Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a0e263ca-22e6-3ebd-be7c-883e09848990.roa
File:                     a0e263ca-22e6-3ebd-be7c-883e09848990.roa (raw, json)
Hash identifier:          YQ9oDM8UrOz1gfCLRcYPxe2CauevrIUstY0i7ANLYnU=
Subject key identifier:   DD:15:01:C0:69:DA:E4:F3:8D:CF:62:6D:62:D6:49:93:0F:53:80:3E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A8532373906EFC561E3E03600
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a0e263ca-22e6-3ebd-be7c-883e09848990.roa
Signing time:             Mon 14 Jul 2025 22:44:27 +0000
ROA not before:           Mon 14 Jul 2025 22:44:27 +0000
ROA not after:            Sun 12 Oct 2025 22:44:27 +0000
asID:                     44559
IP address blocks:        142.252.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:32:37:39:06:ef:c5:61:e3:e0:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 14 22:44:27 2025 GMT
            Not After : Oct 12 22:44:27 2025 GMT
        Subject: CN=ce8ead39-721d-45d1-9c6c-66d529fbc2c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c2:38:8c:69:24:fc:85:be:fa:f6:16:e7:4a:
                    49:d9:2b:50:30:45:7b:9e:8a:fd:80:40:59:44:49:
                    45:67:4f:6e:a9:c5:06:cc:34:5a:dc:8d:4c:72:aa:
                    9a:8f:1f:19:fc:fa:e6:1e:56:3b:b1:4d:28:67:30:
                    8f:7d:0d:94:16:dd:5e:08:f8:1e:82:e7:a7:62:93:
                    d7:5f:57:e4:8b:24:e8:8a:af:09:67:d5:b9:49:c5:
                    81:93:b6:58:fd:e9:05:84:45:3e:c5:f0:6f:ad:f2:
                    b9:62:c1:2d:9d:d4:4b:79:c9:41:84:8a:4a:fa:00:
                    9b:3b:25:d7:01:3e:49:c0:97:c2:6b:5d:c5:25:59:
                    8a:ae:3a:57:a9:e9:c4:93:df:17:dd:06:ed:eb:da:
                    1a:d6:3f:0f:94:59:47:7c:30:80:d7:4e:7d:ce:f7:
                    a4:ab:d8:a1:7a:41:fd:98:e7:4e:e7:79:48:cd:61:
                    c5:da:1a:42:53:fc:6c:92:59:1b:e4:c3:99:1b:aa:
                    82:06:fc:a5:28:ee:bd:8a:a9:d8:9a:a9:aa:eb:c5:
                    b0:fe:5e:80:a4:4b:10:91:4d:98:85:66:67:be:39:
                    d6:71:18:37:12:63:d2:a7:6b:2a:65:cc:58:fa:a6:
                    18:52:e8:a5:d5:92:9b:38:f4:28:a6:8e:bf:3e:a7:
                    8f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:15:01:C0:69:DA:E4:F3:8D:CF:62:6D:62:D6:49:93:0F:53:80:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a0e263ca-22e6-3ebd-be7c-883e09848990.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:c8:a3:da:3e:90:c8:f3:b8:92:ae:ce:10:6e:71:22:84:4f:
         73:62:9e:82:7b:8f:b3:39:d6:56:7e:26:be:5b:0c:ee:0a:2b:
         49:75:94:55:4a:9c:f2:ed:d4:06:dd:3a:e2:22:12:14:24:6a:
         09:c2:e3:d6:0c:b5:84:66:d4:91:23:43:21:71:ea:0f:81:a9:
         f8:44:a7:8e:5f:1c:b9:7e:b3:41:b5:a7:f4:05:a3:62:46:34:
         7a:e0:0c:fe:be:dc:89:9b:2f:30:95:ad:27:7a:88:c2:5d:23:
         b9:6c:8e:bf:ac:92:a4:6e:06:7d:50:a7:a7:dd:3f:d8:13:ee:
         63:6e:ba:79:6b:49:90:35:30:9e:8d:d5:7a:9d:9e:84:f9:0c:
         45:40:5d:09:14:b5:a5:71:2b:ab:50:bc:0a:a3:2e:99:ab:5d:
         b5:7b:58:b2:6a:11:b0:13:9b:4c:48:4b:81:85:cf:24:ea:68:
         49:7b:40:7b:64:23:28:2d:1d:2a:24:81:15:a4:7d:88:51:4c:
         5c:e8:6b:14:7d:ac:24:4a:50:8e:03:74:11:6c:46:e2:69:8d:
         7a:18:f1:23:8f:2e:9d:95:93:58:c7:77:3b:a2:65:4a:d4:7f:
         a8:32:4e:ae:93:56:00:ea:4c:92:69:7e:c7:fc:1e:73:30:e2:
         82:5f:a5:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFMjc5Bu/FYePgNgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDcxNDIyNDQyN1oXDTI1MTAxMjIyNDQyN1owLzEtMCsGA1UEAxMk
Y2U4ZWFkMzktNzIxZC00NWQxLTljNmMtNjZkNTI5ZmJjMmM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8I4jGkk/IW++vYW50pJ2StQMEV7nor9gEBZ
RElFZ09uqcUGzDRa3I1Mcqqajx8Z/PrmHlY7sU0oZzCPfQ2UFt1eCPgeguenYpPX
X1fkiyToiq8JZ9W5ScWBk7ZY/ekFhEU+xfBvrfK5YsEtndRLeclBhIpK+gCbOyXX
AT5JwJfCa13FJVmKrjpXqenEk98X3Qbt69oa1j8PlFlHfDCA1059zvekq9ihekH9
mOdO53lIzWHF2hpCU/xsklkb5MOZG6qCBvylKO69iqnYmqmq68Ww/l6ApEsQkU2Y
hWZnvjnWcRg3EmPSp2sqZcxY+qYYUuil1ZKbOPQopo6/PqePkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN0VAcBp2uTzjc9ibWLWSZMPU4A+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTBlMjYzY2EtMjJlNi0z
ZWJkLWJlN2MtODgzZTA5ODQ4OTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvxWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIPIo9o+kMjzuJKuzhBucSKET3NinoJ7j7M51lZ+Jr5bDO4KK0l1lFVK
nPLt1AbdOuIiEhQkagnC49YMtYRm1JEjQyFx6g+BqfhEp45fHLl+s0G1p/QFo2JG
NHrgDP6+3ImbLzCVrSd6iMJdI7lsjr+skqRuBn1Qp6fdP9gT7mNuunlrSZA1MJ6N
1XqdnoT5DEVAXQkUtaVxK6tQvAqjLpmrXbV7WLJqEbATm0xIS4GFzyTqaEl7QHtk
IygtHSokgRWkfYhRTFzoaxR9rCRKUI4DdBFsRuJpjXoY8SOPLp2Vk1jHdzuiZUrU
f6gyTq6TVgDqTJJpfsf8HnMw4oJfpaI=
-----END CERTIFICATE-----
Generated at Mon Jul 21 08:37:42 2025 by rpki-client