Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c791efce-875e-3f9e-a6cd-584ea07fc72d.roa
File:                     c791efce-875e-3f9e-a6cd-584ea07fc72d.roa (raw, json)
Hash identifier:          iRg9B/Qg6LDzTNv55vyxmzd8NKFjQKlHvdHbFXrxGis=
Subject key identifier:   3A:A6:8D:E0:7E:78:D6:38:85:54:F9:89:F9:CB:D7:40:8C:D1:0B:DF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B1F017917C88E0A722A0E2580
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c791efce-875e-3f9e-a6cd-584ea07fc72d.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     48031
IP address blocks:        104.165.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:79:17:c8:8e:0a:72:2a:0e:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=eaaa1ebd-5b4b-4210-94c5-0019df121950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:38:2f:f7:68:a2:3e:6f:e3:21:89:0d:dc:63:
                    34:04:c5:9c:c7:64:49:a3:dc:c0:e3:55:fa:2d:d7:
                    e7:e9:61:1b:31:4f:29:be:16:51:cb:93:d7:21:d8:
                    5f:d6:2d:46:b8:ae:64:a2:84:3c:ae:1c:0b:e3:f3:
                    2c:7b:02:40:74:d5:0b:d9:f4:93:36:64:68:c6:87:
                    39:e2:90:fb:fb:d0:a9:ea:11:f0:d3:11:5e:72:7f:
                    71:77:33:41:2a:04:21:07:db:dd:85:d2:5c:f1:a8:
                    27:f6:d3:24:0b:ce:24:41:01:4b:0d:25:45:46:0a:
                    53:30:ce:f3:5f:9d:90:74:fe:d0:2c:91:10:ac:2f:
                    fa:bf:37:7b:06:40:6c:ae:ff:7f:4c:ef:51:f7:e9:
                    63:a3:c4:09:59:9d:61:3e:66:de:f0:c6:b6:94:32:
                    96:76:43:8b:6f:08:ed:d8:da:78:f8:b3:9c:88:16:
                    7b:b2:d4:9e:fa:16:c2:3d:dd:7a:44:6d:dc:20:2b:
                    50:0c:f1:7a:0b:f7:22:7c:e7:a8:4b:24:53:9d:56:
                    f3:11:57:62:30:fb:e0:ce:9e:28:62:f1:48:0e:ab:
                    b4:37:47:46:98:8d:8c:da:70:95:4c:a5:87:31:83:
                    75:19:6e:ca:ba:7f:c8:0a:d6:99:59:c5:0a:bf:f4:
                    2b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A6:8D:E0:7E:78:D6:38:85:54:F9:89:F9:CB:D7:40:8C:D1:0B:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c791efce-875e-3f9e-a6cd-584ea07fc72d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:55:28:85:f1:30:7e:38:c6:d4:7c:f7:47:e2:22:6e:17:d2:
         cc:e1:61:57:b9:57:6b:71:20:a9:6c:f2:7a:51:a7:16:7d:11:
         65:80:16:1b:0a:06:5f:e3:3d:8b:87:75:d6:d0:25:96:77:c0:
         47:f2:8e:e9:16:91:e9:31:79:e1:16:2d:87:ae:6b:0d:02:fa:
         fc:99:a7:e5:2e:e4:2f:f6:a5:89:f9:0b:0b:af:45:a6:28:ef:
         34:64:d6:74:9e:77:23:0c:d5:f6:71:d3:46:b3:46:73:f5:1a:
         10:69:6d:e6:16:97:da:31:21:67:e1:d8:68:76:cb:4c:02:1e:
         ad:c3:28:ab:3e:ec:4a:02:7c:98:7d:8e:79:d4:3b:df:87:df:
         e8:d6:06:44:2a:d4:14:ba:8c:49:f7:56:6f:86:1c:9f:94:cf:
         b5:92:3d:40:53:3b:6f:4e:15:82:43:8e:39:e8:0f:f9:b4:f6:
         ec:0d:97:ae:39:3a:18:0a:d3:d2:5f:26:10:b0:15:ce:f8:90:
         49:d5:9c:da:75:5a:74:a6:d6:e6:1a:df:09:75:e7:a1:71:5d:
         32:ea:2e:7d:24:5c:5f:8e:77:13:6b:b2:53:e6:78:49:75:5c:
         ac:7a:93:58:04:fe:22:b1:2e:2f:26:56:ee:c7:23:5f:45:a3:
         db:37:7d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 13:01:26 2025 by rpki-client