Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5c56fab6-020f-32ad-b9df-113ecde815fb.roa
File:                     5c56fab6-020f-32ad-b9df-113ecde815fb.roa (raw, json)
Hash identifier:          IFedXpkBJDpduc/4UYZmLsR2A4caXzoXpJydKgxvUpA=
Subject key identifier:   40:22:DF:56:CD:91:82:36:D5:93:D7:89:F2:AD:68:82:82:52:BF:3C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B4F86B2F696F44FA3AF278700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5c56fab6-020f-32ad-b9df-113ecde815fb.roa
Signing time:             Thu 25 Sep 2025 10:07:58 +0000
ROA not before:           Thu 25 Sep 2025 10:07:58 +0000
ROA not after:            Wed 24 Dec 2025 11:07:58 +0000
asID:                     214025
IP address blocks:        142.252.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4f:86:b2:f6:96:f4:4f:a3:af:27:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 25 10:07:58 2025 GMT
            Not After : Dec 24 11:07:58 2025 GMT
        Subject: CN=a2cdb1a2-dedb-4e4e-b897-235ff1c4133d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:40:ca:6d:5e:96:ac:16:13:7d:0e:dd:78:da:
                    f3:76:a2:72:4b:9a:d8:1c:f3:92:95:70:77:38:57:
                    05:12:2e:c1:80:a1:3d:e0:e4:ee:95:41:0e:74:28:
                    43:9b:29:c7:49:9e:a9:50:51:5f:ca:ab:73:3d:02:
                    f3:50:9f:74:95:84:94:fe:87:f5:87:22:d3:3e:18:
                    a6:db:cb:77:fb:3c:ae:72:65:77:66:aa:77:b8:45:
                    e4:b1:f3:6e:12:aa:51:94:af:a9:dd:85:45:5e:cc:
                    91:d7:34:90:49:f0:78:00:b0:ef:8b:a9:bf:f5:bb:
                    61:5e:36:23:d5:ad:7e:6d:59:f1:1c:75:40:63:04:
                    fa:46:43:16:7b:37:c0:f5:48:72:97:25:3f:1d:d4:
                    3c:5d:68:9f:f2:aa:9e:0a:ef:46:47:d6:d5:0a:0e:
                    f3:20:a9:06:d7:52:d8:87:96:78:23:cf:5c:9e:e6:
                    5b:97:89:8c:82:71:e4:8b:e4:6a:d5:13:d7:95:c8:
                    a8:e3:e9:e8:76:e4:c4:1f:9a:cb:89:8a:60:12:94:
                    e2:7c:d2:f2:b9:7f:1a:71:a3:f7:d5:a3:b6:5c:6f:
                    68:fe:32:cc:57:bd:dd:49:8e:88:7d:8b:84:de:68:
                    44:3e:d0:5b:f7:06:e2:cf:96:75:5d:d4:f5:39:21:
                    5a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:22:DF:56:CD:91:82:36:D5:93:D7:89:F2:AD:68:82:82:52:BF:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5c56fab6-020f-32ad-b9df-113ecde815fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:f4:3f:ef:86:96:ce:9d:f9:7a:ab:51:59:aa:bd:f3:87:b1:
         1a:c2:0c:c8:77:a7:81:26:c3:3a:27:65:e3:1c:1d:d4:f0:76:
         e7:29:b1:76:83:fd:db:52:ac:18:0d:0b:71:cc:d7:95:e0:fb:
         0d:64:35:75:a5:25:84:2e:39:f4:b4:1c:94:a5:78:c6:c1:a7:
         9d:db:f3:85:12:88:e6:e6:1e:99:61:2c:28:cf:de:ee:43:d3:
         33:12:c8:39:1b:20:95:51:1d:ac:82:d3:08:73:92:04:93:81:
         f2:0e:a3:bf:4f:16:2f:4d:0b:88:50:3c:65:93:ae:10:6b:81:
         eb:e4:21:6c:7b:ff:01:56:34:d4:a4:0f:1c:43:a7:2a:2d:f3:
         08:8a:72:f4:59:dc:ed:87:fd:77:12:23:2c:cb:d3:4b:39:15:
         45:3d:e6:74:eb:04:81:9c:3f:aa:17:93:b6:78:fb:2e:07:5f:
         9e:82:0f:b3:8e:e1:05:32:ad:30:9f:7b:65:b0:e0:f8:73:e4:
         ec:2b:93:33:a6:4e:c9:15:0f:4c:e1:5c:74:0f:a3:79:66:cd:
         4b:66:4a:19:38:ac:1d:c7:f3:a1:77:1b:1b:be:35:1e:01:0f:
         76:a5:a8:12:5a:c1:05:3c:bf:c7:8d:f9:30:65:a3:e9:68:26:
         7c:7d:37:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:07:43 2025 by rpki-client