Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d405899f-f218-327d-8956-7e6da248683e.roa
File:                     d405899f-f218-327d-8956-7e6da248683e.roa (raw, json)
Hash identifier:          TUJWRTvICsbzhPL4cNXcO/l9xv3Mn+jCMhvEiZ2Ft4Q=
Subject key identifier:   B3:F7:A3:EA:3D:9F:C2:05:B5:D8:69:3F:F9:E6:2B:CB:C3:20:36:1D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B6D2CC9658345C530CD190540
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d405899f-f218-327d-8956-7e6da248683e.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     6939
IP address blocks:        172.252.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:c9:65:83:45:c5:30:cd:19:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=c22cf3ad-eaac-433b-b1ee-79b2fbb82bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:49:c8:77:8f:bb:de:fd:df:df:ca:47:7b:60:
                    df:73:78:ae:02:6f:df:b1:34:25:ef:f1:df:b6:e1:
                    e7:f3:e3:f5:d4:c2:5f:1b:ed:fe:cc:3b:cf:01:42:
                    61:ea:2e:49:1d:c4:14:dc:e2:30:31:00:19:b4:46:
                    c6:7d:b8:b4:83:c4:f5:e3:9b:ae:d3:fa:7d:0c:30:
                    97:2c:f5:88:65:ce:8b:e1:03:08:1e:32:4b:76:46:
                    16:4f:34:80:04:a7:0c:bb:93:05:79:7b:3d:12:af:
                    bb:03:05:d3:4f:19:70:01:03:68:25:74:c0:5d:46:
                    0a:fa:0a:85:66:7a:6d:c6:85:9e:05:cd:0e:48:fc:
                    5c:73:a1:fa:cb:0b:83:48:4e:b2:e0:c1:f6:07:d7:
                    83:b1:ba:08:1d:48:17:d4:70:08:e3:e6:99:da:77:
                    97:54:c4:c6:81:de:71:09:3d:4f:f1:ce:fa:d0:59:
                    15:b3:f5:25:8f:41:e4:bd:a7:3f:14:53:9f:fa:59:
                    9a:d2:40:82:98:c6:bb:0c:77:19:82:ee:a2:5e:22:
                    bc:7b:0f:de:4b:90:cc:67:79:d5:f5:60:bf:b4:84:
                    1f:61:d7:95:92:a9:5c:9d:80:66:fc:91:1e:57:73:
                    6d:f3:34:0c:e3:57:ba:e7:8a:1c:f3:13:5f:2c:f3:
                    c2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F7:A3:EA:3D:9F:C2:05:B5:D8:69:3F:F9:E6:2B:CB:C3:20:36:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d405899f-f218-327d-8956-7e6da248683e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:07:13:bc:3b:e1:60:04:3d:3d:57:b0:28:10:84:89:8c:1b:
         ee:e3:90:90:06:cd:01:d9:35:9f:10:33:58:45:5e:f4:2f:7b:
         07:dd:d5:1b:77:13:dd:c2:09:10:1f:1c:b3:7e:18:84:e4:30:
         d3:2e:0b:89:ba:96:12:ee:15:86:02:16:22:22:6b:78:65:1d:
         86:0a:98:b8:a5:64:c0:e4:4c:3d:72:a8:3a:06:6d:96:ce:35:
         b8:d0:68:6a:ca:d2:97:62:e1:86:f5:fe:8b:73:3d:87:a1:d6:
         6a:b6:58:7d:6d:d9:43:33:53:c7:04:f2:a3:b4:39:b5:50:35:
         ba:a2:89:13:e9:ba:ce:27:6b:ef:c8:e9:15:53:cf:be:c8:c9:
         9b:d6:b8:1b:7e:c4:47:27:53:90:62:8a:5b:c3:53:3f:5c:0d:
         29:bc:f9:3a:14:89:81:8b:24:75:18:ce:51:19:41:62:0b:43:
         72:a2:a7:e7:21:dc:c5:e1:95:f6:f9:de:ea:0a:b0:6a:93:4b:
         2d:92:b1:52:fc:6a:df:f1:69:11:5f:98:60:59:b2:f2:79:c2:
         52:1d:67:4c:21:0d:7f:99:55:73:91:3c:29:5e:5d:db:f5:fe:
         c3:ee:42:06:9b:d4:45:55:b0:c7:fd:ad:5a:23:bb:21:91:1c:
         22:c1:66:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:16:08 2025 by rpki-client