Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e9f7364f-d4c8-3d0a-9fbf-6d4db22d6801.roa
File:                     e9f7364f-d4c8-3d0a-9fbf-6d4db22d6801.roa (raw, json)
Hash identifier:          SkE43x72Qglr1V9FB2WBS3CfZ2LB9gVZNEOkYUxtvMM=
Subject key identifier:   0E:9C:E2:4B:26:2F:59:F2:FD:E5:77:B5:D5:A2:94:C6:1D:47:85:77
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584ABEB0E0E882C78E69B808F840
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e9f7364f-d4c8-3d0a-9fbf-6d4db22d6801.roa
Signing time:             Mon 04 Aug 2025 13:00:36 +0000
ROA not before:           Mon 04 Aug 2025 13:00:36 +0000
ROA not after:            Sun 02 Nov 2025 14:00:36 +0000
asID:                     9009
IP address blocks:        172.252.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:be:b0:e0:e8:82:c7:8e:69:b8:08:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug  4 13:00:36 2025 GMT
            Not After : Nov  2 14:00:36 2025 GMT
        Subject: CN=5badaafb-0593-493f-8939-3dd862f684c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a1:11:a6:48:22:cf:78:38:3c:ed:29:d2:fe:
                    af:b7:13:79:b2:6c:6e:6f:dc:9a:87:0a:2e:93:e4:
                    a9:34:1f:1c:c5:a5:9b:9c:8a:5f:3a:71:61:51:85:
                    ce:99:08:a1:56:63:e7:9c:81:63:a1:3e:60:3d:09:
                    01:5b:f6:96:e3:5e:c4:09:6f:a2:6b:be:39:d2:fd:
                    60:83:26:5d:eb:04:a9:c8:fe:18:34:7e:e1:6e:17:
                    bb:ee:41:9b:b8:ae:52:a2:2e:4d:e7:36:d7:db:7e:
                    4f:cf:15:87:ad:05:5a:cf:b3:c9:85:8e:4b:58:af:
                    7d:81:ae:a5:7e:21:f0:c3:ca:6d:35:6f:d8:13:e6:
                    a9:da:ed:7e:5d:bf:29:5c:4d:da:df:40:f7:54:c8:
                    02:c0:ba:7b:32:18:4a:c4:d0:c7:bc:8a:fe:ef:36:
                    61:37:cf:1a:69:36:5d:2c:7f:e1:59:22:5f:f8:52:
                    b0:20:2d:90:c2:84:b7:c4:6b:d5:5b:c9:c1:77:d7:
                    48:f8:bf:e8:2c:c3:33:c6:5f:5f:d5:48:dc:dd:dc:
                    c6:37:12:01:7c:1a:74:c6:1c:6d:ca:f4:07:56:c9:
                    45:3b:4b:ec:b6:f7:63:37:c2:99:eb:d1:95:6b:f2:
                    dc:8e:50:8d:47:63:83:f5:f0:c8:fb:af:1e:cb:22:
                    70:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9C:E2:4B:26:2F:59:F2:FD:E5:77:B5:D5:A2:94:C6:1D:47:85:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e9f7364f-d4c8-3d0a-9fbf-6d4db22d6801.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:d6:6a:8c:0c:48:21:74:50:ee:08:39:bc:bc:c5:1b:e2:a9:
         3d:78:99:1a:a1:d2:a5:f8:14:bb:97:b1:ea:e7:4f:04:a2:2c:
         7f:a4:78:0a:66:2f:d7:3f:e1:3f:38:da:11:a1:af:25:4d:69:
         bb:15:c1:f8:c6:a9:88:1c:b9:66:21:c1:1d:db:05:4a:41:59:
         00:46:f7:db:62:cd:5e:75:7a:a1:37:72:cb:ee:5a:0d:49:6e:
         ba:52:33:64:6d:89:e4:eb:48:16:b6:87:31:82:6e:b9:e7:97:
         65:a4:4f:96:12:c5:d4:88:bd:bf:6a:39:5f:15:44:b8:f2:7c:
         51:1d:c7:c4:1b:12:bc:52:81:30:6c:f8:0a:1f:8f:47:c0:e2:
         58:46:d3:58:64:f9:87:4b:02:1f:17:a6:47:31:72:b5:b2:8d:
         ce:d2:11:05:97:59:4e:52:08:be:83:ef:ad:b4:8a:ab:4c:e8:
         7c:d4:8b:1c:47:37:c2:e3:9d:a8:dd:6a:fc:3c:ab:ac:80:00:
         07:51:99:04:1e:b0:89:a7:4f:f7:b7:0d:69:7a:44:ac:58:0b:
         07:bb:ae:bb:ed:01:73:68:cc:6b:8f:34:90:f1:4f:7b:4d:b9:
         a0:f2:72:43:c1:2d:63:89:74:5b:8c:6d:c5:92:1f:82:b6:35:
         15:36:e7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:03:07 2025 by rpki-client