Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8a326194-ccb4-3961-b9dc-f2c168c7aa81.roa
File:                     8a326194-ccb4-3961-b9dc-f2c168c7aa81.roa (raw, json)
Hash identifier:          0udWPxLnDT1+wAHedN/+INK7L8I0zyPGG8tyZpalze0=
Subject key identifier:   2A:FC:0A:AB:68:19:F4:EA:17:AA:AA:D3:C6:23:7E:09:57:A8:29:5B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858488E141B13A8FDC59D441F2F1E
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8a326194-ccb4-3961-b9dc-f2c168c7aa81.roa
Signing time:             Wed 15 Jan 2025 17:32:11 +0000
ROA not before:           Wed 15 Jan 2025 17:32:11 +0000
ROA not after:            Tue 15 Apr 2025 16:32:11 +0000
asID:                     214238
IP address blocks:        104.164.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8e:14:1b:13:a8:fd:c5:9d:44:1f:2f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 15 17:32:11 2025 GMT
            Not After : Apr 15 16:32:11 2025 GMT
        Subject: CN=155cb1db-7450-4664-af13-6897ce460840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:63:2d:72:99:ba:86:09:e9:57:8c:21:64:91:
                    7c:72:2b:d5:76:fc:51:ec:96:a3:93:74:44:67:96:
                    58:82:a7:bf:45:d5:2c:0f:2c:38:ba:6a:5f:5a:f8:
                    b1:bb:aa:8f:5b:85:c1:d5:8a:26:04:45:4b:1c:84:
                    7c:d6:52:fc:a9:7f:36:9e:68:35:8c:84:5d:63:de:
                    e4:11:17:d0:88:a2:30:08:e7:36:cf:92:6d:26:c2:
                    60:98:97:a1:78:0c:6b:ce:bf:58:75:14:b3:0f:b5:
                    e9:8c:cf:2f:f4:e8:7e:e1:a9:5f:eb:cc:95:39:bb:
                    3a:d2:b2:82:e0:77:7c:0a:c1:e6:1c:9d:dd:5c:03:
                    61:86:19:66:6d:2f:b1:55:45:6c:34:32:94:b9:5f:
                    12:eb:0f:af:17:6d:8f:77:59:a0:ee:f9:2a:55:2e:
                    cf:e1:ac:6a:fa:d4:15:0b:bf:28:a5:bc:88:1b:ac:
                    2e:85:14:93:4f:01:32:60:7f:47:11:2c:de:7c:95:
                    f1:fa:2b:94:43:f0:22:4f:1f:63:80:3e:20:8d:c2:
                    f0:5c:3f:9a:a7:47:bb:07:66:05:4f:ac:ee:0c:6e:
                    9b:46:16:13:ad:3d:79:23:2f:d1:51:79:17:32:13:
                    6a:88:56:61:4f:d8:47:d4:48:ab:36:bf:e0:3b:db:
                    52:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:FC:0A:AB:68:19:F4:EA:17:AA:AA:D3:C6:23:7E:09:57:A8:29:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8a326194-ccb4-3961-b9dc-f2c168c7aa81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:fe:8a:a2:eb:a7:3b:30:9c:8d:e0:91:0d:7c:f7:67:d6:37:
         a9:e4:98:bf:5f:09:f0:af:13:15:99:0f:89:5d:eb:91:09:84:
         88:06:a9:e3:c8:c0:f4:a7:bc:de:3d:0e:4e:26:9c:ba:69:5a:
         70:31:4e:ad:74:11:68:de:45:49:5a:da:a3:56:27:77:3c:a2:
         ba:20:d2:4e:7d:ff:cc:6e:91:2b:4c:54:83:a3:39:ea:ed:81:
         22:f5:4a:0e:6a:31:ca:a6:09:48:e2:c0:5d:05:fb:ad:33:bd:
         25:40:6c:af:87:02:d1:e6:41:25:92:b3:3d:55:98:28:c0:9f:
         3a:65:ad:c6:56:35:6d:dd:41:6a:15:5c:ae:ed:6b:d7:52:cc:
         12:9f:24:ce:49:c0:ca:04:2c:d8:d8:f4:c3:1e:ca:e8:1b:0e:
         eb:09:0e:b4:35:1d:fb:97:fc:ad:c4:d2:9e:12:56:43:79:65:
         49:11:bb:19:ea:72:a3:8b:9e:ea:56:7c:14:a4:80:dc:9b:8c:
         5b:7b:72:c8:71:9f:0c:50:8e:c9:92:ae:a8:f8:ee:39:7a:25:
         b9:c2:ce:06:aa:4b:0f:a0:98:8f:e9:cc:d8:26:0a:d3:47:ef:
         c6:41:09:4f:bb:c6:2c:18:65:7f:bf:82:01:87:97:3a:99:83:
         e7:11:26:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:29:49 2025 by rpki-client