Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/924403c9-ba7e-3862-91a1-6d97fd67009f.roa
File:                     924403c9-ba7e-3862-91a1-6d97fd67009f.roa (raw, json)
Hash identifier:          SpX/Y5XaraShAgDlMgBEitsHij4aGLTw7N1kPnJQdzk=
Subject key identifier:   A6:F7:D9:82:A8:D8:85:91:64:7D:7B:C1:E9:C9:0B:31:E3:87:01:09
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B758CA6F2C5CC76750D3957C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/924403c9-ba7e-3862-91a1-6d97fd67009f.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     400536
IP address blocks:        172.252.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:a6:f2:c5:cc:76:75:0d:39:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=27433c95-758f-482e-9736-2b1a5351e21b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9c:32:8d:2b:07:54:1c:c4:85:3f:ea:a7:2c:
                    77:69:8b:e7:36:50:c9:78:bf:43:b4:5b:a1:8d:f0:
                    f5:11:ec:68:c5:8d:ac:dd:0a:e5:37:2c:0b:99:cc:
                    be:e7:a7:12:1b:eb:cf:a5:25:d4:bf:7d:d1:95:73:
                    99:bc:5b:6a:cc:73:47:2e:f6:c5:9c:aa:41:b4:45:
                    7d:83:0f:6c:15:a1:1e:80:21:3c:0c:84:9d:35:86:
                    47:ff:53:29:75:94:66:c4:c3:ef:38:42:9c:cf:11:
                    a2:44:a6:82:fa:71:74:95:96:58:81:43:30:b6:75:
                    0b:58:1f:9e:25:3d:8f:0a:b2:be:9c:1c:e4:d7:bb:
                    05:8d:f4:35:f2:d7:3d:65:2c:ff:49:14:89:34:12:
                    23:14:a1:5b:ea:0c:dc:cb:57:12:81:ef:fa:3f:21:
                    4b:2a:98:24:72:37:7e:2b:1c:08:bf:1e:ab:07:6d:
                    87:a2:d3:4e:27:08:59:d2:d6:7f:65:48:60:c0:49:
                    75:e0:8b:2b:3c:e4:04:21:f1:4b:56:ac:5f:85:d2:
                    a6:8f:ba:50:86:2b:a1:d4:b5:cb:d6:ca:08:c8:10:
                    dc:07:d8:11:aa:0f:fe:21:75:3e:46:8e:70:d8:ef:
                    8b:7c:de:b3:9d:98:d7:15:35:1b:b3:a7:63:ce:df:
                    0a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F7:D9:82:A8:D8:85:91:64:7D:7B:C1:E9:C9:0B:31:E3:87:01:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/924403c9-ba7e-3862-91a1-6d97fd67009f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:df:68:df:c2:40:a5:64:b5:fb:1a:f2:02:7a:17:0c:b0:f8:
         f5:5c:86:0d:4d:ea:8c:84:52:65:d0:7e:da:61:68:2f:aa:24:
         cd:a9:62:44:60:ea:40:cb:ce:8d:e5:d1:55:68:74:14:a5:de:
         e5:a3:ac:07:7b:36:2e:49:40:86:35:7c:35:c0:eb:c3:a9:76:
         23:c0:f5:ac:96:78:53:e9:ea:b1:94:5a:54:72:2c:b6:ae:45:
         46:7d:8f:c0:b9:15:84:33:17:a7:19:35:db:f2:cb:e4:b0:71:
         f7:42:58:a0:9e:27:b4:84:b7:bb:79:23:7f:a1:92:98:17:b8:
         7f:57:22:1d:60:18:4d:37:7b:39:c3:22:26:d4:28:4c:f5:7f:
         a3:86:b2:d9:04:fd:4c:03:09:6b:6b:5d:dd:74:53:4e:2d:a1:
         06:5e:b7:45:ea:fd:32:cd:7c:4d:a4:ad:ef:3d:3f:83:d3:1f:
         4b:3d:44:f7:fc:a2:30:aa:67:5a:96:69:43:00:00:5a:a4:81:
         6b:f7:12:74:cb:62:b5:05:93:41:84:00:3c:cc:ba:db:e7:c9:
         7c:79:e3:02:c5:74:4d:fc:4f:12:f3:03:a7:4e:15:28:22:71:
         65:c3:e0:8f:30:dd:f0:2e:a7:3e:0e:a4:c3:42:4d:3c:82:7c:
         cd:61:a8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:16:11 2025 by rpki-client