Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d46d348e-370b-3da2-b3d2-ed38a06b5537.roa
File:                     d46d348e-370b-3da2-b3d2-ed38a06b5537.roa (raw, json)
Hash identifier:          +vWJIpGwCFkocxSkPgKUizraQimgoEhLZdScflXNwU8=
Subject key identifier:   ED:FE:1D:F6:14:0D:B1:20:F8:76:60:2F:B3:DB:33:F2:C6:85:89:3D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B23318534A7B3F190D7013640
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d46d348e-370b-3da2-b3d2-ed38a06b5537.roa
Signing time:             Tue 09 Sep 2025 13:00:41 +0000
ROA not before:           Tue 09 Sep 2025 13:00:41 +0000
ROA not after:            Mon 08 Dec 2025 14:00:41 +0000
asID:                     59253
IP address blocks:        172.252.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:31:85:34:a7:b3:f1:90:d7:01:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep  9 13:00:41 2025 GMT
            Not After : Dec  8 14:00:41 2025 GMT
        Subject: CN=8da059d9-f98b-4d7f-a4ea-63540471f589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:42:e1:b1:2e:a7:df:c1:0b:6f:c8:d9:04:ec:
                    8a:2d:56:be:5a:ea:13:9c:58:37:87:b4:a3:6e:c2:
                    ea:52:b6:b4:3b:61:38:d5:b7:35:e0:ef:82:a1:67:
                    e4:95:56:ed:b4:25:50:e2:3c:83:08:48:c0:da:e7:
                    ca:5a:42:9d:8f:00:dc:83:13:3b:43:a4:5a:32:36:
                    27:38:8f:e5:4a:f2:48:e7:bd:7a:b4:de:6d:63:b5:
                    b5:fc:6f:c2:f3:1a:9f:ac:d7:be:43:1e:74:03:93:
                    82:ba:30:34:fb:47:1b:f6:f1:66:7d:57:81:56:ce:
                    0a:34:86:e4:c8:9c:9f:20:d1:74:92:42:2f:73:3d:
                    40:62:3a:ce:b5:8d:03:b2:b0:7a:93:92:b2:6d:69:
                    07:e6:5b:69:ca:74:fc:69:bb:87:2f:f7:59:9e:1a:
                    70:0a:0d:78:b4:79:bc:26:0a:a8:3a:9b:1f:0d:5e:
                    47:fd:a7:51:9b:b4:68:f5:a3:5a:d0:e5:fd:c6:25:
                    a9:b7:19:c4:d4:74:54:8d:a7:49:f6:f5:42:02:55:
                    f7:b9:4a:e0:7e:78:ab:07:5b:b1:fb:37:8f:a3:78:
                    f0:ec:7d:e3:0e:d2:8c:c9:a0:95:bf:ee:ac:43:5f:
                    1d:5f:e8:bc:07:64:b5:e5:19:c1:46:ac:b8:bd:c8:
                    81:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FE:1D:F6:14:0D:B1:20:F8:76:60:2F:B3:DB:33:F2:C6:85:89:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d46d348e-370b-3da2-b3d2-ed38a06b5537.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:12:da:29:5b:db:d1:ee:c9:e2:c1:2b:c9:ff:a5:f6:38:52:
         b6:22:1c:08:ea:13:c9:ea:90:ff:df:ad:2e:c5:e9:08:5f:7b:
         74:f8:db:a9:bc:e5:fe:e0:56:d5:cd:4d:f9:e4:1b:5b:09:0c:
         2f:38:05:5b:6a:c9:3e:13:c4:53:e6:d1:c8:d7:0a:12:ac:d4:
         19:d8:53:d1:3f:f2:c4:6e:f7:28:6b:1e:2a:17:4c:67:88:1f:
         30:81:8c:25:71:3f:78:ad:54:67:d0:23:f2:52:23:e4:f5:3b:
         5b:99:dd:ba:b2:3a:28:57:a8:24:9b:63:89:d6:58:5d:b3:45:
         40:0e:8c:96:2b:59:87:fa:97:6f:39:44:82:dd:b4:de:31:53:
         54:80:d7:61:a2:1e:bb:c8:53:57:fe:5b:61:db:21:88:07:0b:
         f4:74:49:fe:4b:86:cc:77:f2:bf:30:3f:f1:02:20:08:fc:37:
         fb:24:2e:d9:ad:5a:16:07:66:10:07:8a:10:cb:b9:a1:3c:2d:
         79:30:92:37:31:63:68:1c:bf:e0:42:55:e3:98:79:a8:09:48:
         bf:cf:a5:ea:f6:54:bf:c3:57:68:9d:ee:41:47:66:f7:db:34:
         93:b8:b4:96:88:90:c3:05:fc:15:ae:cc:4d:ed:a3:50:e2:10:
         8a:ce:17:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:17:50 2025 by rpki-client