Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b97e4c80-9abf-31c8-a5c5-22c8c31653fe.roa
File:                     b97e4c80-9abf-31c8-a5c5-22c8c31653fe.roa (raw, json)
Hash identifier:          T3pI5gsc77W8hP1X+bSONeVxZgkYt3B2oNQVv1hcWBw=
Subject key identifier:   2C:29:AB:54:F1:EB:41:FC:C2:0F:06:5D:B2:38:D7:8B:A2:C7:B3:E7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B14A382135DF4B5D0A8F8E00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b97e4c80-9abf-31c8-a5c5-22c8c31653fe.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     48031
IP address blocks:        104.165.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:38:21:35:df:4b:5d:0a:8f:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=caf7b29b-5c07-4d6f-97a0-453efa66b947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:02:f8:e5:a6:d7:b2:ee:cd:04:3c:fa:70:ad:
                    16:17:be:09:f8:b8:91:d1:fb:d5:e8:df:2b:4f:fe:
                    c4:e7:ec:56:4f:de:be:f9:bf:d9:63:b5:de:dc:ab:
                    07:70:e6:43:3e:d1:5f:78:e4:40:57:ca:b6:1f:5b:
                    a1:ed:a1:8f:19:1b:4f:cd:a5:98:ad:6f:ec:f3:f4:
                    27:91:ba:f8:9a:98:19:13:a1:68:d5:bd:c3:eb:90:
                    89:2c:43:e0:6b:59:97:df:fb:e5:d3:78:c5:92:03:
                    56:af:39:6f:fe:21:bb:b6:19:bc:d8:79:4c:b9:59:
                    2c:94:ed:96:f8:08:4a:97:ca:97:5e:71:6c:0a:18:
                    81:e5:fc:96:0f:22:4a:bf:34:c2:40:9d:21:62:be:
                    44:34:98:71:04:54:64:93:61:75:3c:af:35:31:88:
                    cb:03:cd:40:e6:6f:46:1d:ca:60:0b:59:02:6f:a4:
                    ec:ca:3d:f1:4a:00:ad:99:33:97:e2:67:36:1a:db:
                    2a:01:c5:09:7c:0b:b9:03:2b:78:bb:5e:5c:67:ea:
                    c9:93:f8:20:95:df:6e:46:33:00:84:f1:30:25:5a:
                    b3:fd:4a:53:6b:c0:4b:c6:75:f9:12:91:20:18:2f:
                    65:cc:85:f2:f8:a4:84:33:fe:18:f2:6f:03:a6:c8:
                    83:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:29:AB:54:F1:EB:41:FC:C2:0F:06:5D:B2:38:D7:8B:A2:C7:B3:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b97e4c80-9abf-31c8-a5c5-22c8c31653fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:3d:72:79:d5:58:86:55:51:09:f1:2f:fd:4b:d6:b9:4f:fd:
         d8:b0:b0:a7:88:00:38:92:47:ff:f6:ac:8e:77:5c:b4:33:e8:
         fd:b9:58:bb:df:5b:c3:8d:4c:69:90:d4:de:02:2b:77:7a:b0:
         f9:7b:9d:64:1e:f4:4b:04:5c:c4:6c:bf:10:55:77:0d:d1:5a:
         ed:2f:ee:4f:45:43:13:eb:d2:fe:e3:28:63:42:0f:94:e6:32:
         f3:49:b5:ad:df:05:8d:e8:65:58:71:c1:55:65:f0:9a:4b:6a:
         04:1b:dc:44:3b:37:ab:6c:2f:d6:c8:bb:d2:13:6e:00:40:50:
         6e:b9:56:e2:7d:23:38:1c:95:cc:28:35:7e:3f:ec:15:df:40:
         ca:7e:44:b4:76:68:f4:94:34:04:ca:d4:ec:2d:31:1d:28:fe:
         a4:12:56:a9:10:12:d2:17:af:ee:09:21:a6:78:4e:1e:bb:d1:
         c1:ad:8f:36:5a:d8:a8:57:f9:85:cf:dc:1d:22:66:84:0b:47:
         c4:fb:37:a1:8c:09:91:86:48:7a:55:f8:c3:49:86:41:cb:3a:
         45:06:c4:ec:d2:18:1d:9c:ca:b8:e1:bf:52:7c:b2:68:91:8b:
         f2:5b:c2:f2:0d:75:64:cf:37:7c:bc:d5:85:62:d9:00:e0:c0:
         ab:b4:f6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:57:33 2025 by rpki-client