Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a8024c7e-6357-3855-9018-a28bf7a5c2f2.roa
File:                     a8024c7e-6357-3855-9018-a28bf7a5c2f2.roa (raw, json)
Hash identifier:          /r3OHsikauROgf0hg3SO1VnxVoBnvV3ssf2igy9+s3U=
Subject key identifier:   52:E0:90:80:39:4D:DD:F0:1A:79:37:66:8A:60:F3:33:8B:33:C4:C3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B758CA66E7C877A9759E7EC88
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a8024c7e-6357-3855-9018-a28bf7a5c2f2.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     214238
IP address blocks:        192.177.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:a6:6e:7c:87:7a:97:59:e7:ec:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=a59431da-7b3f-476f-a40a-9d7e025c3724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:25:5b:23:1e:b4:34:57:26:45:a7:46:6c:53:
                    82:94:60:10:47:3c:fb:5a:57:a7:b2:24:3d:e9:61:
                    d5:76:00:a1:e2:5d:68:4a:23:a5:f4:f5:20:e7:48:
                    d0:21:03:68:c1:7e:50:d8:c7:bc:4f:b0:2e:07:e6:
                    ac:44:f6:6f:03:83:b8:9d:00:1e:65:26:7d:5e:23:
                    6f:fb:b1:5e:79:2b:5b:a7:65:c9:d5:52:37:ab:cf:
                    59:01:e7:bb:ae:3a:b3:3a:e6:18:d8:87:e1:d9:f9:
                    1b:e5:f7:c6:ab:38:a4:52:0c:f8:e5:73:99:50:6d:
                    1f:93:0c:eb:0e:27:1a:54:ec:f6:9f:a7:58:ed:0b:
                    fc:d2:f2:93:2c:b8:0d:4e:46:f7:99:dc:e2:1b:4b:
                    f8:40:8a:9c:4f:65:b2:3b:26:55:c9:87:8a:c2:c6:
                    8f:61:08:f2:ec:c5:51:94:74:68:88:13:cc:ec:c7:
                    1b:b4:61:f8:91:29:04:74:80:29:a9:9d:c8:b3:9c:
                    20:f2:72:ed:bd:40:65:1d:72:e8:8c:f4:25:88:b3:
                    fa:73:70:f0:cd:4a:e2:1a:7d:9a:54:26:aa:3f:1c:
                    77:91:85:8c:ad:1c:38:e2:52:2f:7a:72:9d:2f:7c:
                    51:80:33:48:d0:16:62:ee:d7:e9:17:2d:56:1d:d4:
                    f6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E0:90:80:39:4D:DD:F0:1A:79:37:66:8A:60:F3:33:8B:33:C4:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a8024c7e-6357-3855-9018-a28bf7a5c2f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:8a:e1:96:0e:de:6f:fe:0f:e3:e1:68:22:73:e4:80:33:c3:
         4e:eb:7b:cf:e9:3f:66:51:91:f0:25:32:c2:a6:f8:2d:ea:8d:
         ab:72:90:52:0f:ea:7a:a1:d7:37:55:b6:61:7a:f4:82:4f:ef:
         77:76:b0:0d:be:ec:75:aa:29:9c:5e:34:8a:3e:cc:6f:fc:34:
         85:cb:31:c0:6c:22:2a:54:f1:45:88:22:35:4e:8e:de:ec:02:
         f9:7c:2c:2c:a0:a3:80:40:b9:de:4c:96:34:e7:b9:cb:6f:d8:
         ec:cb:bb:6e:1a:21:3e:17:2f:df:d4:49:9f:7a:1d:c2:03:79:
         3f:48:a8:c0:e1:9b:49:8e:40:cf:76:2f:e2:08:c8:ae:1c:46:
         09:51:55:07:83:ee:93:c6:f6:ac:ed:3d:e1:15:f8:3a:41:dc:
         1e:5c:42:d1:7e:05:74:81:15:c6:9c:e6:53:8c:3d:e6:4e:f6:
         94:1c:77:60:c9:1a:24:6b:ed:04:67:5e:01:2a:4e:b7:7a:fd:
         94:53:d4:41:0c:ef:b7:1b:0d:ec:53:7b:5a:2f:19:e5:7b:f0:
         7f:a9:27:18:77:33:f8:c9:24:0c:64:ad:6a:be:7a:c6:f3:f4:
         1a:ab:5e:6f:2c:9c:87:1b:96:d3:fb:79:40:3f:df:11:67:a2:
         ad:d2:ac:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:08:56 2025 by rpki-client