Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5c11f0ed-295f-3779-a323-9af92f830163.roa
File:                     5c11f0ed-295f-3779-a323-9af92f830163.roa (raw, json)
Hash identifier:          ZNlBA43xpazcsSe3lS/DH/il/tlv92DGjMfF4RINaHI=
Subject key identifier:   08:C6:EB:E4:59:D7:6E:F4:4E:66:81:4A:EB:38:86:35:9F:BF:B4:CE
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B6D2CCBAA26E1A8FB1B79A800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5c11f0ed-295f-3779-a323-9af92f830163.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     6939
IP address blocks:        172.252.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:cb:aa:26:e1:a8:fb:1b:79:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=37920166-82ed-4cdc-b051-4c98ef244919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:33:c8:75:07:9b:85:f9:44:e3:d1:1b:8a:b9:
                    70:af:5e:fd:b5:26:4b:71:e2:52:7a:9a:e3:e6:be:
                    f7:b9:5d:12:f0:9a:73:d3:5c:32:90:10:57:eb:f8:
                    8b:39:71:52:d6:f4:51:9f:aa:c9:ba:24:ca:55:45:
                    52:23:a4:9b:dd:44:84:0a:c3:d5:9a:07:4b:d5:b5:
                    90:f8:04:64:e0:a4:07:34:25:5f:91:5a:75:bb:10:
                    a7:1c:d8:66:b8:ae:6f:5f:8e:53:e9:cf:50:16:fd:
                    ea:41:f7:78:4c:d8:df:5f:a3:18:49:9e:b5:b3:5d:
                    3f:c8:ae:56:37:92:e5:f1:58:40:b5:ba:30:09:5e:
                    5c:7b:21:91:87:10:e6:ee:a3:17:11:5b:10:50:e1:
                    f4:e9:01:1f:c6:99:48:6d:0b:63:03:11:bf:3a:6c:
                    33:c2:04:dc:53:f1:0c:4c:0c:6d:0c:32:e4:e2:0a:
                    7a:69:ff:5d:b1:17:b3:5b:50:41:f0:b8:a6:e7:5b:
                    42:6b:e4:fd:21:49:a4:e3:93:9e:11:70:f0:65:da:
                    3f:63:97:6f:ca:69:60:1c:1d:8b:03:2a:7d:70:d2:
                    5c:70:bb:7f:2d:04:fc:8b:45:92:e6:30:26:79:1f:
                    8f:ce:7b:9e:bb:dd:e4:c2:c7:65:73:5f:5b:0e:7e:
                    1a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C6:EB:E4:59:D7:6E:F4:4E:66:81:4A:EB:38:86:35:9F:BF:B4:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5c11f0ed-295f-3779-a323-9af92f830163.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:a6:17:e8:74:dc:34:10:31:3b:30:ab:0d:60:c8:75:8e:60:
         78:99:db:05:25:bf:a7:2f:db:7f:36:51:67:af:ba:2c:99:56:
         9a:4a:8c:ab:14:16:c9:56:7b:43:42:21:9c:62:e8:c4:d3:0f:
         82:67:83:88:c7:57:09:1a:80:cf:3e:bf:77:ed:58:f1:a8:54:
         25:d0:c5:38:ac:cb:f9:53:aa:1b:a9:03:5d:b6:87:e8:d0:0d:
         7d:79:09:7f:07:30:29:5f:ca:14:3c:af:c3:9e:22:8f:85:d3:
         30:5c:c2:8c:ae:1e:ce:74:96:bd:26:e3:2a:e2:64:d7:4b:f0:
         ec:79:03:11:27:d8:9e:7e:ac:05:61:97:13:a2:46:b3:e3:2f:
         be:97:85:50:52:ee:77:60:de:73:01:20:06:12:18:19:0f:65:
         02:36:c6:f3:9d:0d:3d:61:1e:55:f6:7f:70:cc:8d:0e:09:0f:
         c6:62:38:3a:43:fe:86:17:4d:8c:f1:80:a1:17:91:4a:be:d8:
         b3:44:3c:e6:71:a0:ff:1e:c6:df:e0:59:62:94:12:e2:28:a6:
         1d:fb:b8:49:b5:0e:74:e5:6f:92:4b:38:85:54:5d:1b:ed:7f:
         b0:ec:ad:66:19:60:d9:4d:91:d0:d4:fd:9c:ce:01:01:bb:1f:
         e5:d0:ea:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:13:50 2025 by rpki-client