTr/VTSW9tmYvjYzFyZgF2Q3mpdWwTMx0iSACOahM1Rhx/uN
DdrRX7SxuQtHQq5to1IODxYQoE5sk1OXwwUhul717EDNtmp1FZW6yauK9AVfHkVT
3h0asNq39tZe8QmSaFLdho79F1Ozb2H9CGmisz9bzbcoYdbu8BoJr14xe0TJbZnT
+k96DYwfPHaLcRmQZXkqCDkvS9NDSPE6yJzxjMvG2kzUozy9X66E9k0z7Dp80qIm
kkzuPxqhYov7PliNa6gqDKIRyLjoeEqE283hzpGdWIhvPFrZTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP4MpdVNNgZcDKSPi5aJrMwrFudYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOGFjYmFlNTYtYjUxMS0z
NTkzLWE1N2EtYzcwMzY5MjFkMTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKXtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADNRLy4jfDfYmaDt+GrHqBe6B7Ze8bM6BWXKdyuX4qiBYUkaMEHbz5Xb
eorOKM8wMHa+bHll8JiNlAhCpbwF2QF+pPdAPbsGNvE6+/kAG74VWEX/UImrb20u
/W0K2ZIPMAAFQL7ERbEcY1X78PIPojrCu1PklAfZ5N1OpDKNear/89iRcZDyt/Pa
NvJg+vsT3RyCZq9FK4lCdgvTI+29szDkyBFPDEHLZ5seFgJRRNcdvSZNR7OzG9iM
t/ukHHrn5stn1gYgSc/vlk4jhT3ghcJ16h4sD3mYWOTaydj6L1yR6+OdK9ue07bL
Jc8FJ6H/fiFFscXE4zCZPwuQzv8R1G8=
-----END CERTIFICATE-----
Generated at Sat Oct 11 11:13:45 2025 by rpki-client