Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9bf7fa49-03d1-3c27-8cd6-4df3b87e9cc6.roa
File:                     9bf7fa49-03d1-3c27-8cd6-4df3b87e9cc6.roa (raw, json)
Hash identifier:          Zj8ysRLO/8h9R8wCxJ3oD6l6l9HbEk3nUtTbwWDc7Ng=
Subject key identifier:   E4:3A:C4:39:A9:52:31:91:A9:23:FE:BD:A4:5C:55:C1:37:C3:CF:70
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AC9DB9FE1CAAD7C918FC7D900
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9bf7fa49-03d1-3c27-8cd6-4df3b87e9cc6.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     174
IP address blocks:        104.164.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:9f:e1:ca:ad:7c:91:8f:c7:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=5fc94414-ea39-40ab-b3f5-7bc0ed2a2960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cd:ee:63:7d:6b:04:1d:a9:5a:0e:e1:dd:f8:
                    59:ca:61:2c:f9:9d:83:f8:e1:ba:79:eb:eb:65:df:
                    10:d1:f6:b4:9d:09:de:61:de:51:7a:4d:cc:07:7e:
                    e0:f2:bc:a7:95:90:44:80:f1:44:a0:70:95:6a:44:
                    e4:f4:13:81:fd:6f:fb:2e:11:8f:48:27:17:75:cf:
                    ef:35:fd:94:c0:ab:42:a5:3f:19:7e:10:24:31:dc:
                    9c:54:dc:c5:cc:c6:46:c8:54:93:6d:ed:5d:81:5c:
                    ad:5c:84:3f:1b:6d:5e:12:72:e1:ff:53:e0:3b:3f:
                    e6:5a:b7:8e:26:a2:f9:3c:86:5c:7c:68:88:82:0f:
                    6e:07:e9:0d:f2:d2:27:a5:ab:41:bf:de:ac:ea:8a:
                    9b:9e:e5:c6:5d:bd:a5:c1:70:b1:b8:bc:03:9f:fc:
                    8d:2d:a1:62:54:51:44:76:24:89:32:9b:62:41:59:
                    59:74:7d:db:fb:a4:74:77:51:81:d0:df:f1:c4:7a:
                    8d:4e:7f:4a:ea:a2:8e:54:a1:be:c4:94:68:d0:53:
                    a0:26:5e:cc:e3:58:d2:6f:a5:ea:a3:0a:95:ec:5e:
                    3d:2f:34:f8:a9:04:55:3d:60:e5:82:2c:c6:38:46:
                    50:4f:e6:7a:ba:43:a6:5a:77:93:1e:8a:ae:41:63:
                    38:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3A:C4:39:A9:52:31:91:A9:23:FE:BD:A4:5C:55:C1:37:C3:CF:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9bf7fa49-03d1-3c27-8cd6-4df3b87e9cc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:5d:53:33:df:3d:50:ad:6f:72:66:2d:b3:b4:2d:d7:1d:d5:
         5a:f3:71:6c:69:5b:c1:b1:bb:a1:5a:5b:99:5e:82:db:b7:04:
         4b:0a:6c:6e:cb:02:37:8a:43:c3:93:07:e5:25:84:d8:7e:5f:
         b2:8b:e4:a9:af:97:57:f0:4e:a9:0f:ee:17:b7:99:d2:03:a7:
         31:9d:2b:d7:69:72:71:3b:22:74:f1:c9:d6:d7:75:06:09:b8:
         39:ce:6d:ee:e8:34:e5:6f:e4:42:53:12:d0:aa:79:61:0e:d2:
         ae:d7:83:b9:1a:42:b4:1c:dc:7e:b5:b6:c6:f0:a8:2f:9c:bf:
         e1:ec:be:bc:3f:b1:ed:a8:a7:cf:1b:c5:66:ea:c1:83:47:f7:
         72:89:01:f4:03:82:3b:40:99:9d:7d:79:42:79:87:22:b3:bc:
         3e:47:82:58:a2:ac:a6:79:75:9c:ed:e6:2f:ee:13:72:35:7f:
         5b:1b:29:de:88:90:30:eb:09:68:4a:1a:8a:5f:1d:4b:d9:c6:
         ea:3d:6b:2a:9f:85:1e:7d:79:7f:3d:c9:99:28:72:39:28:cd:
         2d:b8:4a:3b:ef:7e:73:ab:46:3d:2a:14:c5:d2:62:b0:6a:1b:
         3c:a1:09:0d:d1:9b:2d:d3:9e:c3:88:73:31:a2:6a:88:e4:cb:
         25:0e:59:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 08:40:03 2025 by rpki-client