Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8aad5406-e647-3fe5-8a2a-b46fa62a2b73.roa
File:                     8aad5406-e647-3fe5-8a2a-b46fa62a2b73.roa (raw, json)
Hash identifier:          T58p+hykdWEdmsEKUKNf8JwsEWS787eS1Khra126xfM=
Subject key identifier:   C6:CA:0F:5A:BC:A6:3C:1B:71:5D:AB:42:74:E9:E3:EA:D6:4A:A9:FC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584BB02CF4C608661ECE4EEA82C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8aad5406-e647-3fe5-8a2a-b46fa62a2b73.roa
Signing time:             Thu 30 Oct 2025 01:00:30 +0000
ROA not before:           Thu 30 Oct 2025 01:00:30 +0000
ROA not after:            Wed 28 Jan 2026 02:00:30 +0000
asID:                     18779
IP address blocks:        192.177.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b0:2c:f4:c6:08:66:1e:ce:4e:ea:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 30 01:00:30 2025 GMT
            Not After : Jan 28 02:00:30 2026 GMT
        Subject: CN=8cf6e174-c141-4a3a-81e0-98e633c19481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:78:58:bf:8a:af:22:57:81:df:f3:a1:80:09:
                    6a:e7:6a:f7:73:d3:bf:d9:f7:8d:fb:3e:74:e1:f0:
                    40:b4:4b:18:fb:75:2b:4b:d0:ce:d6:7e:0f:7d:fa:
                    fa:50:18:d7:e6:c1:af:ee:76:58:13:c9:8e:d9:bf:
                    7c:2f:b1:ae:9b:e7:99:f4:db:d7:91:08:36:3b:53:
                    bd:bb:36:ff:42:77:3f:db:0b:fd:a9:d1:e0:f5:b6:
                    f8:11:40:f9:f2:db:c6:0c:e5:9a:cb:1c:f0:1f:e5:
                    95:ca:34:af:d6:c9:88:d6:b7:03:7e:56:53:04:8e:
                    be:55:e2:15:1d:1a:3a:f3:3a:2f:60:50:7e:fc:96:
                    28:e6:16:30:e8:13:f4:d1:3f:c7:fa:26:28:27:be:
                    b0:fe:c3:6d:c2:fe:3d:b0:02:26:fb:a6:39:cd:ab:
                    5f:35:e7:eb:f6:90:c9:12:3b:e6:c7:9a:b2:8f:5a:
                    a4:f4:d8:e1:8c:db:87:27:b9:40:be:fe:c0:34:53:
                    ad:cb:af:50:5b:4e:e0:0d:3c:56:22:2a:1d:98:85:
                    94:4d:5d:ea:bc:0a:dc:f7:19:fd:25:10:5a:c8:33:
                    ea:8d:eb:e1:6d:dd:a5:34:6e:1a:8f:59:9d:1f:ec:
                    b7:c0:50:8f:fb:26:c0:ab:ca:a3:30:fc:b3:36:93:
                    ba:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CA:0F:5A:BC:A6:3C:1B:71:5D:AB:42:74:E9:E3:EA:D6:4A:A9:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8aad5406-e647-3fe5-8a2a-b46fa62a2b73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:29:c6:bf:c1:a0:df:69:f7:fa:67:50:ab:ff:8c:ae:97:5e:
         61:7c:a4:a9:3b:dc:4f:51:0c:a3:6d:88:2f:40:04:17:37:ec:
         ea:aa:6a:97:89:87:d9:0e:7d:8b:43:92:e4:aa:64:e5:22:01:
         7f:46:14:82:2e:43:93:9c:a3:fd:24:9e:13:bc:64:72:00:d5:
         c5:af:1b:67:db:ff:9c:4a:48:ac:d4:72:dc:4e:e8:0f:19:42:
         f3:d5:6c:02:cb:65:15:ce:64:d1:35:cc:99:9c:a5:94:9a:4b:
         0c:ee:5c:e6:fb:c1:45:b0:fd:37:78:12:90:83:51:e1:61:fc:
         95:eb:03:d7:e2:cb:0d:5b:2b:ce:00:8e:ed:4b:ec:e2:8a:01:
         a2:c5:ef:2d:09:0e:94:b9:2f:36:4b:0d:e4:33:e0:18:59:d3:
         59:33:a6:57:bc:1c:cb:4b:e4:f8:d2:d3:6b:15:06:9f:df:b9:
         45:e8:86:17:70:7e:82:43:77:4f:3c:5e:55:41:61:e5:d5:d1:
         82:99:df:d0:c3:35:98:a7:22:b2:6f:a4:b5:de:3d:7f:fc:25:
         a6:4f:18:38:2d:c7:24:aa:8a:66:3f:73:3c:d0:ab:92:56:1a:
         23:ed:ee:cb:bc:26:c4:b8:f2:af:19:96:25:67:e3:92:5e:c9:
         2b:c9:41:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:52:16 2025 by rpki-client