Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec1136b6-bd8d-3628-8ec4-da62ce42d6d1.roa
File:                     ec1136b6-bd8d-3628-8ec4-da62ce42d6d1.roa (raw, json)
Hash identifier:          dGFdH0Cs+D3fqZSWZYaKG04cMK6y8JXd6hSRUPUSJtI=
Subject key identifier:   07:61:C3:8B:B4:6C:30:6D:59:4D:E0:77:97:BB:D6:D6:4D:B7:9A:B7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B620211774AA4A3105B88CEE0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec1136b6-bd8d-3628-8ec4-da62ce42d6d1.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     6939
IP address blocks:        172.252.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:11:77:4a:a4:a3:10:5b:88:ce:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=d356fd4c-a3a2-4b30-bc82-01793fdb4280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:89:a0:98:3b:2f:cf:6b:6c:64:ee:63:dd:a7:
                    0c:37:d8:fb:d7:fb:15:19:24:1d:93:39:11:08:0f:
                    b8:14:80:97:26:c0:e4:ed:0f:db:56:b0:f6:5f:eb:
                    35:d7:d2:79:34:b2:57:86:e0:02:64:6f:49:99:9b:
                    7a:ea:70:80:00:a0:06:43:24:9a:8e:73:c8:c7:43:
                    9d:15:56:95:71:de:37:d9:d3:64:1d:fb:70:88:e5:
                    57:9b:9a:64:8f:8a:95:2a:96:a1:1e:f4:3c:af:d6:
                    07:4c:cb:c6:87:aa:a4:91:6e:fa:67:6f:06:c5:56:
                    fc:20:bf:3f:da:28:24:22:36:ad:ce:5e:79:35:e2:
                    f1:5d:8c:12:5b:a6:ab:0f:9c:47:4b:3a:b4:76:e5:
                    f0:e3:44:74:eb:8f:6d:19:16:8b:9d:e1:02:d6:82:
                    dd:4d:98:88:75:e6:df:92:2a:fe:da:79:07:81:b8:
                    bc:13:81:4a:40:ff:f9:43:67:a9:fd:38:9e:02:0b:
                    92:30:1f:18:27:c0:76:eb:35:89:76:59:0f:4c:d3:
                    56:36:7a:14:02:ad:ee:b6:ee:91:37:f4:1e:2d:53:
                    97:ec:22:7c:2c:9b:fa:e0:91:4f:33:10:4e:7f:65:
                    38:87:db:41:f9:5f:ec:21:b0:eb:f6:af:2f:51:8c:
                    eb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:61:C3:8B:B4:6C:30:6D:59:4D:E0:77:97:BB:D6:D6:4D:B7:9A:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec1136b6-bd8d-3628-8ec4-da62ce42d6d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:88:94:02:a3:0c:fc:28:79:82:ff:c3:de:e4:cd:85:78:25:
         7f:fd:0b:3d:93:07:85:4a:50:29:17:c9:d6:4d:01:3d:c0:7e:
         2a:83:18:39:fe:90:1d:d9:29:64:6f:1f:46:c5:e4:46:21:db:
         c5:7e:4b:f6:d6:78:80:d0:0f:8f:f0:98:d0:98:97:44:84:99:
         9c:d9:4f:74:88:d4:e9:8e:22:4d:66:37:28:7a:b5:86:78:17:
         d9:10:bf:26:42:9a:2c:3d:61:de:59:67:a1:9c:53:a4:50:23:
         a6:8e:7a:58:1f:67:3b:25:5a:00:4b:56:8f:53:90:2d:44:4e:
         8b:29:fb:f2:4a:bf:20:6e:cd:fc:d5:04:c5:5a:ae:54:0f:aa:
         d3:6f:66:6d:66:93:9f:cd:0c:14:d7:4c:ff:10:4b:6f:4a:f1:
         c6:4e:e9:9d:06:ab:48:09:37:51:63:09:df:10:29:19:1b:69:
         c5:96:08:91:e9:77:76:e9:16:c9:57:9d:a3:20:b5:6e:f3:b7:
         50:e8:02:34:2b:b7:9e:01:d5:09:16:a2:44:28:65:d7:47:d8:
         4f:22:57:c3:03:95:6d:09:ac:0e:e5:d3:51:21:0c:bf:ef:38:
         57:36:70:25:46:26:42:58:16:63:b8:57:df:6b:0f:7b:98:e3:
         82:07:e7:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAhF3SqSjEFuIzuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk
ZDM1NmZkNGMtYTNhMi00YjMwLWJjODItMDE3OTNmZGI0MjgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4mgmDsvz2tsZO5j3acMN9j71/sVGSQdkzkR
CA+4FICXJsDk7Q/bVrD2X+s119J5NLJXhuACZG9JmZt66nCAAKAGQySajnPIx0Od
FVaVcd432dNkHftwiOVXm5pkj4qVKpahHvQ8r9YHTMvGh6qkkW76Z28GxVb8IL8/
2igkIjatzl55NeLxXYwSW6arD5xHSzq0duXw40R0649tGRaLneEC1oLdTZiIdebf
kir+2nkHgbi8E4FKQP/5Q2ep/TieAguSMB8YJ8B26zWJdlkPTNNWNnoUAq3utu6R
N/QeLVOX7CJ8LJv64JFPMxBOf2U4h9tB+V/sIbDr9q8vUYzr0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAdhw4u0bDBtWU3gd5e71tZNt5q3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZWMxMTM2YjYtYmQ4ZC0z
NjI4LThlYzQtZGE2MmNlNDJkNmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPzEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACWIlAKjDPwoeYL/w97kzYV4JX/9Cz2TB4VKUCkXydZNAT3AfiqDGDn+
kB3ZKWRvH0bF5EYh28V+S/bWeIDQD4/wmNCYl0SEmZzZT3SI1OmOIk1mNyh6tYZ4
F9kQvyZCmiw9Yd5ZZ6GcU6RQI6aOelgfZzslWgBLVo9TkC1ETosp+/JKvyBuzfzV
BMVarlQPqtNvZm1mk5/NDBTXTP8QS29K8cZO6Z0Gq0gJN1FjCd8QKRkbacWWCJHp
d3bpFslXnaMgtW7zt1DoAjQrt54B1QkWokQoZddH2E8iV8MDlW0JrA7l01EhDL/v
OFc2cCVGJkJYFmO4V99rD3uY44IH5xw=
-----END CERTIFICATE-----
Generated at Sat Oct 11 11:14:44 2025 by rpki-client