Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8f8527ad-94ee-395a-bead-55f950ea63a7.roa
File:                     8f8527ad-94ee-395a-bead-55f950ea63a7.roa (raw, json)
Hash identifier:          fBPECU+dHE0CNqzFNuL4TxLRZyWq/a5n20YSMDSXyQA=
Subject key identifier:   FC:D5:EC:0B:16:19:0D:B2:7E:CF:F5:6E:A9:4C:90:A3:BE:47:69:77
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849A354868DD947094A3565C820
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8f8527ad-94ee-395a-bead-55f950ea63a7.roa
Signing time:             Fri 25 Apr 2025 01:00:47 +0000
ROA not before:           Fri 25 Apr 2025 01:00:47 +0000
ROA not after:            Thu 24 Jul 2025 01:00:47 +0000
asID:                     7922
IP address blocks:        104.164.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a3:54:86:8d:d9:47:09:4a:35:65:c8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 25 01:00:47 2025 GMT
            Not After : Jul 24 01:00:47 2025 GMT
        Subject: CN=d85dfca3-f773-4afc-872b-61c1670cdd6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9a:55:39:30:5b:c8:b3:5b:cc:35:a4:fc:f2:
                    ab:dc:74:81:5e:7b:4b:e5:90:d3:3c:8f:20:a8:51:
                    d4:c8:f2:97:58:b3:31:eb:54:d1:cb:ce:bc:0d:ba:
                    42:f4:2e:0d:93:09:e5:08:fc:67:4e:b6:da:a3:cd:
                    54:e2:04:66:08:27:df:9a:66:4f:90:5a:03:63:01:
                    f8:ee:f5:9a:7e:e6:a2:90:30:50:c4:2b:e7:90:c3:
                    fc:80:e6:22:e8:ca:29:b1:b8:c3:16:87:45:60:df:
                    6d:a9:72:a5:b2:f6:f1:12:5c:28:38:88:72:c2:aa:
                    0e:4d:18:b6:01:ae:1d:53:42:09:85:59:43:32:0d:
                    12:10:0d:b9:09:7b:30:fb:11:d8:3d:77:f0:d2:0a:
                    a6:03:52:d5:ae:4d:1f:41:63:81:ed:39:e7:c5:3d:
                    91:b5:d8:17:53:ff:91:97:73:06:38:62:c2:93:60:
                    b6:de:f0:1d:17:4c:2e:77:26:eb:3b:c4:fd:aa:e2:
                    ff:42:5e:8c:cc:8d:91:b5:8b:40:cb:4c:0d:28:08:
                    34:c4:b4:a7:87:5f:33:9a:00:df:af:fe:d6:37:f4:
                    63:32:72:a3:42:e6:6d:a2:ec:fc:0e:5c:d1:45:cc:
                    e8:bb:83:66:84:1f:b6:f2:6a:a1:1b:d7:6d:df:04:
                    7e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D5:EC:0B:16:19:0D:B2:7E:CF:F5:6E:A9:4C:90:A3:BE:47:69:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8f8527ad-94ee-395a-bead-55f950ea63a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:5e:e2:6d:85:a8:3e:d1:78:2a:1e:41:4d:54:03:ce:0f:48:
         3c:95:9a:56:55:a7:26:d7:2f:2d:1d:0d:0f:ee:65:1e:c0:14:
         ea:5a:b4:73:b6:11:e3:54:67:2e:b5:45:96:60:3d:73:46:ca:
         f8:64:cd:59:b1:1e:0d:a4:ca:83:f6:21:76:c1:2c:64:46:52:
         4c:e2:76:e8:6b:94:69:f2:dd:f9:b2:0c:71:65:24:4e:c2:d0:
         98:79:85:c8:d1:ff:8e:76:0f:2e:19:d8:ca:39:eb:9a:d8:05:
         ca:2c:f9:d6:a8:a1:c0:fb:a1:7d:87:41:ba:59:7c:bf:ca:fd:
         54:89:36:d4:7d:84:49:50:b2:59:3e:4b:59:db:3b:10:c3:24:
         7e:aa:a6:23:07:45:30:67:5d:69:09:79:53:83:83:29:5f:0c:
         3d:ab:0d:0d:fc:76:7e:f0:30:98:5f:b6:66:e0:53:3b:bd:23:
         da:10:cf:3c:90:4b:a6:c5:b8:a8:e5:fe:9c:84:29:46:12:79:
         d9:4e:71:4b:f2:68:89:32:63:1c:24:4f:ed:92:79:77:b3:28:
         70:11:54:12:21:70:d6:ba:8a:a0:49:03:6a:a1:10:de:e0:77:
         b6:ba:96:5a:fc:ab:ad:45:54:1e:00:e9:b7:a8:01:fb:6c:39:
         55:d3:79:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 23:32:37 2025 by rpki-client