Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/298096da-627a-324e-820d-e1edbbe6f4c3.roa
File:                     298096da-627a-324e-820d-e1edbbe6f4c3.roa (raw, json)
Hash identifier:          NrW2ryC1d8l1uV2YPg4HviIwDf7AkeLPagYiPpwhYBI=
Subject key identifier:   B2:1C:D6:BA:8C:B4:B1:46:3A:64:BD:70:DF:9B:63:D3:B1:10:FF:2D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A4DA0523481C8F96021A98780
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/298096da-627a-324e-820d-e1edbbe6f4c3.roa
Signing time:             Wed 25 Jun 2025 01:00:49 +0000
ROA not before:           Wed 25 Jun 2025 01:00:49 +0000
ROA not after:            Tue 23 Sep 2025 01:00:49 +0000
asID:                     214238
IP address blocks:        104.164.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4d:a0:52:34:81:c8:f9:60:21:a9:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 25 01:00:49 2025 GMT
            Not After : Sep 23 01:00:49 2025 GMT
        Subject: CN=2a01daf4-e9aa-4c83-9754-accb42233afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fd:39:c5:3d:b9:d7:9a:ed:3d:fc:46:3a:08:
                    72:cd:59:2a:d3:32:49:d7:1f:7c:5a:c8:04:e4:70:
                    85:ed:16:b6:57:26:f9:88:01:aa:c5:7e:d9:b9:e7:
                    41:88:5d:d6:bf:90:1f:18:04:16:90:11:65:59:78:
                    a9:c6:8f:14:0b:d8:2c:44:02:8c:6b:ae:a4:85:c8:
                    c3:10:2f:ba:8e:aa:2a:e0:c2:96:8d:06:6d:02:56:
                    52:f1:0c:48:34:97:2c:fd:d0:70:ed:ad:ec:89:ce:
                    d4:79:6f:49:19:a4:f3:7a:f1:9f:c7:b9:73:1c:d6:
                    66:c0:1b:03:6e:44:9f:b2:1f:69:58:85:1f:d7:0f:
                    c7:bc:84:b3:b4:7e:c3:b1:11:ed:8c:00:c9:74:38:
                    74:aa:d8:74:ea:a0:1f:e0:2d:ff:85:14:c8:54:9c:
                    3c:66:32:bd:09:0d:a9:8e:46:aa:bc:fd:d1:b5:40:
                    46:af:67:3b:ac:28:28:0c:6a:6b:66:bb:a4:13:e5:
                    97:7e:ed:76:c3:8e:d9:c8:11:02:df:bd:51:d3:0a:
                    f6:81:b0:e7:62:57:20:4e:81:37:60:b8:50:55:57:
                    8e:85:e3:e6:24:83:9e:7f:a8:0d:7a:d1:6e:f9:ca:
                    59:90:79:c8:71:08:98:e3:bc:af:a9:e1:37:5a:cd:
                    ce:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:1C:D6:BA:8C:B4:B1:46:3A:64:BD:70:DF:9B:63:D3:B1:10:FF:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/298096da-627a-324e-820d-e1edbbe6f4c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:cf:8d:22:d4:30:c6:82:6e:d2:1d:34:f6:e6:3f:a7:a1:39:
         fd:8b:3b:a4:e3:95:c2:c6:2b:9b:17:7b:c2:62:29:61:ba:88:
         0d:59:f0:9d:0c:44:f0:fa:51:6f:a4:20:f2:44:7b:30:ba:43:
         d6:42:5c:99:3a:d7:48:d1:88:50:3a:32:04:b8:b4:62:24:2e:
         dc:3f:fa:3b:c3:dd:92:96:57:ef:1b:71:02:31:64:46:95:40:
         38:04:2b:0a:91:66:0c:a3:f4:74:01:2c:fe:e9:15:66:53:fa:
         97:7a:4e:16:cc:95:dd:f3:24:82:ec:4d:5f:44:bf:0b:43:7f:
         8b:08:a4:4a:bd:12:05:90:f5:30:7c:54:9d:94:99:31:d9:bc:
         72:02:41:33:14:43:51:f6:34:d1:1f:65:08:92:ab:9c:ef:c3:
         a1:21:91:94:9f:66:17:5a:b5:cc:b1:68:15:2d:60:47:bb:17:
         64:8f:cc:9f:dc:a3:ba:c3:34:6f:6e:c5:56:0b:aa:3c:f4:a4:
         95:3e:ea:cb:7b:aa:93:c8:3f:e9:05:8f:d7:52:b2:8d:ad:a3:
         a0:b7:c9:54:1f:82:9b:ce:a1:ae:0b:ac:93:ef:58:86:e3:4b:
         d9:a9:2a:ab:01:db:56:60:59:8e:4a:e3:92:83:57:36:61:cc:
         ee:31:51:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 23:31:29 2025 by rpki-client