Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/86e59ae7-d3df-365d-b128-ca0649e56d5f.roa
File:                     86e59ae7-d3df-365d-b128-ca0649e56d5f.roa (raw, json)
Hash identifier:          z2CkqNM+2IZYaiuY2Mp+69ZtScpTUj5rlFDjj4sATRk=
Subject key identifier:   A1:65:9F:45:C5:66:2F:1B:06:0D:89:71:A8:50:2C:78:A6:BC:C9:16
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584BA667AEA1BD33CDD0B4C2EFC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/86e59ae7-d3df-365d-b128-ca0649e56d5f.roa
Signing time:             Sun 26 Oct 2025 13:00:38 +0000
ROA not before:           Sun 26 Oct 2025 13:00:38 +0000
ROA not after:            Sat 24 Jan 2026 14:00:38 +0000
asID:                     62240
IP address blocks:        192.177.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a6:67:ae:a1:bd:33:cd:d0:b4:c2:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 26 13:00:38 2025 GMT
            Not After : Jan 24 14:00:38 2026 GMT
        Subject: CN=dd66e19b-ec17-4972-b926-9e6cc2261b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2f:4b:5c:86:56:14:74:e9:fa:e3:66:c8:1c:
                    92:f7:64:c3:fe:8f:e0:fb:b2:72:b0:16:3b:44:78:
                    06:a5:15:fe:c1:cc:10:55:a0:aa:f6:7b:36:7b:31:
                    31:b0:5d:69:f3:57:be:2e:3e:de:84:b7:43:00:17:
                    df:af:2f:73:8b:ad:7c:a2:70:dd:ca:f5:53:4c:6a:
                    ea:e9:9a:4a:82:73:1c:8f:74:5b:68:89:fd:3c:e1:
                    e4:16:9c:86:66:c2:9a:b1:1a:1b:9f:0b:af:d2:b9:
                    8c:3a:bc:91:f4:96:e9:95:35:7b:89:35:f9:48:1a:
                    87:0c:20:c7:c6:fc:c5:76:42:de:67:77:5c:30:9e:
                    0a:4a:64:2c:de:27:d7:88:46:1c:ed:eb:19:a0:bd:
                    af:e3:07:59:b7:ad:14:27:29:4e:6f:e5:bf:68:9e:
                    50:01:79:b2:da:3e:fa:d7:e3:94:96:89:69:ba:53:
                    25:f0:66:38:b4:99:10:06:ba:8a:f8:95:30:c6:8f:
                    52:b8:a7:0f:81:95:aa:cc:b7:72:f0:62:fc:7f:d5:
                    4b:59:06:22:5f:c4:7b:72:d5:01:2f:06:d2:89:3c:
                    22:70:e6:4e:c4:70:d4:8f:f8:9a:3a:88:c0:75:e3:
                    e1:1a:fe:6b:c1:52:e5:a4:97:c0:e4:ca:85:57:5b:
                    19:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:65:9F:45:C5:66:2F:1B:06:0D:89:71:A8:50:2C:78:A6:BC:C9:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/86e59ae7-d3df-365d-b128-ca0649e56d5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:1d:10:20:d9:6f:4f:01:4e:fc:cc:12:55:d6:8d:8d:5f:d8:
         1c:f0:52:30:12:e2:c3:e5:b6:b5:24:85:6d:87:64:29:8d:60:
         7a:02:0e:f7:76:21:50:d3:57:32:3c:0d:41:57:37:15:8a:a5:
         25:ee:82:65:97:0e:89:14:7d:03:0d:bd:cf:db:ff:a7:ea:3e:
         b9:48:67:32:04:0b:56:f8:00:fb:94:cb:82:b6:ed:d4:dc:ca:
         0a:41:09:63:54:01:ed:6a:97:25:e7:01:e1:62:db:40:04:6f:
         8c:d7:92:a5:a3:ed:e8:fa:b3:e2:fa:95:99:dd:e5:e9:64:96:
         1b:05:d7:d9:4a:a2:2c:31:bb:31:a7:0f:cd:6c:6d:39:9e:87:
         89:ba:7b:c2:6f:3e:a1:96:95:c2:9e:f8:22:3e:2b:49:27:e8:
         fb:98:a7:12:08:24:b5:19:32:4b:bd:f3:aa:cb:05:fa:79:03:
         8d:cc:0c:99:07:34:37:7d:97:6f:81:63:0b:d3:6b:8f:9b:38:
         4f:e8:2f:2c:7b:e4:30:88:c8:4a:88:7a:e1:34:30:8b:3d:db:
         bc:95:c1:86:82:a7:56:59:31:b9:10:dd:cb:79:b8:64:4a:cf:
         d7:02:1b:bf:27:8f:98:47:81:7f:c3:9f:fc:e3:e7:61:f5:fa:
         de:b5:72:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:05:56 2025 by rpki-client