Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a9fe0365-2647-3e99-b56f-302f40037d8d.roa
File:                     a9fe0365-2647-3e99-b56f-302f40037d8d.roa (raw, json)
Hash identifier:          MNNzsG8cTDJoIniVPdAR+NB/lf1m0ISX9DfqEz5K8Ps=
Subject key identifier:   1D:E2:8E:B3:30:DF:5C:85:91:38:A2:6D:B6:79:5E:B7:B2:CC:AB:EB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A1F901FF396FD707DD6838020
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a9fe0365-2647-3e99-b56f-302f40037d8d.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     2914
IP address blocks:        172.252.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:1f:f3:96:fd:70:7d:d6:83:80:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=d848e3b9-f495-4591-9d65-c5b382702d4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6a:57:06:f6:b1:d2:b1:2a:61:d6:e0:09:f7:
                    b8:04:4e:7a:60:2b:04:1e:f0:48:c7:8a:c1:48:2e:
                    8d:b0:69:41:dc:3f:0a:25:62:d1:f3:6c:b3:6f:eb:
                    9e:53:62:f4:31:9e:86:51:8e:4e:f0:13:4d:ce:8c:
                    33:90:1a:05:70:6c:34:27:b5:c9:25:f0:56:c9:21:
                    a5:58:e3:3e:f8:c2:5a:ab:d2:60:ce:69:ea:c7:91:
                    25:62:2e:37:64:3f:3b:3d:d8:3e:0c:45:44:59:ea:
                    b4:65:2b:9b:b4:50:f4:ec:33:9b:88:bb:f5:bc:f2:
                    9d:2c:fe:04:3d:7f:a3:44:98:7b:9c:f5:b2:1b:84:
                    e8:2f:60:8e:57:37:1b:d4:f2:41:28:d4:e1:2c:21:
                    81:ca:c6:f8:31:cd:83:40:4c:40:77:09:74:d5:96:
                    e2:33:c3:ea:de:c6:82:b1:e1:46:15:d3:c3:b6:8f:
                    67:5e:e3:aa:3d:17:62:45:d7:1b:78:f1:b9:eb:37:
                    ea:3c:eb:83:79:16:5e:3e:4e:5f:c7:35:e5:a7:1b:
                    28:d8:3f:20:bb:14:7f:ab:91:ef:72:cc:53:9f:de:
                    bd:c2:15:95:f0:42:55:04:ae:02:f1:37:69:1f:9b:
                    55:e5:07:65:0c:aa:e5:a7:e8:4e:87:88:63:52:f5:
                    c4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E2:8E:B3:30:DF:5C:85:91:38:A2:6D:B6:79:5E:B7:B2:CC:AB:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a9fe0365-2647-3e99-b56f-302f40037d8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:27:97:02:1d:a2:d6:44:83:10:e1:1c:38:2a:ee:86:ed:c1:
         ec:d9:6c:c3:b0:09:e7:b4:bd:26:ba:56:42:c9:b2:51:f0:22:
         1e:7a:af:e2:11:e5:24:78:38:cd:cd:b0:c8:75:41:d9:19:06:
         7b:86:85:9f:54:3e:c3:58:0a:25:11:96:2a:78:86:81:b9:c4:
         17:39:93:6b:ca:3f:01:52:22:c9:3d:69:65:58:c9:9f:d1:46:
         6e:41:46:d4:bc:69:85:6f:60:d7:21:4d:8a:0c:1e:dc:b2:fd:
         51:cf:e2:21:14:23:65:b2:07:b8:74:0b:2d:38:b5:84:dc:87:
         08:fd:8b:5d:83:5f:7b:0a:b5:a9:2e:b6:00:6b:3f:39:c7:9f:
         e0:33:58:5b:84:87:26:11:98:33:20:fb:74:25:bd:bb:f6:06:
         05:3c:9e:4c:ae:a2:fc:1d:69:17:fc:6a:1d:c8:21:35:bd:ff:
         b6:dd:d8:bc:ac:d0:ac:fc:a1:14:86:9c:ec:fe:32:c9:34:e9:
         1d:2a:fa:2b:83:f8:98:8f:05:0e:04:28:4c:e4:4e:c5:3e:c1:
         4f:fd:29:a8:e6:85:0d:ad:cf:20:c5:a3:3f:d3:15:21:f9:57:
         9e:b8:c9:29:b6:de:d3:05:72:1f:29:69:b6:17:46:d7:77:cf:
         c7:bc:e2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:50:55 2025 by rpki-client