Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d4821aad-5995-3ecb-ac39-ab6239a8d184.roa
File:                     d4821aad-5995-3ecb-ac39-ab6239a8d184.roa (raw, json)
Hash identifier:          HS7PhSosDxitmvTQxYHDNJXTuKJgXya6wgwAMRfQAyw=
Subject key identifier:   E8:F9:1F:34:4C:C4:AA:17:17:34:03:15:73:1F:3D:F7:16:C7:B3:B1
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A8DC1FB80DC69A4A8AF9FF947
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d4821aad-5995-3ecb-ac39-ab6239a8d184.roa
Signing time:             Fri 18 Jul 2025 00:20:35 +0000
ROA not before:           Fri 18 Jul 2025 00:20:35 +0000
ROA not after:            Thu 16 Oct 2025 00:20:35 +0000
asID:                     6939
IP address blocks:        172.252.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:c1:fb:80:dc:69:a4:a8:af:9f:f9:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 18 00:20:35 2025 GMT
            Not After : Oct 16 00:20:35 2025 GMT
        Subject: CN=65eaf379-e1d9-4257-b402-266ba4c3386a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9c:92:7e:0f:65:a8:ba:32:70:97:5c:4d:4e:
                    25:e2:0e:39:39:8e:89:23:d4:b4:46:43:a1:56:54:
                    54:f4:df:c5:93:0f:e5:97:88:b9:af:a5:32:22:d7:
                    32:c3:31:c9:7e:e2:d8:7a:34:47:be:69:33:bf:f4:
                    ae:7e:56:74:0a:42:4c:f6:1b:73:d2:af:bf:11:e0:
                    f7:19:ca:8c:ea:ed:4c:58:33:66:a3:00:9e:c0:ef:
                    fe:3d:af:3d:27:7e:80:b9:dc:01:fb:5d:67:5b:06:
                    24:f8:07:43:20:13:10:1a:2f:b4:9e:14:d7:9e:00:
                    eb:6a:77:92:f9:11:9f:86:1e:90:e4:30:4d:fa:21:
                    d8:c3:4c:d5:f2:38:09:cd:65:d4:ac:91:93:4e:70:
                    9c:7a:13:a8:d8:7d:ec:97:0e:4b:c1:91:40:04:c0:
                    af:23:23:3a:4f:13:40:5a:92:96:74:c3:ff:75:df:
                    c0:d6:ac:a6:7b:bf:23:35:61:88:12:83:9f:34:72:
                    87:ea:00:54:72:85:ff:f4:26:90:ad:72:69:f8:ac:
                    1a:06:e2:8a:17:ac:d0:34:59:08:b9:8a:14:3b:79:
                    95:47:f3:f2:3b:52:ab:01:d4:b6:9a:93:60:6c:2f:
                    c4:3c:85:58:2a:15:1a:ad:a6:d3:05:aa:3a:1f:a2:
                    f0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F9:1F:34:4C:C4:AA:17:17:34:03:15:73:1F:3D:F7:16:C7:B3:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d4821aad-5995-3ecb-ac39-ab6239a8d184.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:ad:dc:0d:54:6d:21:da:09:c1:94:e7:08:0b:b5:ce:55:51:
         6a:4d:b2:23:10:46:85:1a:1b:03:e7:7c:ce:c0:33:5d:37:f8:
         31:5b:20:96:8c:6f:47:95:56:f5:b9:c9:ba:5e:59:47:1e:5c:
         af:f7:63:e9:8d:e4:30:61:e2:24:80:53:f2:55:de:c3:e7:94:
         61:5a:01:7e:4a:20:f0:2b:32:12:76:05:48:e2:cc:bd:4b:eb:
         d0:a6:ce:31:a1:9b:10:ab:f7:9b:ab:77:2d:71:c0:52:4f:a7:
         c8:1a:4a:bd:2a:a1:46:7a:69:62:a3:fe:01:ea:6b:b3:0b:a6:
         b4:07:6d:cf:0c:57:01:95:3b:17:73:f9:a8:12:b2:d9:f2:4f:
         1e:d6:cb:ce:cf:44:18:86:50:d9:ae:ff:23:d9:06:b4:0f:06:
         15:8a:21:70:0f:00:27:f1:4c:9c:85:71:5f:04:03:33:14:71:
         5a:b6:73:70:f5:2d:ab:a3:d9:b7:de:c4:c4:67:e4:b4:25:5b:
         94:77:39:e2:09:26:42:cd:70:fe:44:ba:1f:65:ae:95:17:87:
         d1:77:62:ac:c3:d0:2e:e4:6b:9c:3f:df:e8:57:23:e0:f9:95:
         6f:2c:c4:86:e4:36:99:94:4a:03:6b:3a:8d:8b:09:4a:53:e5:
         dc:48:b1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:27:34 2025 by rpki-client