Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8b195ddf-367b-3b5e-8794-3ddeb9e18a58.roa
File:                     8b195ddf-367b-3b5e-8794-3ddeb9e18a58.roa (raw, json)
Hash identifier:          cS8cvzuHxFe8zMbxBaFUx9WrqFcHLg815MZufWhU70o=
Subject key identifier:   83:BE:F5:2F:90:E4:90:D4:E5:88:7B:26:FF:28:78:4C:BF:21:8E:FF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A6DBB38A4239E3E2DA75DDB20
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8b195ddf-367b-3b5e-8794-3ddeb9e18a58.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     18779
IP address blocks:        142.252.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:38:a4:23:9e:3e:2d:a7:5d:db:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=65051d15-b593-44da-bcff-07b519ca54bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e5:83:0a:c4:13:7e:f3:da:da:a3:f5:8e:b4:
                    40:48:93:e6:90:b2:15:84:d5:a7:cf:f0:82:34:0a:
                    8f:05:97:c2:de:f0:51:55:72:e3:c4:9c:bd:ac:05:
                    40:dd:7a:55:9d:64:5f:18:c9:23:97:91:71:78:d6:
                    0a:ff:f6:99:d9:ad:4a:4d:4f:1f:85:5e:85:42:56:
                    74:8a:2d:05:94:fe:2b:93:8a:d1:82:c7:01:8a:28:
                    a0:e2:12:9f:42:38:0c:29:00:15:69:fe:4d:76:03:
                    84:76:ff:02:f0:57:47:d6:ff:13:49:3a:bd:02:bf:
                    13:a2:ec:e3:bf:4a:1d:32:e0:8a:85:27:a1:c4:25:
                    1f:1e:ef:f7:38:07:71:83:4f:c8:a1:3f:6a:2c:c4:
                    93:8f:65:3a:64:54:30:c9:26:4a:01:75:35:29:2d:
                    54:09:7b:6e:20:79:6a:55:d3:d3:ea:68:eb:dd:e3:
                    db:9e:74:62:33:32:97:22:e1:a4:2a:f7:b9:51:6b:
                    48:5e:02:5d:18:80:db:09:18:a9:1a:96:0c:11:af:
                    bb:44:6d:4f:eb:59:0b:45:fc:15:de:07:20:72:f3:
                    c8:07:b6:e1:07:2b:56:ab:7f:f1:85:f1:7f:8f:4e:
                    33:3b:cd:f0:22:1f:15:1a:10:8d:c7:dd:50:55:d3:
                    20:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BE:F5:2F:90:E4:90:D4:E5:88:7B:26:FF:28:78:4C:BF:21:8E:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8b195ddf-367b-3b5e-8794-3ddeb9e18a58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:44:11:2d:1c:57:e8:89:91:2b:d2:98:d0:bc:76:e5:91:e1:
         f9:13:ff:74:16:44:b2:c8:bc:dd:a5:48:dc:a9:a7:2c:bf:d4:
         77:63:e3:46:48:d2:2a:93:63:4d:3a:e5:81:58:be:b5:3e:b8:
         5b:a6:7e:1c:bf:9f:48:70:42:8d:0a:85:c6:1e:aa:17:64:25:
         ad:23:99:42:06:e5:9c:ef:a7:aa:bf:17:6f:00:9b:0f:5a:46:
         ef:85:88:84:d3:2b:61:89:fd:d0:6f:20:16:21:fe:e5:c3:2c:
         f9:b8:b2:1f:b1:5f:95:6a:e9:35:0c:2b:28:a7:be:39:34:ff:
         7a:e4:38:0f:53:c3:43:5c:d1:f0:1c:f3:0b:fb:28:e6:ab:82:
         05:7f:0a:49:3d:e7:a0:99:28:d1:c0:74:92:b7:c4:0a:e0:ee:
         ca:e3:aa:66:02:d4:4c:bc:f8:d9:ff:9b:0a:66:15:d9:92:a9:
         6a:d5:f3:81:f3:67:5d:8f:87:6d:b1:80:33:64:98:28:8e:e5:
         f1:f6:61:9f:6b:b7:5b:4a:25:be:a1:97:5f:8a:00:43:da:2d:
         6b:47:2d:ab:cf:6c:b1:46:05:6c:48:ad:e4:c1:53:b2:3c:97:
         43:d9:e8:78:36:b8:0e:84:fc:3d:c2:b7:ea:2f:5a:60:4f:45:
         c9:ff:b1:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptuzikI54+Ladd2yAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk
NjUwNTFkMTUtYjU5My00NGRhLWJjZmYtMDdiNTE5Y2E1NGJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+WDCsQTfvPa2qP1jrRASJPmkLIVhNWnz/CC
NAqPBZfC3vBRVXLjxJy9rAVA3XpVnWRfGMkjl5FxeNYK//aZ2a1KTU8fhV6FQlZ0
ii0FlP4rk4rRgscBiiig4hKfQjgMKQAVaf5NdgOEdv8C8FdH1v8TSTq9Ar8Touzj
v0odMuCKhSehxCUfHu/3OAdxg0/IoT9qLMSTj2U6ZFQwySZKAXU1KS1UCXtuIHlq
VdPT6mjr3ePbnnRiMzKXIuGkKve5UWtIXgJdGIDbCRipGpYMEa+7RG1P61kLRfwV
3gcgcvPIB7bhBytWq3/xhfF/j04zO83wIh8VGhCNx91QVdMgawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIO+9S+Q5JDU5Yh7Jv8oeEy/IY7/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOGIxOTVkZGYtMzY3Yi0z
YjVlLTg3OTQtM2RkZWI5ZTE4YTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvzVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIVEES0cV+iJkSvSmNC8duWR4fkT/3QWRLLIvN2lSNyppyy/1Hdj40ZI
0iqTY0065YFYvrU+uFumfhy/n0hwQo0KhcYeqhdkJa0jmUIG5Zzvp6q/F28Amw9a
Ru+FiITTK2GJ/dBvIBYh/uXDLPm4sh+xX5Vq6TUMKyinvjk0/3rkOA9Tw0Nc0fAc
8wv7KOarggV/Ckk956CZKNHAdJK3xArg7srjqmYC1Ey8+Nn/mwpmFdmSqWrV84Hz
Z12Ph22xgDNkmCiO5fH2YZ9rt1tKJb6hl1+KAEPaLWtHLavPbLFGBWxIreTBU7I8
l0PZ6Hg2uA6E/D3Ct+ovWmBPRcn/sTg=
-----END CERTIFICATE-----
Generated at Thu Jul 10 22:03:38 2025 by rpki-client