Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/eb7438c4-c3f5-3edd-a4fc-a45a4014367b.roa
File:                     eb7438c4-c3f5-3edd-a4fc-a45a4014367b.roa (raw, json)
Hash identifier:          Tel2njw6jhBqyEKtJNoN1InK4fQl7xdK1K9PAjvSddg=
Subject key identifier:   81:E0:54:D4:36:B3:88:4F:D1:7D:AE:49:32:62:B4:68:10:19:F6:A2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A8DC1F5F40F469BCC71C4F280
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/eb7438c4-c3f5-3edd-a4fc-a45a4014367b.roa
Signing time:             Fri 18 Jul 2025 00:20:33 +0000
ROA not before:           Fri 18 Jul 2025 00:20:33 +0000
ROA not after:            Thu 16 Oct 2025 00:20:33 +0000
asID:                     6939
IP address blocks:        172.252.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:c1:f5:f4:0f:46:9b:cc:71:c4:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 18 00:20:33 2025 GMT
            Not After : Oct 16 00:20:33 2025 GMT
        Subject: CN=c479f870-cc1c-432e-aa30-37d0e8971985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:49:c6:b9:a4:6d:57:b8:6b:fd:75:be:10:3d:
                    21:80:dd:fc:77:6d:01:e2:c9:7d:a7:20:e6:13:6f:
                    d9:cf:0e:93:6c:5d:96:e5:5c:c0:20:b0:07:72:5c:
                    d3:87:5c:c5:16:2f:55:f7:00:e3:71:5e:95:5b:c3:
                    c9:cb:77:e6:c5:9f:cc:b0:37:dd:a2:ea:f7:72:84:
                    bf:72:a3:63:4e:9a:42:9e:63:02:af:47:c8:7d:73:
                    26:96:d7:29:5c:c2:15:10:4d:6f:44:ab:4b:f7:3f:
                    0b:da:87:41:e2:8d:06:3a:61:1c:68:90:08:3e:5d:
                    a2:af:23:e6:06:73:a8:5b:5e:8c:dd:45:ce:b7:d8:
                    fb:45:12:b6:ed:41:27:83:e2:61:e9:4a:67:52:02:
                    1e:e1:0a:de:b2:fc:c7:4a:6d:01:f3:8c:f3:76:16:
                    90:f2:f6:4a:dc:3b:2d:b9:e2:81:8d:72:da:42:d5:
                    7a:62:bc:06:2b:ca:1f:2e:fd:80:78:42:e2:2a:5e:
                    06:9d:13:aa:c6:7a:bf:c1:61:e3:9f:85:d4:40:5d:
                    75:c6:f2:ea:a3:f8:7e:8f:0e:9e:f7:d1:b5:fc:36:
                    c6:b1:72:7f:41:83:b6:f4:85:48:5c:8e:7e:c2:23:
                    28:37:14:a1:3d:6c:85:60:75:35:20:96:0f:4b:86:
                    18:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E0:54:D4:36:B3:88:4F:D1:7D:AE:49:32:62:B4:68:10:19:F6:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/eb7438c4-c3f5-3edd-a4fc-a45a4014367b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:51:c7:e3:64:83:b9:6e:8f:5e:06:a2:94:d1:1d:4a:e5:dd:
         22:47:3f:db:d1:43:5f:31:41:9a:8a:06:ff:cf:e6:f1:12:09:
         c0:5f:76:66:5d:d0:b0:d0:11:a2:0c:7f:c1:6d:4c:8b:08:47:
         df:8e:f1:d4:9c:10:dc:13:1a:c8:ad:7b:33:66:0d:7f:49:f8:
         0a:f6:78:3e:9c:91:5f:c8:e1:cd:63:cc:33:9f:45:e0:bd:7a:
         57:8f:27:e3:c3:08:69:b2:f8:ac:6f:f8:3d:be:3f:64:e5:eb:
         6b:3e:fe:e6:da:a8:eb:7a:39:1a:fe:40:04:10:94:6a:38:aa:
         18:a4:82:32:81:61:8d:79:15:50:e1:0e:e0:05:92:89:0a:8e:
         8a:1f:52:38:46:3e:4b:20:18:da:31:13:85:80:cf:56:62:ed:
         a9:be:e7:7a:e7:3f:f9:e8:c4:df:55:76:ad:f6:ee:b7:18:f0:
         24:68:ac:4c:49:59:0b:77:1b:c3:73:94:97:a7:42:79:2d:fc:
         8a:b3:49:a3:22:42:1a:ff:f4:0e:0a:bb:58:f1:e1:95:fd:78:
         b3:8c:ac:86:31:63:c0:d6:99:95:fa:d0:b0:03:65:a2:2e:8c:
         3c:0f:a7:ce:14:02:bf:82:dd:99:6d:dd:13:b3:1d:2c:78:77:
         f3:73:19:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:36:28 2025 by rpki-client