Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/aa07813c-e54d-39ae-923a-6c45eed1c1a4.roa
File:                     aa07813c-e54d-39ae-923a-6c45eed1c1a4.roa (raw, json)
Hash identifier:          GojEIwNPUrqU8paV3J4qK0IPMyOcWqo+kDwhhV9VZaU=
Subject key identifier:   96:32:7E:46:AE:B6:89:43:C2:09:A2:33:0C:BE:9C:32:60:59:35:5C
Certificate issuer:       /CN=73980674-4684-4801-b116-e9e08b4ff9f4
Certificate serial:       010D0C9F4328584A9636947CC40464F372ADF880
Authority key identifier: 14:DD:E8:8A:3F:2B:21:89:32:80:26:85:A2:B1:DD:8F:BB:30:75:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/aa07813c-e54d-39ae-923a-6c45eed1c1a4.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     7018
IP address blocks:        152.37.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/73980674-4684-4801-b116-e9e08b4ff9f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/73980674-4684-4801-b116-e9e08b4ff9f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:94:7c:c4:04:64:f3:72:ad:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73980674-4684-4801-b116-e9e08b4ff9f4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=4563ac24-c88f-4036-bc98-d66e83aede85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:de:27:1b:3b:5a:21:ca:6c:fd:dd:0f:da:f3:
                    13:18:95:93:72:29:4a:6f:a5:1c:96:03:3c:84:2d:
                    e9:69:27:e7:c6:21:50:5c:0c:08:07:a3:5c:b3:4e:
                    ae:e2:41:79:53:1f:ff:36:33:76:1b:da:79:94:a2:
                    3b:7b:ad:ce:8f:85:67:b2:23:72:ba:ec:d1:7a:b1:
                    fb:ce:83:05:f7:39:65:5c:92:23:29:b7:b1:17:28:
                    b4:3f:c9:2e:ef:8d:2f:60:50:5a:3c:4b:db:c4:8b:
                    9d:27:b7:19:0e:7a:1a:8c:01:ec:53:f0:68:4f:38:
                    3d:5a:7d:ef:4e:73:31:7d:94:be:47:ce:48:c1:50:
                    61:96:87:7e:d2:cd:7e:50:92:ab:a9:b7:7a:87:17:
                    8b:78:74:ac:94:a3:f0:14:95:f3:13:84:53:6c:dd:
                    9a:f8:db:80:ba:97:0a:cc:3e:a8:1c:d1:4b:5f:3c:
                    1f:06:40:8e:61:f8:2c:47:13:3b:2e:30:68:1d:fa:
                    ff:6f:f9:74:82:02:bd:18:7a:34:2c:8b:14:44:53:
                    d4:1e:d7:f5:b2:bb:14:55:f2:04:4d:d4:11:9b:81:
                    a4:e3:58:8a:45:bc:20:a4:82:b5:34:ad:0d:14:7b:
                    09:3f:17:3e:aa:af:7d:ff:b6:d4:6d:de:85:b3:18:
                    6e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:32:7E:46:AE:B6:89:43:C2:09:A2:33:0C:BE:9C:32:60:59:35:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/aa07813c-e54d-39ae-923a-6c45eed1c1a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/73980674-4684-4801-b116-e9e08b4ff9f4.crl

            X509v3 Authority Key Identifier:
                keyid:14:DD:E8:8A:3F:2B:21:89:32:80:26:85:A2:B1:DD:8F:BB:30:75:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.37.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:3b:e7:6d:fd:f3:50:04:af:1b:38:a9:87:23:89:05:41:48:
         be:b1:f3:14:dc:4f:93:09:8e:76:e9:49:85:75:62:0a:33:ca:
         81:01:4e:fa:59:85:f3:cc:07:d2:a1:2e:a4:3e:ba:b2:f6:eb:
         d2:d5:31:21:b7:67:d7:8d:79:ad:76:4e:48:c2:4a:83:99:64:
         a0:53:9e:09:31:f3:b5:ca:96:63:1b:00:96:16:65:36:75:3d:
         16:e5:d3:65:1b:65:e4:63:d8:b7:de:b8:71:c6:f2:f6:5e:e3:
         3a:d1:21:44:47:1d:75:ed:66:c7:99:b5:04:48:fc:41:bd:90:
         c2:a9:be:c4:02:a3:a6:b5:fd:e2:c0:49:8b:ab:ca:ea:ac:51:
         11:67:c7:b9:b6:d3:71:cb:7b:02:ce:03:de:1a:4a:8a:a7:af:
         1c:07:87:13:ee:ab:a3:06:88:1a:79:36:0e:ca:68:61:78:1f:
         9c:0c:74:c5:8f:12:91:06:33:a2:1b:b8:c7:63:73:e1:e8:c7:
         e3:05:c7:33:76:9e:03:8f:b7:66:fc:8c:91:b3:bb:19:2d:62:
         16:ea:5b:a4:9c:ea:de:ae:8c:2a:ac:61:61:f9:a0:c0:1d:4f:
         6c:10:7a:70:34:d0:c3:b8:46:b5:b8:ec:25:db:2b:4f:ab:c1:
         8b:ac:51:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:06:14 2025 by rpki-client