Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/653c1188-3d47-30eb-a35e-e02f1c442d38.roa
File:                     653c1188-3d47-30eb-a35e-e02f1c442d38.roa (raw, json)
Hash identifier:          oK2dsJLEdVvUfwGZp7d1nhR5/MTo7ngc5HyhzsS+m0M=
Subject key identifier:   83:21:6C:17:C3:36:8B:A9:3B:38:00:7A:9A:BE:19:C3:47:CB:3D:EE
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AB22177BFC347D7C72F949B60
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/653c1188-3d47-30eb-a35e-e02f1c442d38.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     18779
IP address blocks:        172.252.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:77:bf:c3:47:d7:c7:2f:94:9b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=903577d6-6ac5-4ffd-831b-271886e9a5f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:77:22:f6:7e:e7:1a:82:3b:1e:f0:5a:cf:d0:
                    7f:13:10:7f:b9:6b:80:1e:11:b9:e0:ff:9d:dc:6f:
                    d8:17:15:b2:97:4b:89:58:38:3b:53:dc:5c:04:57:
                    2a:2b:f4:bc:2c:d6:c4:fd:f0:c5:6c:05:4e:a7:7c:
                    d2:b5:6d:00:57:d5:0b:65:d0:66:7d:18:ad:4d:00:
                    91:f5:a5:86:d3:02:d0:3f:bf:fc:fe:ad:5c:11:76:
                    80:44:df:76:4d:9d:19:cd:6c:01:06:b8:0c:3d:22:
                    53:3c:1e:8e:aa:a1:3c:fa:ce:99:3c:1a:c9:00:25:
                    61:7d:26:00:18:87:8c:c9:3d:01:d3:26:a1:af:c2:
                    6e:66:76:44:e0:a6:64:20:a1:5c:45:58:47:35:b1:
                    6f:a5:55:1c:44:c5:16:01:9b:62:e0:32:f5:45:a6:
                    8c:d7:07:40:51:10:e2:7b:49:18:39:53:da:27:c7:
                    53:4a:ad:36:e6:b3:58:8f:4b:11:bb:ca:27:65:4b:
                    37:0a:5f:0e:dc:68:0b:26:27:20:72:a4:62:91:a5:
                    2b:db:b1:38:17:f4:8c:23:bd:4b:1f:49:9b:b2:32:
                    57:1e:71:37:8a:db:33:c2:40:74:65:cf:fc:1d:90:
                    d0:6a:3a:46:41:e9:2c:bd:ac:06:fe:7d:9f:19:7f:
                    04:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:21:6C:17:C3:36:8B:A9:3B:38:00:7A:9A:BE:19:C3:47:CB:3D:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/653c1188-3d47-30eb-a35e-e02f1c442d38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:4f:4e:73:8e:60:03:81:27:c9:43:ba:36:d2:70:5f:95:06:
         bc:f4:f3:9a:5a:a5:41:e3:68:da:8f:d3:7c:be:a2:ea:e8:40:
         7d:ff:47:fd:2e:02:29:54:9f:92:f3:70:ae:5a:24:4e:5c:e1:
         40:f7:db:75:cd:29:22:08:ad:bb:12:41:2d:a9:37:80:29:46:
         df:9d:ee:b5:09:c6:12:9e:30:02:21:17:69:32:da:43:1f:15:
         01:46:c1:ff:6c:49:04:af:9b:fa:11:ef:52:c2:67:33:7b:88:
         38:5e:ed:60:cd:e2:c3:e5:80:8e:85:6f:96:2d:c5:00:b2:b0:
         50:02:40:c0:df:de:4e:80:d9:7e:60:50:f1:36:f4:48:45:4d:
         e4:43:74:ad:e3:81:9a:a9:2b:82:85:00:65:07:67:ba:0d:35:
         74:2e:c0:79:66:f1:f8:c8:3c:a7:27:44:f2:99:88:40:90:73:
         ce:d0:79:dc:3a:d0:4e:a1:50:07:6b:49:c0:85:3e:e9:8d:f9:
         fd:b4:cc:19:60:99:b0:29:5f:02:84:bc:b9:89:f9:da:46:5e:
         6f:37:57:43:5f:8d:ef:8b:e6:b6:76:2f:7a:28:99:fb:ca:21:
         05:7d:54:4f:5e:22:c3:00:5c:42:ca:27:27:8c:9a:6b:bf:2c:
         17:6c:16:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:22:10 2025 by rpki-client