Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/db78f799-84fd-3179-b1cf-38b3911cfbd7.roa
File:                     db78f799-84fd-3179-b1cf-38b3911cfbd7.roa (raw, json)
Hash identifier:          6EnsnUr61hj101POUT58fflWiUl05OioHE7g3CDYb4M=
Subject key identifier:   72:5C:C0:65:42:93:57:3D:60:D8:4B:54:5C:A2:6D:AD:DB:FE:3C:C7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B715D10CF6C2BFD1F44ACDF40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/db78f799-84fd-3179-b1cf-38b3911cfbd7.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     16509
IP address blocks:        172.252.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5d:10:cf:6c:2b:fd:1f:44:ac:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=342a7603-f65d-4c37-9218-269d0adc7262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5e:81:43:2b:2f:38:9d:44:13:f2:db:2b:5f:
                    b6:0a:5d:90:06:af:ff:bc:a6:9a:64:5e:0e:b3:2d:
                    be:21:74:9e:48:38:e2:8d:5f:3a:4c:fe:2e:ef:3d:
                    61:63:48:e5:71:2c:42:d5:e0:9f:21:cc:9e:dc:f5:
                    d1:f2:0b:0e:5a:3c:2b:f5:87:b8:22:b4:3f:43:a7:
                    7d:62:17:a3:b2:46:3d:56:fd:3d:9d:0e:92:9d:1e:
                    22:36:1f:1f:e5:dc:18:bf:8c:6b:7f:10:2b:44:a7:
                    a3:d3:5a:2a:43:36:aa:f8:bd:a5:14:70:5b:85:c9:
                    49:2c:fa:88:34:a2:26:b3:93:a3:69:5e:d1:00:c7:
                    15:cf:55:77:ae:c9:35:8f:67:5a:80:2f:73:93:88:
                    9e:ec:24:5a:f9:7d:ab:88:33:35:7c:0e:79:9c:45:
                    7d:82:fd:cb:b8:4d:e3:91:6b:3c:43:c8:ac:f1:35:
                    f7:8d:cf:af:0f:4b:4a:f9:ff:0c:98:77:0a:7d:07:
                    ec:14:72:a5:75:0c:a8:50:17:c4:fd:ed:f3:56:9b:
                    89:d1:a8:48:2e:84:33:20:9d:f6:32:08:ef:46:56:
                    85:72:c2:ce:a7:10:d6:fb:cd:65:03:2d:d9:a7:d3:
                    2b:9b:5c:53:89:3d:28:e6:a9:6e:c3:92:6d:25:f4:
                    39:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5C:C0:65:42:93:57:3D:60:D8:4B:54:5C:A2:6D:AD:DB:FE:3C:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/db78f799-84fd-3179-b1cf-38b3911cfbd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:4e:71:2c:10:43:90:fd:91:80:d8:3e:a4:4f:00:a3:a3:1b:
         0a:da:ae:28:d0:66:cb:89:29:69:1d:a6:ed:c9:e5:43:07:c9:
         1b:1b:d0:df:cb:8e:06:25:45:8a:d4:62:25:90:df:03:16:01:
         d5:ee:a3:b6:63:ab:6c:2b:a2:7d:85:e4:d6:fb:18:7f:a1:5a:
         37:66:94:02:cf:7f:1c:62:e6:fd:a6:ce:75:fb:7f:2f:c9:05:
         02:e0:3e:1f:3f:33:e4:dd:c2:42:4c:fc:39:3b:14:5e:19:d7:
         4c:08:10:3a:82:d1:45:58:44:92:3c:50:a3:33:b5:3b:0f:e0:
         48:30:d3:e6:cd:a2:c9:1e:d0:45:58:64:26:8b:e4:fc:b0:ce:
         59:ff:8a:95:7d:be:99:8d:5d:af:c5:8a:c2:6c:e9:4a:c1:72:
         b4:e9:50:52:5b:98:49:e1:bb:2b:b2:c8:48:0f:1c:fd:d4:c0:
         32:ae:b6:ab:84:d4:14:0c:2a:30:1a:cd:e2:76:e6:db:38:39:
         c4:b5:11:7c:ee:d3:e4:76:1d:4c:a1:8b:1b:62:87:ea:18:c7:
         e9:11:30:ce:1a:20:f6:7a:f0:46:c3:02:ed:e9:b8:95:e5:a2:
         65:dd:e6:72:9c:96:6f:87:23:a4:7b:21:bb:f0:ad:94:8c:0b:
         68:96:e5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:13:43 2025 by rpki-client