Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b325f6f1-0016-3250-a9e2-462a29e132f3.roa
File:                     b325f6f1-0016-3250-a9e2-462a29e132f3.roa (raw, json)
Hash identifier:          sC1jr1Jq4UVs00z/o56wEhmbmfuoL1B+Gd1lPwvSu/E=
Subject key identifier:   89:1F:EF:70:00:18:CF:E7:E9:14:DC:1D:FF:E1:97:8D:1F:3A:3C:F5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AB220C9B72E7698C6F5249A40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b325f6f1-0016-3250-a9e2-462a29e132f3.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     18779
IP address blocks:        172.252.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:c9:b7:2e:76:98:c6:f5:24:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=49af3965-ae42-4d35-856d-ed2b8f0db98a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:72:90:5b:8b:ce:0c:b3:2c:6a:65:1c:fe:53:
                    e9:90:34:d3:16:43:06:12:8b:29:8f:02:90:5f:74:
                    ba:b7:0d:38:74:a7:c4:08:d9:bd:55:bc:81:15:99:
                    d2:08:f8:7e:4c:d0:c9:d6:1e:a0:02:9f:70:de:da:
                    cb:3e:aa:15:b8:de:5c:74:f9:15:b0:6d:64:65:d0:
                    d3:35:d3:ac:12:51:1b:85:6c:03:9c:7d:45:b6:51:
                    68:63:56:f1:ef:01:0e:fb:12:56:e9:95:5d:f0:f6:
                    c3:01:2c:43:57:b4:02:09:e6:1e:a3:82:dc:27:83:
                    8c:25:3a:2a:53:0a:94:62:88:c8:ea:d5:a5:7d:62:
                    bd:da:14:8a:a1:a8:86:41:d1:90:78:bd:0b:f4:1e:
                    4e:f2:f5:c1:78:97:b3:ac:7a:3d:fd:ba:4d:de:aa:
                    37:35:b4:5c:1c:83:39:35:1e:e6:dd:a7:30:49:7a:
                    d5:b4:55:72:86:ce:ad:e0:c8:a8:ed:4b:cc:2d:74:
                    81:ac:1f:fd:6a:4f:b1:d8:05:05:16:da:fd:aa:3a:
                    1d:d4:c7:92:f4:58:cb:99:1c:1e:36:5d:d1:0c:70:
                    e6:20:17:4c:92:26:b6:e5:8d:87:9a:25:22:04:63:
                    0f:d3:d4:c9:0e:9d:71:a2:2e:fb:37:f3:f5:00:61:
                    c0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1F:EF:70:00:18:CF:E7:E9:14:DC:1D:FF:E1:97:8D:1F:3A:3C:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b325f6f1-0016-3250-a9e2-462a29e132f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:21:8e:75:2b:60:3b:b4:27:5e:37:a0:a2:64:f8:3c:e9:8b:
         c9:c4:c5:13:0e:18:79:50:fb:43:5b:bd:da:4f:c3:74:7a:bb:
         fa:b2:43:24:7e:6b:0e:c1:88:f8:32:67:87:a6:82:22:df:16:
         d6:62:da:27:72:e0:c6:5e:fe:ef:58:80:29:a1:34:5e:49:c5:
         5c:a8:10:d9:ec:1f:7b:45:dc:d6:c6:85:71:fb:17:f5:ef:3d:
         bb:7e:da:16:71:ef:98:c3:69:66:91:d8:7e:2b:4e:d1:3a:e8:
         f5:ac:7c:be:14:2b:f3:29:80:45:6d:89:6d:17:82:2c:31:2f:
         12:ed:61:21:8e:0d:cf:b8:e4:62:c3:58:8f:1b:9c:e0:dc:d4:
         77:bd:4f:e1:6a:5e:a2:c8:db:6e:0f:1e:e0:d5:64:70:a4:e9:
         d0:20:11:42:91:cc:9b:92:b0:01:ec:37:a3:a8:ea:24:b0:81:
         c6:8e:50:04:7f:7d:20:3f:8e:dc:0c:5b:ec:ff:b7:2f:07:bf:
         86:e3:77:3c:dd:c4:54:e7:6f:c2:4b:92:33:6b:89:c4:d0:fc:
         6f:48:39:f0:5c:8f:34:3b:3e:6b:a5:31:f8:0d:a5:b0:9b:d0:
         b6:8f:2f:a6:21:cd:ab:29:0b:f8:98:52:05:a7:d5:f4:65:ff:
         b7:de:01:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIMm3LnaYxvUkmkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk
NDlhZjM5NjUtYWU0Mi00ZDM1LTg1NmQtZWQyYjhmMGRiOThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3KQW4vODLMsamUc/lPpkDTTFkMGEospjwKQ
X3S6tw04dKfECNm9VbyBFZnSCPh+TNDJ1h6gAp9w3trLPqoVuN5cdPkVsG1kZdDT
NdOsElEbhWwDnH1FtlFoY1bx7wEO+xJW6ZVd8PbDASxDV7QCCeYeo4LcJ4OMJToq
UwqUYojI6tWlfWK92hSKoaiGQdGQeL0L9B5O8vXBeJezrHo9/bpN3qo3NbRcHIM5
NR7m3acwSXrVtFVyhs6t4Mio7UvMLXSBrB/9ak+x2AUFFtr9qjod1MeS9FjLmRwe
Nl3RDHDmIBdMkia25Y2HmiUiBGMP09TJDp1xoi77N/P1AGHAFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIkf73AAGM/n6RTcHf/hl40fOjz1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYjMyNWY2ZjEtMDAxNi0z
MjUwLWE5ZTItNDYyYTI5ZTEzMmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPw5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEQhjnUrYDu0J143oKJk+Dzpi8nExRMOGHlQ+0NbvdpPw3R6u/qyQyR+
aw7BiPgyZ4emgiLfFtZi2idy4MZe/u9YgCmhNF5JxVyoENnsH3tF3NbGhXH7F/Xv
Pbt+2hZx75jDaWaR2H4rTtE66PWsfL4UK/MpgEVtiW0XgiwxLxLtYSGODc+45GLD
WI8bnODc1He9T+FqXqLI224PHuDVZHCk6dAgEUKRzJuSsAHsN6Oo6iSwgcaOUAR/
fSA/jtwMW+z/ty8Hv4bjdzzdxFTnb8JLkjNricTQ/G9IOfBcjzQ7PmulMfgNpbCb
0LaPL6YhzaspC/iYUgWn1fRl/7feAdw=
-----END CERTIFICATE-----
Generated at Mon Aug 4 08:26:18 2025 by rpki-client