Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af0fceb2-d3a5-3b21-b0f0-7ccca8a285cd.roa
File:                     af0fceb2-d3a5-3b21-b0f0-7ccca8a285cd.roa (raw, json)
Hash identifier:          YUrOp0BZ2EqXT1A/uNZYWqufesE1DiqbqRlgJba63B4=
Subject key identifier:   6A:9E:58:2D:12:97:DD:8D:74:2F:99:97:21:5E:66:82:E3:3B:E4:21
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A8DC1C5D3247F6BEC6439C168
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af0fceb2-d3a5-3b21-b0f0-7ccca8a285cd.roa
Signing time:             Fri 18 Jul 2025 00:20:10 +0000
ROA not before:           Fri 18 Jul 2025 00:20:10 +0000
ROA not after:            Thu 16 Oct 2025 00:20:10 +0000
asID:                     6939
IP address blocks:        172.252.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:c1:c5:d3:24:7f:6b:ec:64:39:c1:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 18 00:20:10 2025 GMT
            Not After : Oct 16 00:20:10 2025 GMT
        Subject: CN=ff0944e8-c1fd-46c5-9403-d14974d41b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b3:74:7b:28:8a:14:f9:45:9d:35:2f:23:19:
                    80:df:1a:e6:06:ad:e8:fe:9a:c6:89:65:16:b3:8c:
                    ae:c3:a6:7e:fa:ff:ba:29:4d:05:fa:8b:33:0a:fa:
                    99:9d:ec:b5:44:e4:65:04:44:de:e6:ef:28:61:71:
                    64:eb:76:62:d3:5c:5d:8f:ad:ec:6d:22:9f:28:67:
                    35:31:6a:85:34:ae:3e:95:5b:89:e6:49:42:cf:af:
                    bd:05:c4:05:93:3b:e8:ab:f2:7f:1a:1c:94:20:31:
                    53:75:c5:ba:ec:0d:bc:71:cf:35:e7:0e:cc:43:e5:
                    db:89:b9:22:bf:25:7b:88:b2:48:c4:9b:38:c0:f7:
                    75:00:ce:7c:3c:70:ad:40:85:54:8e:9a:08:ef:f6:
                    7e:77:ec:e4:29:55:8d:b5:9f:20:fa:e1:c3:32:e0:
                    fe:98:e0:4f:be:03:6c:53:39:35:0d:56:88:ca:73:
                    7f:80:89:dc:ce:e2:e2:00:27:8b:43:44:86:18:c2:
                    93:16:67:ee:7b:82:25:ed:b0:63:99:e0:89:b2:9c:
                    2a:7a:e4:e1:e8:23:cb:c0:ee:49:49:ce:14:10:d2:
                    76:9e:76:cb:f0:ab:b0:7b:89:4a:a5:2e:0c:ca:b8:
                    44:42:d0:3c:63:a8:7a:84:e2:09:2f:59:24:26:f9:
                    ee:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9E:58:2D:12:97:DD:8D:74:2F:99:97:21:5E:66:82:E3:3B:E4:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af0fceb2-d3a5-3b21-b0f0-7ccca8a285cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:34:32:1c:17:6d:70:ca:61:13:2b:9e:b4:8e:5e:83:4a:35:
         bb:d3:d4:b9:2c:47:80:0d:32:da:74:99:e8:ca:25:c6:90:18:
         86:86:45:1a:73:b5:26:ee:cd:94:34:5a:d5:46:b5:4e:05:76:
         4e:41:34:1f:b5:7b:cd:10:34:92:60:f5:93:ae:7b:f3:6b:98:
         54:3f:63:63:56:aa:9f:7e:a8:d8:46:67:ec:76:96:21:1c:75:
         00:8c:ee:df:2c:94:62:f5:47:58:c1:d1:6d:b1:79:89:b9:6e:
         f0:2d:2e:f7:4f:8f:69:94:57:2a:d4:21:f3:48:36:5e:2f:66:
         7b:33:f8:58:bb:bd:8d:b1:45:fa:37:4d:cd:9b:40:c1:17:0b:
         ef:47:46:df:b1:a9:26:b1:0c:d6:a0:1f:d7:99:de:36:91:9e:
         7f:27:ef:81:50:18:45:c6:3a:0e:90:1e:e7:b8:c9:ba:cc:4a:
         6f:cf:dd:44:02:2a:1f:5e:77:5e:92:ac:ce:66:40:09:63:69:
         e0:94:92:16:86:bd:1c:c3:11:3a:04:ac:09:59:9d:b0:fc:b1:
         50:c3:50:dc:35:2b:42:96:a5:61:d0:ae:1e:79:d4:69:25:ae:
         6a:2d:49:35:2c:44:bd:c6:43:27:38:67:b7:e9:9a:d1:ad:69:
         16:1f:19:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:16:59 2025 by rpki-client