Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e7f6b8d9-0ae8-3cca-9e01-b79fe90db49a.roa
File:                     e7f6b8d9-0ae8-3cca-9e01-b79fe90db49a.roa (raw, json)
Hash identifier:          3y89uT/AH4Qa8CEV645vR0zdU5FqBIcfX0DyRlk3XGM=
Subject key identifier:   3A:52:D5:C7:20:76:21:45:19:3E:E7:6C:9D:D3:E2:BE:BC:A8:F1:6A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849D164FA8E7791F5D04E703100
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e7f6b8d9-0ae8-3cca-9e01-b79fe90db49a.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     18779
IP address blocks:        172.252.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:64:fa:8e:77:91:f5:d0:4e:70:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=2aa7a8d5-0419-4e60-bdba-9f429d4dc3b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6a:8d:9c:35:20:10:6f:ec:b8:08:7c:f3:25:
                    c5:9e:d2:c4:33:b6:65:e0:27:c5:0c:17:87:18:09:
                    3d:e4:b0:95:6e:0d:ce:35:cb:67:93:f8:14:63:3b:
                    fc:56:fd:2a:f4:7d:45:e5:8f:c5:5d:c2:46:9a:d0:
                    13:c1:be:d9:0b:fa:9b:7e:df:f2:1a:ce:d7:e3:93:
                    e2:60:55:59:9d:d4:ed:1c:f3:85:4c:1c:6c:b0:1b:
                    8e:a4:6a:06:ea:98:f3:c7:b6:81:dc:44:de:83:52:
                    d7:10:73:6f:2d:91:4a:de:74:65:28:83:fc:c7:13:
                    15:56:67:78:d8:4b:5e:0a:e3:a9:53:43:ed:4b:15:
                    73:2c:7d:28:f3:ed:9f:ee:46:77:5a:d1:98:4a:4f:
                    96:91:08:cb:2b:bb:57:be:e6:84:e9:cf:4b:6f:a5:
                    5d:7f:e0:a6:07:57:32:25:4c:aa:3a:5b:40:47:55:
                    3a:4e:07:9c:9d:cf:8f:18:3a:0e:01:fd:ec:94:e4:
                    76:0b:62:88:5c:59:62:2d:cc:41:ec:ae:91:9f:2f:
                    f6:33:09:05:61:76:7f:ec:29:1e:cc:41:89:d2:3b:
                    94:ef:6a:7f:ce:91:be:d1:1b:30:b1:e4:13:12:9b:
                    64:56:1c:c4:0a:a5:88:5c:40:d1:78:2e:b8:7b:34:
                    67:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:52:D5:C7:20:76:21:45:19:3E:E7:6C:9D:D3:E2:BE:BC:A8:F1:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e7f6b8d9-0ae8-3cca-9e01-b79fe90db49a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ab:93:41:b5:42:65:4b:57:14:95:24:10:77:8c:99:8c:1f:
         03:98:15:38:2e:b2:2a:d3:17:e3:d7:7f:e4:a6:00:e1:01:27:
         f5:1d:8c:1f:0d:7c:13:2f:75:39:57:cd:ec:0c:f8:0f:ba:bb:
         42:61:36:4c:a4:d1:60:91:a7:69:f1:0b:ce:62:5a:c7:6a:25:
         d9:af:a9:f5:e4:5e:94:ad:93:10:9c:25:f8:f5:41:2d:c9:09:
         91:a2:7d:28:f7:e9:d8:fc:ae:76:ec:f2:8e:d7:15:15:30:be:
         e7:87:01:27:d8:de:76:5d:9f:b3:36:2f:87:da:51:73:57:56:
         4a:8e:7c:f7:12:65:e7:33:c3:74:12:6e:f6:f8:bc:ea:f9:19:
         bb:88:aa:96:05:1b:59:52:eb:d3:af:10:77:e1:81:63:66:f6:
         c2:cf:1e:a3:78:e0:08:50:c4:e4:87:ea:45:79:60:d5:ce:41:
         33:a0:c1:58:0d:d3:e4:36:24:7f:fb:e7:cc:99:36:b2:d4:f2:
         5d:71:b0:1b:42:58:9c:03:f7:5e:df:ef:93:96:ec:0d:1b:19:
         dd:fc:2a:87:6c:ec:52:96:23:7b:9e:79:d4:53:65:7d:d3:10:
         5b:df:d6:c0:13:88:9d:fb:92:0a:4b:ea:02:05:74:dc:6b:59:
         03:74:cd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:42:32 2025 by rpki-client