Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1d2513f5-3076-3667-9d15-ba9b75b54021.roa
File:                     1d2513f5-3076-3667-9d15-ba9b75b54021.roa (raw, json)
Hash identifier:          /TuAC3ogi/MupcskJh+XurCG1OHI8Ffdu9FudXReOX8=
Subject key identifier:   5D:1F:C5:79:82:88:72:2E:76:00:84:67:98:8B:0D:EC:91:F5:3D:03
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B5F374DE892B0568954CAA000
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1d2513f5-3076-3667-9d15-ba9b75b54021.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     3257
IP address blocks:        142.252.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:4d:e8:92:b0:56:89:54:ca:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=941d6b4a-4354-4b57-a451-4d5d705714af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ba:7e:6d:cf:3e:82:7f:ba:63:9c:82:cc:c5:
                    e7:f1:c8:8f:8b:fa:d9:49:b9:f6:8a:0c:53:c9:dd:
                    41:24:e5:51:10:98:37:76:4e:cb:69:da:2d:e8:b2:
                    01:8e:d1:59:6a:76:f9:c9:51:90:d3:3c:ef:df:b9:
                    58:ad:9b:5e:72:17:41:d1:22:22:4a:a9:f7:7f:5c:
                    33:79:6f:52:a0:af:f2:73:6d:d0:27:e0:c9:b3:7a:
                    c4:8b:40:b2:50:72:70:e3:3c:7c:a4:aa:65:36:15:
                    c7:d5:1a:38:93:9a:38:17:79:a1:93:4d:a2:c8:ab:
                    a4:7c:1c:19:83:ae:08:08:0c:00:75:79:bd:b8:c0:
                    c5:94:83:aa:ff:84:c3:84:c0:de:ea:30:9e:16:d3:
                    25:2b:ab:e1:80:4e:4e:78:4b:e2:cf:2c:d9:ce:07:
                    de:70:02:f8:b8:3a:5b:a5:70:1e:94:30:da:52:87:
                    7e:67:73:6f:3a:3a:ef:98:7b:eb:5e:ca:23:be:3a:
                    de:19:be:80:a9:d5:87:cd:f3:73:31:24:35:f6:8f:
                    eb:3e:0b:6d:61:78:01:f5:68:5a:7d:e8:f7:9d:b0:
                    9a:9b:e9:33:62:51:7e:ae:80:f6:2a:94:7d:d6:ab:
                    d9:64:51:51:ab:27:cd:e4:57:a3:f4:7c:a5:48:4f:
                    d1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1F:C5:79:82:88:72:2E:76:00:84:67:98:8B:0D:EC:91:F5:3D:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1d2513f5-3076-3667-9d15-ba9b75b54021.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:df:d7:7d:4e:fc:de:d2:b3:40:7c:7c:0b:a4:f4:43:d1:0d:
         b3:05:18:a6:2d:2d:09:52:b1:ad:e4:53:6c:60:a3:6f:22:bc:
         15:82:19:e2:1c:86:f7:3a:fb:8c:81:00:35:fd:47:15:73:8c:
         79:85:7c:f7:54:e5:bb:c5:0e:3b:2d:64:47:14:ff:70:b5:f7:
         29:c8:bf:9f:92:3d:63:64:e1:d3:7b:0b:f6:f3:72:52:aa:bc:
         af:3b:c2:e2:34:93:7d:a1:22:1f:44:46:06:28:a0:34:ab:f7:
         2f:f8:a6:c0:d4:77:66:d9:a6:0a:9b:eb:95:64:a4:72:70:b0:
         18:2a:d1:d3:c9:49:82:59:91:59:76:0e:dc:62:22:49:eb:ea:
         93:b5:fa:87:d5:6b:8a:db:46:20:38:17:5e:71:5a:85:d1:46:
         6d:47:42:35:96:86:91:02:5a:0a:54:44:15:36:84:41:3d:98:
         65:37:97:29:e2:d4:80:d6:cf:be:d6:cc:41:0d:82:a4:3f:82:
         7d:df:36:2f:3a:53:07:22:69:9f:ed:42:ae:15:e0:cb:90:4b:
         01:8f:c4:11:07:5e:23:d4:36:7b:cc:f0:af:09:45:54:b0:01:
         a9:f6:8c:87:42:46:ea:e8:b4:49:6f:8d:29:f6:8f:85:7b:c9:
         5f:cc:12:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:13:03 2025 by rpki-client