Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2ba66495-1e17-379f-9a90-2cc8dbf7141a.roa
File:                     2ba66495-1e17-379f-9a90-2cc8dbf7141a.roa (raw, json)
Hash identifier:          AVCOnWDrrhbBiw/e7phMZ7SJtShS+miW28BwEcLKV5Y=
Subject key identifier:   D7:AB:D6:DB:D5:40:8A:28:6D:1C:4B:71:E0:9E:0B:10:9C:E3:A9:35
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848CDE100075B69F04A6370B900
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2ba66495-1e17-379f-9a90-2cc8dbf7141a.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     11404
IP address blocks:        104.165.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:00:07:5b:69:f0:4a:63:70:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=e898e527-a715-4fb5-a5f4-dd7ef63f4b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:35:ed:da:ff:63:f9:80:5f:7a:11:af:56:9b:
                    09:7e:b5:77:7b:17:c7:2e:b6:22:ba:3d:ff:4d:6a:
                    7c:d2:ec:db:0e:0e:8c:64:a0:e8:7b:06:bc:fc:ca:
                    92:17:24:03:0b:06:c8:c5:28:c3:7e:75:e9:91:e8:
                    e8:c3:1e:a6:44:60:d9:6d:ac:f6:f5:57:39:1c:93:
                    8e:1c:45:d8:77:25:4b:44:50:97:95:84:94:d7:49:
                    ef:e2:df:1c:31:c1:08:b0:86:32:6d:a1:dd:ab:a2:
                    76:9b:ea:4d:e0:13:23:75:8a:fb:28:c6:34:df:a3:
                    73:4a:26:3a:71:32:60:17:b8:f5:dc:3e:c7:dc:29:
                    0a:28:ce:ef:72:9e:12:2b:9a:4d:30:62:6a:12:3c:
                    a4:4a:95:1a:4d:61:21:c2:b4:a1:fe:98:7d:78:32:
                    d5:05:ce:8c:cf:92:7b:46:02:c9:93:78:0a:76:a4:
                    b5:81:bc:17:9c:8e:f7:c3:60:3b:6e:79:d5:9a:43:
                    1e:70:8f:6b:56:ac:2a:17:fa:58:9f:22:76:7c:cb:
                    70:b4:93:e3:3c:fe:77:71:ea:8f:ca:26:ff:68:6b:
                    ce:5e:8f:93:db:da:10:02:37:31:0e:8e:ae:06:89:
                    3f:6d:c9:e8:57:c5:6b:e8:1f:c8:d3:23:73:99:1f:
                    58:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AB:D6:DB:D5:40:8A:28:6D:1C:4B:71:E0:9E:0B:10:9C:E3:A9:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2ba66495-1e17-379f-9a90-2cc8dbf7141a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:af:1c:c3:07:56:b4:0a:0c:89:47:d1:1c:f8:6e:5c:7c:bb:
         ee:9f:8c:a7:5b:56:06:30:19:58:d7:ed:02:92:51:1b:e4:7d:
         96:7a:6c:e5:7e:4b:be:86:de:09:aa:1a:a6:c0:62:df:c6:8a:
         76:12:76:d7:5e:d9:af:d6:3a:32:98:57:dd:f2:dd:9b:8a:bc:
         4d:ba:c2:f7:01:c3:56:9d:42:0e:12:41:4a:58:26:d8:e3:1a:
         04:12:9e:99:00:ba:91:46:34:4a:13:05:3b:7c:50:5c:92:54:
         14:07:10:10:0d:83:43:df:73:67:f1:89:4c:f6:d2:f9:83:c8:
         07:27:62:39:1c:de:40:68:e9:e9:59:42:25:e9:a1:8c:ac:5b:
         d1:bb:9b:37:db:0a:bb:b7:1f:0b:b0:aa:b6:ed:b2:ef:06:3f:
         b9:14:e2:a4:e0:a8:88:8f:f8:02:10:1d:1d:c6:d4:d6:01:f0:
         19:06:08:ac:8b:a3:f0:30:ad:e7:31:44:c0:f1:70:32:28:1c:
         ac:67:35:04:bc:6f:04:8b:2d:b8:c6:82:2c:9e:2b:61:8a:14:
         8a:f3:47:d0:0f:b4:03:39:e8:de:57:25:ad:85:35:f8:02:a9:
         bc:e4:9d:7e:a0:fc:0f:93:4a:27:2c:7a:f4:ff:95:a7:76:85:
         84:c8:c8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:20:44 2025 by rpki-client