Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/47a34aff-26d7-3464-87b0-9a69189ab671.roa
File:                     47a34aff-26d7-3464-87b0-9a69189ab671.roa (raw, json)
Hash identifier:          /M575Mex+fPjOkYimQaiwmXE1mhKkbQTSJoVmM1tjgI=
Subject key identifier:   29:7F:FD:74:B4:03:2F:28:D4:A0:F8:70:66:0D:5E:7F:9A:26:D9:84
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AD23C3AAA3B782DE5DD47BE40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/47a34aff-26d7-3464-87b0-9a69189ab671.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     44477
IP address blocks:        104.165.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:3a:aa:3b:78:2d:e5:dd:47:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=6b1bffae-5235-482c-b8ca-6069e9ebb8c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:c1:f6:12:9d:43:1e:33:e5:ec:49:7f:cb:6d:
                    b0:54:a8:b9:ff:b9:46:15:ff:1d:03:24:95:1b:3f:
                    31:c0:fd:eb:37:f4:05:26:57:b5:37:b9:b8:e3:12:
                    45:43:20:55:88:07:63:26:65:be:40:a4:9f:ed:64:
                    61:ec:1f:d6:0a:88:33:69:f1:0f:64:ab:04:02:36:
                    bc:4f:5e:0f:29:73:1b:68:60:85:52:77:0b:81:e8:
                    57:29:c8:d9:96:b8:c6:b7:98:6c:62:6f:b4:9a:93:
                    58:a9:82:40:e4:5a:ce:5f:a4:f3:9d:2b:31:9d:5c:
                    5d:4a:97:bf:d9:7f:b4:bd:f6:c3:de:b6:99:39:ef:
                    2b:6b:0c:3a:ae:1f:8f:29:cd:76:0c:75:98:ca:9d:
                    32:af:da:8f:d1:03:48:40:cb:fe:6a:3a:65:f3:dc:
                    08:d4:31:d6:88:1c:74:82:80:7d:6a:cd:7e:39:18:
                    97:2f:3d:f3:d9:34:56:9b:b7:ad:b6:b3:61:c8:0d:
                    db:a9:d3:c1:97:80:a1:34:24:7c:af:8c:32:ae:30:
                    6f:d2:d1:8a:54:cb:c0:97:f6:59:98:e1:a9:26:7e:
                    65:83:8a:12:b3:5f:4c:02:e9:3a:24:c0:3c:4a:93:
                    fb:85:73:aa:a0:c7:4e:eb:bd:42:1b:16:2c:1d:f6:
                    f0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7F:FD:74:B4:03:2F:28:D4:A0:F8:70:66:0D:5E:7F:9A:26:D9:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/47a34aff-26d7-3464-87b0-9a69189ab671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:5c:ee:f3:f8:6c:c6:6f:23:3f:b4:7c:b6:43:b6:ab:23:49:
         48:ee:85:32:f4:5e:92:dd:5b:ec:c9:35:7b:69:7d:29:bc:c7:
         f9:48:44:20:b4:de:48:7d:98:02:b1:82:13:16:f3:11:f3:98:
         39:dc:53:84:82:8a:e8:0d:d8:35:0f:d4:9f:6a:d6:ce:1a:0b:
         4f:1d:33:70:92:5d:12:16:ca:87:85:64:e8:ae:55:50:76:a1:
         b0:15:5f:c8:27:90:cb:69:aa:c8:54:a8:7c:f7:64:eb:59:83:
         39:c8:0a:fa:03:8e:77:a0:17:b4:62:a2:3e:fa:45:e7:39:0c:
         8c:9c:5c:51:f6:85:97:e4:05:98:6b:19:18:d1:a3:5f:b8:d1:
         64:5e:ca:2a:dd:82:84:fd:e0:d0:a5:6f:67:56:b1:37:33:8d:
         37:db:a5:73:b0:8c:e2:47:12:1c:3b:33:9f:68:cc:0d:aa:93:
         a5:82:26:12:f5:ef:a4:b6:f5:6a:93:7f:6e:2b:44:21:a3:a7:
         ca:30:7d:c6:dc:1a:ba:af:c3:ad:80:7d:9c:bb:2a:2f:e5:14:
         d1:c2:b9:bb:26:f6:8d:4d:f4:be:af:d9:63:ca:4a:76:b8:f6:
         80:67:73:03:82:2f:94:9e:af:e1:2e:1a:73:92:88:83:6d:fd:
         0e:09:7c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:15:51 2025 by rpki-client