Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c54624b9-ba49-3f40-9c53-51c6a8b5448b.roa
File:                     c54624b9-ba49-3f40-9c53-51c6a8b5448b.roa (raw, json)
Hash identifier:          F/IjCQfgh4ivSTkL+pPAooz8xi1wpyCR7BMFTasT4zc=
Subject key identifier:   BA:FD:6A:5D:61:60:2F:62:72:54:A4:4C:BC:26:7A:ED:1A:1F:F3:16
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B4081DFAB37379B5536096B80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c54624b9-ba49-3f40-9c53-51c6a8b5448b.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     401182
IP address blocks:        172.252.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:df:ab:37:37:9b:55:36:09:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=ded34000-af8a-46d9-9e3e-11ae2ce5c4ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d3:4e:5b:96:b0:7e:9e:1e:45:92:f0:e7:9b:
                    b1:eb:c4:58:4c:b0:42:2d:02:fc:6c:bc:0a:17:c9:
                    1c:ce:56:a4:69:94:c4:c5:98:df:53:22:5f:1f:b5:
                    60:59:e7:84:7e:03:1f:5b:2d:2e:87:69:b7:77:45:
                    e8:8c:31:51:ed:dd:86:c6:00:ca:9a:5f:49:24:b0:
                    61:1b:42:4e:11:67:0f:a6:2a:24:7e:52:d2:45:a6:
                    8b:6f:eb:03:e4:da:51:94:e5:ff:c8:61:19:73:05:
                    cf:24:a2:f3:28:bb:a7:3b:de:58:5b:04:17:1f:0a:
                    6c:c8:07:9a:e3:2a:e3:11:03:a0:30:df:34:49:d5:
                    5c:e5:e3:b4:e1:93:6f:58:26:26:a7:c8:c5:02:0d:
                    41:f9:4b:be:51:47:5b:2f:1b:f1:ce:f0:b6:80:59:
                    3c:37:d9:30:ea:a8:ff:60:88:03:f9:e8:13:a0:65:
                    cb:6a:7a:57:c8:d3:fb:93:01:52:b7:25:69:fd:45:
                    85:72:a6:3e:9b:6d:8d:31:f2:a1:55:b8:21:1e:58:
                    67:08:b1:20:d8:2a:09:6d:61:d5:82:9d:d6:7c:55:
                    46:b8:92:da:5b:3b:47:86:e1:33:96:70:57:c3:25:
                    78:ae:50:0b:06:b5:20:98:37:e2:dc:3f:72:a8:30:
                    18:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FD:6A:5D:61:60:2F:62:72:54:A4:4C:BC:26:7A:ED:1A:1F:F3:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c54624b9-ba49-3f40-9c53-51c6a8b5448b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:50:82:c9:8c:00:28:53:d4:6e:dd:65:8f:05:0f:06:ba:1b:
         7a:0e:a3:a9:c0:86:c5:2b:aa:51:20:fc:f4:0c:8f:20:9b:cd:
         bf:93:53:07:64:58:4e:a0:62:78:b0:ed:f8:62:57:e2:74:75:
         fd:4c:ab:f3:a6:32:93:a4:ad:46:6f:9e:3f:9c:07:08:e9:47:
         ae:7f:1c:7d:fc:df:d1:90:fb:fc:2d:ae:0b:ae:98:9c:a5:1f:
         6f:cc:ff:2d:25:42:a9:45:b0:7e:11:5e:d5:85:c7:a8:8d:d0:
         13:90:06:86:7d:e2:c7:3b:82:db:68:39:da:02:b3:a3:e6:6e:
         05:02:53:80:08:33:44:79:96:ed:a7:50:db:6e:1d:74:06:e4:
         4b:2b:a6:30:6a:39:aa:e5:85:1d:72:47:73:2a:93:72:93:74:
         aa:26:37:f3:69:c6:26:83:5f:11:cc:f2:45:f6:a5:c2:ba:53:
         55:94:46:68:a1:7c:68:57:74:36:ac:fd:e1:22:4d:95:0e:37:
         2e:f9:b5:ab:28:26:05:12:7f:9a:5c:43:a0:38:ec:ac:70:9f:
         ff:42:b3:0c:8f:af:30:78:9b:77:4d:e9:8d:95:3c:06:84:cb:
         54:41:0b:8b:77:cc:3b:9e:52:72:9d:d5:7a:d8:8d:d4:d1:e3:
         00:e6:c8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:14:46 2025 by rpki-client