Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c1bc6cb-8838-3a49-9de1-d43f824ad9c8.roa
File:                     3c1bc6cb-8838-3a49-9de1-d43f824ad9c8.roa (raw, json)
Hash identifier:          CH6ZnX6Dm0hh41sAepiLA70u08TjBe2uqCtngSsC3VQ=
Subject key identifier:   1D:71:EA:4C:86:9D:39:37:CF:7E:B3:72:52:99:FA:CE:F9:C6:DC:5A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AD23C34AB031F683A9F4E0140
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c1bc6cb-8838-3a49-9de1-d43f824ad9c8.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     214238
IP address blocks:        104.165.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:34:ab:03:1f:68:3a:9f:4e:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=24662f35-7faf-4a5f-abd4-fbfe4e4e39b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3b:e7:74:84:a6:ea:d2:ae:08:a1:6c:1e:27:
                    28:4f:7e:71:bf:3b:ec:4f:23:c3:82:3b:75:2d:6c:
                    e5:de:24:2f:ec:5e:ac:e9:87:eb:13:b1:e3:f5:2f:
                    ad:12:ec:44:1e:c1:81:dc:60:2c:16:67:0b:06:4e:
                    b3:45:d7:8a:d1:15:b3:1b:75:55:ab:18:08:69:ab:
                    16:2a:20:f0:7c:21:56:7e:3e:a4:bc:7e:5a:54:70:
                    3c:2f:04:32:e9:4e:5d:cc:36:6c:f8:8c:45:7a:6b:
                    81:0e:ae:e9:e0:c3:56:5a:6a:d0:62:4a:7e:f5:3c:
                    4c:f6:8c:ab:7e:82:3c:cb:d7:5c:90:b5:b1:82:f6:
                    3d:52:e1:cf:7b:48:b9:9e:2d:b9:7c:b4:e1:c6:3e:
                    c6:35:c2:9a:d7:7d:43:7f:32:7b:d8:e9:0f:a7:f8:
                    61:46:ae:15:f5:33:7f:15:12:0f:69:c9:fd:2c:3a:
                    d4:05:64:00:82:b1:03:f7:34:2a:f6:54:3f:6f:7d:
                    4f:2c:ac:0f:dd:74:82:d4:1c:f8:5d:2d:9e:d3:68:
                    a9:ce:a8:7f:14:dd:ac:bc:75:57:32:5a:68:6b:0e:
                    8e:09:00:8c:80:1b:bc:e8:f1:c8:d4:d0:c6:87:87:
                    56:9e:35:b3:5f:69:d4:66:04:c9:6e:4f:71:67:a6:
                    2a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:71:EA:4C:86:9D:39:37:CF:7E:B3:72:52:99:FA:CE:F9:C6:DC:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c1bc6cb-8838-3a49-9de1-d43f824ad9c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:d4:93:d1:3d:92:c1:de:de:6e:db:5c:0b:b7:1a:8d:8a:86:
         a7:f4:42:ad:1a:18:f3:1d:02:d4:43:00:c4:d0:aa:35:1d:bb:
         72:61:50:60:ab:b2:81:4a:b5:79:ef:c2:eb:6c:32:60:0d:0e:
         e9:1b:93:69:16:8f:ac:19:7b:88:76:9a:a1:6e:b9:50:d0:28:
         50:32:b5:ba:ee:09:b1:cd:45:f0:13:a4:65:e1:84:44:99:c8:
         bd:dc:db:50:f9:13:a5:54:e7:f6:52:8c:8e:00:53:59:04:77:
         14:fa:73:3a:cb:c3:e6:c6:9a:c0:d8:62:20:e5:82:1c:32:59:
         1b:b1:1d:5c:76:27:ba:85:d0:27:04:76:24:9b:10:41:78:b1:
         82:ad:46:af:b3:35:2a:a8:12:f1:0d:bc:ba:bb:86:17:ab:58:
         6d:a3:0f:2d:2b:da:2b:97:d9:60:2c:73:6a:3c:8f:95:6e:6a:
         e0:07:18:3f:9c:ec:a4:fb:39:a9:c5:65:a8:3f:30:a0:50:6f:
         d7:a7:a7:9a:f7:92:22:09:92:ef:78:3a:cf:93:d7:bb:b1:78:
         bf:eb:70:7d:72:d1:c3:7e:13:12:f0:8d:81:57:29:96:18:49:
         fd:82:9f:c7:89:64:8d:55:de:d2:27:d2:a0:7d:79:12:02:61:
         5f:17:b0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:52:25 2025 by rpki-client