Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4c4d923b-e0cc-3a96-be4b-c6cb4067eb22.roa
File:                     4c4d923b-e0cc-3a96-be4b-c6cb4067eb22.roa (raw, json)
Hash identifier:          PVYNEM4v7Ht5ia70mxbQfF1AqVJ7CviB64zTB29S2nw=
Subject key identifier:   31:A2:F3:40:70:C8:9A:86:C6:3B:5F:3F:0A:E3:F6:99:23:7F:DD:E4
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D1D886548BDF288BA765F5500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4c4d923b-e0cc-3a96-be4b-c6cb4067eb22.roa
Signing time:             Mon 09 Mar 2026 21:54:50 +0000
ROA not before:           Mon 09 Mar 2026 21:54:50 +0000
ROA not after:            Sun 07 Jun 2026 21:54:50 +0000
asID:                     398781
IP address blocks:        172.252.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:88:65:48:bd:f2:88:ba:76:5f:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  9 21:54:50 2026 GMT
            Not After : Jun  7 21:54:50 2026 GMT
        Subject: CN=67d50b7c-8b9a-420c-b9d6-acbf94a8debb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:25:5b:e6:11:fc:3e:4c:c7:ae:db:a6:06:10:
                    a9:9b:df:c8:7a:6d:49:05:b4:ab:b2:54:8c:1c:01:
                    a2:be:1a:bc:db:c2:2e:67:72:35:c8:21:bf:a5:c3:
                    9d:f5:8e:dd:0b:97:68:09:bc:7c:bd:10:5c:04:a0:
                    a8:39:66:87:fb:3a:c3:49:ad:c4:f0:5f:34:8f:6e:
                    4b:aa:6e:17:65:d4:8f:6f:67:b8:af:b0:1e:59:33:
                    0a:a0:b5:e8:19:74:35:06:f9:c8:81:d8:9c:64:0e:
                    58:85:e1:a1:69:c9:db:e0:8d:1d:94:2a:21:1a:30:
                    19:c3:24:28:0a:12:1c:84:ab:1c:27:04:0f:cd:35:
                    f0:22:12:8b:1e:9c:68:b2:86:34:db:b1:7f:14:48:
                    f6:ec:d4:6d:19:13:ee:33:8a:f6:bc:89:d3:93:a6:
                    c7:f0:bb:05:4d:66:99:d2:8a:30:2c:81:74:e3:af:
                    4b:5a:ac:7a:f6:b5:38:b5:61:c1:25:b0:a6:75:c2:
                    d6:03:b2:f8:e5:93:44:7c:91:0d:60:d4:aa:17:40:
                    47:eb:a1:b3:c3:d5:87:8c:81:b4:7b:a5:88:a2:94:
                    11:91:3c:45:69:c0:d9:3e:69:c4:6f:d1:bc:0e:83:
                    69:95:ca:09:47:36:9f:93:a5:57:c3:6a:b7:cd:de:
                    61:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A2:F3:40:70:C8:9A:86:C6:3B:5F:3F:0A:E3:F6:99:23:7F:DD:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4c4d923b-e0cc-3a96-be4b-c6cb4067eb22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:cf:e0:65:a0:03:f1:bb:6a:71:f0:7a:72:c4:27:4f:7c:b7:
         a0:45:21:3c:49:42:a4:fc:8f:76:8c:1e:39:07:2f:1c:4c:6d:
         60:07:aa:6e:17:4a:07:0d:c1:43:e1:2d:73:b2:24:7a:24:eb:
         c5:ee:d8:f1:ae:06:b8:ab:e7:f3:9b:13:18:ad:1f:45:c3:ef:
         6e:ae:28:6b:59:16:9a:de:01:62:9a:33:43:d5:a6:de:72:27:
         33:e3:44:69:67:3f:5f:7e:2c:f1:4c:e8:2e:a0:61:ff:24:8b:
         2f:2b:98:9f:95:cf:6a:67:14:38:31:33:10:f1:9c:78:1b:0a:
         39:4f:fd:f9:b8:5c:bb:d5:41:3c:c7:34:2e:9a:b5:6a:dc:c8:
         75:3c:5f:12:8b:15:bd:e3:ff:4c:03:23:92:78:aa:c1:ed:0b:
         80:73:a7:7b:d0:8f:61:cd:a1:da:60:8a:04:1c:79:8c:4b:7f:
         f2:67:87:e9:65:2b:32:f1:f2:5f:0f:35:e1:e4:65:51:b8:ec:
         c8:62:55:90:0d:d5:17:10:6c:22:d5:8e:3b:d0:de:55:79:15:
         42:26:b5:f7:e5:1f:37:53:32:5b:4a:89:31:81:d4:5c:f5:24:
         81:a5:88:9e:01:e9:f2:52:db:75:d2:59:74:69:fd:ee:b0:17:
         25:60:a7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 18:47:19 2026 by rpki-client