Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/49f9b932-1abd-38ce-9d39-5cb2a6642d81.roa
File:                     49f9b932-1abd-38ce-9d39-5cb2a6642d81.roa (raw, json)
Hash identifier:          9Hrn5pVxQihyMPNwRCPxilHbYhW6a2DmJUE9GXIyrF4=
Subject key identifier:   8C:2F:0A:74:46:F0:80:8D:1D:E6:C6:70:72:BE:BE:73:C5:B6:97:94
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849F71534F6403B670BF6CDD200
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/49f9b932-1abd-38ce-9d39-5cb2a6642d81.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     15731
IP address blocks:        104.165.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:34:f6:40:3b:67:0b:f6:cd:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=c1fdb18c-5c59-4d1a-b457-37764ecf636a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:10:13:db:e4:6f:cf:e0:f2:39:f1:0f:9a:17:
                    7d:d4:39:31:f5:26:dd:ae:ff:6d:07:2b:96:17:c2:
                    92:e2:6f:d0:aa:ce:07:5f:4b:f9:63:e1:88:5e:09:
                    ee:df:66:00:60:a1:19:10:f5:95:3f:d4:3c:99:a4:
                    b8:2a:07:b9:bc:2c:e1:5e:95:66:c2:1e:9e:39:7a:
                    db:13:54:94:eb:0f:81:ae:50:b9:92:92:6a:c3:de:
                    46:64:cf:de:2d:a2:06:98:64:97:6a:da:23:ea:15:
                    f3:74:96:42:c9:be:56:97:4a:38:97:0b:3a:1b:2e:
                    4c:79:b1:f0:f5:3d:4b:1c:a4:14:ed:9d:9f:68:96:
                    c5:0c:ec:b1:38:2d:05:5d:aa:02:61:d0:42:dd:47:
                    b6:a1:0c:b4:47:8e:6a:57:5f:69:9a:53:37:ab:28:
                    bd:5c:d1:c4:84:32:27:35:c7:8d:21:33:8c:ff:53:
                    5e:8b:bc:f9:54:1a:ca:79:d2:6f:bd:81:60:bb:9d:
                    69:14:b0:d9:e1:26:bf:b2:7e:8e:7d:cb:61:87:e7:
                    89:0b:bb:5b:3e:97:ce:b3:d2:8c:f7:9b:fe:30:ed:
                    75:55:8d:d1:5f:d1:8c:d9:00:8d:9e:f8:f9:31:71:
                    d7:1a:4b:87:17:31:65:9b:2c:29:a5:ed:ae:37:b7:
                    ea:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2F:0A:74:46:F0:80:8D:1D:E6:C6:70:72:BE:BE:73:C5:B6:97:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/49f9b932-1abd-38ce-9d39-5cb2a6642d81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:89:c1:ef:17:a7:a4:23:36:bc:28:a4:f5:fb:36:d6:3f:36:
         3a:bd:07:c0:e1:3d:92:21:9c:f1:e5:77:50:f3:a9:73:96:4e:
         81:99:43:bf:ec:bb:cb:eb:c9:6d:49:15:4a:37:00:4e:85:95:
         92:38:6b:7a:97:a7:08:eb:9e:8e:0e:2d:c2:8c:2a:74:1c:b8:
         ee:c7:0e:4d:54:fe:f7:99:39:14:6a:b3:2a:ba:27:4b:04:ae:
         03:31:fc:bd:ac:fc:4c:6d:8a:aa:88:39:f9:61:79:21:90:b9:
         89:38:cd:0e:d2:3d:7e:ef:2c:a3:c1:93:bf:e7:40:7a:d1:68:
         0d:25:c3:60:ed:a0:03:4c:7c:55:4e:49:e5:bd:6a:6e:90:4f:
         0c:ee:e5:2c:6d:03:25:75:58:3d:da:ba:f7:53:53:59:ea:ca:
         66:5b:e3:1d:6f:10:af:52:c0:64:49:1f:43:e5:94:f7:9d:21:
         92:8b:69:83:dc:19:0f:e1:f5:28:f6:92:b4:a2:d4:7b:85:9a:
         2c:81:fc:96:03:95:a7:ec:20:f8:5a:e9:80:05:7a:09:de:dc:
         d0:2c:2e:5b:2e:b5:33:e6:0e:8a:17:07:88:22:21:fb:06:5c:
         08:26:98:3f:a6:1c:1a:95:fc:02:58:41:52:55:5e:1d:aa:d9:
         2f:95:30:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:36:58 2025 by rpki-client