Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/650787ac-d542-3508-8d9f-3ed74f8be560.roa
File:                     650787ac-d542-3508-8d9f-3ed74f8be560.roa (raw, json)
Hash identifier:          9xyP4EPYi8aXcErIsd1fZqk5NUEp0FOisRfkjyg0ruE=
Subject key identifier:   B5:A0:6B:F4:BE:4B:38:53:E8:3B:48:C7:2B:86:CD:DA:75:B1:D8:72
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AD23C3AB9F4139D3A3D9016C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/650787ac-d542-3508-8d9f-3ed74f8be560.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     44477
IP address blocks:        104.165.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:3a:b9:f4:13:9d:3a:3d:90:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=113e65cf-2807-4998-b628-805c75ac8909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1f:cb:81:21:4c:19:0e:2e:2c:8c:17:4b:8e:
                    36:c2:4f:a6:6f:04:91:b7:a9:7c:55:5a:9f:15:39:
                    76:81:63:47:61:86:ed:e4:c1:62:7d:9a:80:33:b4:
                    8c:6b:63:a9:7b:ee:e5:61:e6:88:c2:cc:62:1b:f2:
                    4d:e5:ca:67:8f:7b:49:62:93:67:c2:01:9e:6a:1d:
                    1f:da:40:a9:74:20:1b:e4:aa:a6:8b:f5:ed:77:c9:
                    33:66:ba:da:e4:7b:de:d6:96:4b:0c:01:81:b7:c6:
                    99:e1:d0:35:9f:15:68:25:31:d8:fd:63:b2:b3:94:
                    31:46:37:2f:49:f0:21:91:bd:68:d3:72:e6:3a:70:
                    62:eb:27:85:53:cf:b4:a8:31:4a:f5:24:55:09:42:
                    fa:e2:58:5a:bb:b3:da:3e:ca:ae:9d:bf:d4:7a:3b:
                    23:f4:41:8c:a1:ac:f7:d8:53:94:1b:63:3b:e3:1e:
                    42:1b:89:b7:d8:58:81:0f:d5:aa:a2:95:51:c8:47:
                    9c:26:3e:86:7c:8e:0a:b9:47:bc:81:c7:57:b3:3b:
                    a8:3b:44:e3:cf:b1:c8:4c:51:37:5d:d0:b2:00:1a:
                    ef:11:ac:b9:5f:d9:8b:d4:a9:ff:7e:44:d0:69:0e:
                    6b:6e:c0:ab:96:e2:a1:47:6d:cf:e8:9c:00:d1:2f:
                    f3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A0:6B:F4:BE:4B:38:53:E8:3B:48:C7:2B:86:CD:DA:75:B1:D8:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/650787ac-d542-3508-8d9f-3ed74f8be560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:ef:ac:ca:06:e2:5e:e3:9d:3d:32:79:3b:9f:80:13:cb:48:
         25:4c:a1:86:70:8d:bc:ca:0c:5b:40:83:80:98:dd:ac:3c:93:
         a3:c5:05:a5:f6:83:25:3f:ad:d0:8d:3f:22:d1:af:23:fa:82:
         2b:27:62:52:f4:ec:8f:c5:a9:6d:37:80:3b:27:24:1e:a0:80:
         15:79:0e:11:6a:99:f0:c0:ad:0a:e1:d8:2d:67:5c:80:bb:32:
         e8:37:e0:91:f6:09:e3:a8:34:4f:c3:e9:7b:ea:91:8d:9c:c0:
         c7:8b:49:d3:9f:4a:bf:e2:bb:56:3a:30:e4:62:de:50:23:f7:
         8e:16:0a:7e:ae:7c:69:23:70:31:8e:33:b5:79:f9:17:df:6b:
         d7:b0:17:34:8c:e1:8d:0f:3b:2e:e4:74:3e:b7:2e:ea:c6:12:
         e2:ff:d7:d1:a9:13:6e:be:54:d2:fd:22:ba:13:fb:72:7d:24:
         0f:a8:ea:11:1c:73:d7:3e:7a:61:d6:eb:bb:6a:ec:f0:fa:9a:
         02:44:ca:6b:11:8c:73:28:06:a3:83:d6:06:04:18:b1:4e:ad:
         d6:13:63:9a:61:a0:34:6d:ec:f1:2c:e9:1a:93:02:4c:b5:71:
         12:d1:56:c9:07:b7:34:ea:11:27:51:01:ea:43:10:88:11:b7:
         c5:0f:12:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:24:14 2025 by rpki-client