Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec272414-8057-3b68-93a0-832e7600b00e.roa
File:                     ec272414-8057-3b68-93a0-832e7600b00e.roa (raw, json)
Hash identifier:          5J3wNTbGGfXtxWxXfCxf4z95Aecy5dwEGkfwutsNDG8=
Subject key identifier:   15:3F:87:80:66:19:80:6C:E3:4D:44:F1:70:45:C0:C8:DC:26:E2:43
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B41E7083CE3C7704BE751C680
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec272414-8057-3b68-93a0-832e7600b00e.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     18779
IP address blocks:        142.252.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:08:3c:e3:c7:70:4b:e7:51:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=0c9cc692-c9a5-48ee-b173-440f619c29e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b9:42:40:b6:7f:8a:8e:34:72:75:ad:61:be:
                    21:7d:cb:9c:bd:4e:cf:84:3e:7d:29:12:26:b3:71:
                    b8:cd:8c:99:79:09:18:6e:ee:e1:7e:67:8c:a0:9a:
                    4e:ba:12:3e:ba:f6:58:9c:85:73:b4:f1:82:69:6c:
                    d9:c7:7d:c2:51:60:f9:0f:e8:d1:66:07:a4:bd:33:
                    93:78:36:35:b1:16:8a:ba:44:c1:23:52:a3:83:78:
                    6a:76:aa:02:5b:16:83:d5:fa:fb:40:de:b4:59:81:
                    90:68:ba:9b:a2:45:33:88:d3:f8:b7:47:a7:64:91:
                    6a:de:e5:58:57:0c:a8:3d:ee:68:2b:71:6c:85:34:
                    7d:be:03:51:7f:52:4e:19:9b:3d:ee:63:27:73:e6:
                    74:3a:32:38:dc:6c:28:b2:b6:e4:d2:21:a8:e0:0a:
                    4e:4a:f7:c8:e4:62:d1:a8:ea:f3:86:cd:af:49:b2:
                    84:0c:e8:da:bb:c7:f4:00:5a:e8:e7:be:3e:28:ef:
                    0c:42:9a:ef:00:43:65:a1:64:ee:94:e0:e6:61:97:
                    a8:4d:09:85:b2:48:47:ae:0b:c1:c5:a8:90:a6:2c:
                    a6:d5:86:bc:4c:a2:b1:42:47:ed:b2:7b:90:ea:81:
                    19:a8:33:6f:6b:9c:2a:85:6d:26:ca:b3:31:2f:b2:
                    a7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3F:87:80:66:19:80:6C:E3:4D:44:F1:70:45:C0:C8:DC:26:E2:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec272414-8057-3b68-93a0-832e7600b00e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:b4:95:0d:e9:22:75:0c:5f:63:2a:39:42:f9:74:0d:a1:99:
         47:5a:c1:3b:b6:a3:55:e5:b1:14:60:5a:10:05:36:19:38:b6:
         49:23:27:15:53:3a:da:66:ad:dd:7e:b5:6f:6f:10:74:cc:dc:
         66:70:f2:e8:56:79:d7:c9:3f:d9:98:1d:b8:aa:d5:15:a7:f4:
         1b:f6:39:1b:aa:c0:1e:0a:05:40:7f:77:aa:1f:8c:ba:ae:b7:
         f6:fa:0a:13:8e:e7:82:25:65:e4:f4:18:1d:4b:6f:45:f2:64:
         f6:65:36:cd:63:b5:c2:10:4d:12:06:92:8b:b0:d2:64:72:7e:
         4b:46:ea:54:75:06:f5:e0:2f:1a:f1:1e:5e:27:02:a4:f9:e5:
         fc:4e:43:28:16:77:09:49:25:f9:e4:d9:43:04:e3:36:0a:40:
         cd:d1:be:62:77:0e:d0:86:02:bf:d9:c3:1b:7a:53:ee:b7:e5:
         9b:49:36:95:fe:79:bc:fe:80:9b:35:8b:f8:2f:65:6b:da:c6:
         5e:7c:5f:c9:39:91:04:a3:ed:18:63:29:34:f1:b8:4a:db:76:
         fe:fe:c3:73:bb:73:fe:09:b3:02:3d:23:0c:d7:1e:41:04:b7:
         e1:f6:9a:a2:4d:b8:75:11:b9:d9:e9:cf:28:6c:67:ed:4c:85:
         d3:1f:6a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:14:54 2025 by rpki-client