Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/637ffaad-493a-387f-9213-a1686bb04fdc.roa
File:                     637ffaad-493a-387f-9213-a1686bb04fdc.roa (raw, json)
Hash identifier:          coDKVFPWDZgsN2KRd6b9QYgOML3DeH/0rZrVN12cmLE=
Subject key identifier:   37:0C:8C:C5:EB:45:EA:EB:DF:52:98:54:70:5A:F0:37:68:D2:56:F0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B1AD1B19A34726C491DC82E80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/637ffaad-493a-387f-9213-a1686bb04fdc.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     35554
IP address blocks:        142.252.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:b1:9a:34:72:6c:49:1d:c8:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=f5670cf4-e060-4a33-bfe8-84b42b6d8b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:31:36:80:96:fa:ab:0a:80:42:f2:3c:78:5d:
                    b1:22:a9:61:3b:ba:57:75:9b:2a:2d:23:72:56:f7:
                    5e:0a:2f:24:d9:d7:44:88:97:c1:ce:cd:48:39:4d:
                    b0:da:f8:52:d2:0a:b3:b7:7b:a9:b9:bc:05:24:41:
                    cb:72:bd:cc:c0:14:48:8e:c5:03:82:e4:20:ba:db:
                    7a:17:71:06:4e:ba:da:a7:a4:e8:98:58:5c:55:c4:
                    43:c4:48:d6:6f:43:b3:d5:95:c2:ef:f1:5a:81:23:
                    93:43:dc:67:8b:31:5a:0a:54:67:09:84:35:59:2e:
                    f7:f2:eb:87:55:93:1f:a1:fa:9e:74:60:11:db:df:
                    db:2b:61:1c:5e:72:e7:b3:d6:6c:69:b5:65:d1:4c:
                    84:5b:5e:f5:7a:f2:30:bb:c5:b4:af:ac:9a:57:0a:
                    dd:47:de:6a:40:14:bd:d0:9c:9c:7b:fa:73:4c:57:
                    61:1e:b7:9a:0d:02:c7:7d:16:7b:45:d4:ad:a8:cd:
                    58:c7:29:e9:be:02:c3:aa:e1:fd:f1:2a:18:25:07:
                    83:84:41:07:a3:e1:7e:24:bb:5d:78:42:b1:69:c9:
                    f5:83:a2:9e:ed:a7:7c:26:5d:9b:37:15:69:03:d8:
                    1f:77:c3:96:7a:30:e1:53:11:23:44:ba:a1:72:6c:
                    46:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0C:8C:C5:EB:45:EA:EB:DF:52:98:54:70:5A:F0:37:68:D2:56:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/637ffaad-493a-387f-9213-a1686bb04fdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:da:69:f9:4f:95:68:f8:63:63:53:a9:d6:c9:39:1f:bf:3a:
         76:c7:2b:7b:88:e1:86:79:89:f0:bc:26:96:a9:f7:91:df:4a:
         c5:d2:e6:db:02:07:11:6f:52:9e:ef:3e:67:5c:47:33:88:d9:
         ea:8d:8a:6a:f2:85:2d:63:f2:52:01:98:06:36:30:7e:f3:82:
         2e:03:bb:4c:41:2f:b7:5e:8e:4b:3a:d1:62:82:f3:92:ed:fa:
         da:10:88:bd:0f:3b:83:28:34:e9:bb:b9:68:76:f9:0a:cb:2f:
         98:18:a3:89:7e:df:ba:55:23:0d:d6:d7:e2:5b:30:98:b7:88:
         73:d6:1d:d2:a2:6c:25:15:7a:c1:cd:08:d9:79:25:b9:e6:95:
         79:a0:26:e1:67:cb:d6:8f:28:94:cd:6d:1a:f0:ed:2b:b4:16:
         a4:68:18:7a:21:0d:95:cb:78:9a:5e:27:b6:7e:79:dc:8b:71:
         22:0c:a4:ea:ea:70:3d:6f:ba:7c:7b:06:e3:9e:92:18:f9:04:
         7d:43:a6:d7:d9:92:ad:62:17:58:d7:cf:04:5d:7f:c0:d4:98:
         94:2a:b8:2f:1f:e9:51:10:12:ac:e1:cc:dc:eb:90:4c:af:1d:
         ba:8f:c2:28:35:36:22:f3:71:e7:cb:91:a2:02:e0:2d:ca:be:
         8e:b5:dd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:13:51 2025 by rpki-client