Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0d55426d-1df1-3a16-8be4-f1d9a3d88867.roa
File:                     0d55426d-1df1-3a16-8be4-f1d9a3d88867.roa (raw, json)
Hash identifier:          IXF1CnCfE9b2MjyhGxawIVD/nftxGRmeGJtODVqQs2c=
Subject key identifier:   DA:13:0B:6A:04:50:F0:A2:9F:66:44:03:78:78:D8:C2:E9:CF:8B:69
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B92DCE55D32594059427CA980
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0d55426d-1df1-3a16-8be4-f1d9a3d88867.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     18779
IP address blocks:        172.252.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:e5:5d:32:59:40:59:42:7c:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=21b0e5c2-c308-4a50-ac52-9d44551fcd98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d2:c2:16:04:1f:64:14:2f:e3:e3:51:26:1d:
                    20:7a:11:93:1f:44:5e:40:6f:2d:ae:da:58:42:d1:
                    71:80:8d:13:26:f1:d0:82:cb:f5:62:b7:f2:56:64:
                    c8:c1:96:28:97:64:5a:c0:a4:fd:5c:b9:74:1d:1c:
                    dc:91:12:cc:2c:4a:5f:4e:d3:7d:3c:45:43:3b:7f:
                    2e:0a:34:61:1e:6a:7c:a3:4d:5e:ef:2a:ea:0a:a3:
                    a3:96:9e:a2:65:7a:6a:5f:60:28:88:d7:12:d8:4b:
                    56:bc:cd:d8:fc:ae:4c:1d:74:91:4a:91:c5:fe:1a:
                    9f:24:bc:9d:d6:c2:f8:b7:e2:3e:16:0d:8a:7d:f6:
                    7d:e7:47:1f:d0:e8:8d:aa:e8:c2:17:6f:f3:8c:a2:
                    bd:ee:55:15:ce:76:e8:98:f9:e0:36:98:3c:4b:cb:
                    18:ee:f7:34:e9:e4:d7:6e:7c:1b:de:da:9a:e5:94:
                    0c:c5:d9:fe:1e:54:c6:cf:76:e5:56:c7:7a:5e:14:
                    55:d3:c9:30:1d:53:d6:98:69:2f:e2:59:06:0e:2d:
                    22:a9:56:e2:1a:b6:d0:74:d1:b4:5c:f2:42:41:f9:
                    91:50:c7:6a:cd:2e:5e:5c:8b:9b:85:3f:76:3b:c7:
                    a4:fe:96:d6:7b:e4:36:0b:38:44:07:8b:3d:d1:14:
                    31:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:13:0B:6A:04:50:F0:A2:9F:66:44:03:78:78:D8:C2:E9:CF:8B:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0d55426d-1df1-3a16-8be4-f1d9a3d88867.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:24:d2:1e:66:89:a9:6c:23:3d:c7:95:e0:f4:5f:c9:42:5b:
         70:5e:da:b2:00:47:0c:36:34:ad:47:b7:c4:7a:cb:b1:f9:b9:
         3b:be:e2:52:f7:a8:44:f8:0e:3b:3e:f4:a3:18:b1:29:b8:55:
         c4:62:38:4c:44:c5:75:12:f6:35:8b:89:a8:56:a8:f5:94:03:
         13:5a:0e:34:ca:0b:2f:48:aa:3f:ce:f0:1e:49:2e:ba:b8:e8:
         bd:d7:99:29:ff:74:d5:2a:f1:eb:1b:08:56:38:1e:3b:19:2c:
         34:fe:04:0e:60:a8:89:51:65:a7:8f:92:d5:3a:1a:aa:43:32:
         20:40:80:c0:8f:ae:45:88:2c:66:d1:92:53:a1:27:40:61:a4:
         b7:fe:86:f0:72:82:09:43:d8:59:df:1a:a9:a7:37:e6:db:e4:
         0a:08:92:f9:c6:1a:30:80:c5:24:95:ff:ea:8c:7a:29:29:0f:
         5d:d5:cd:99:1e:e0:b5:d5:76:8d:97:cc:29:d8:5d:9f:a1:00:
         47:40:44:7f:a2:8f:70:bc:77:db:45:5b:35:64:df:9d:03:fd:
         83:cb:65:59:e3:ba:b2:59:31:10:81:0c:bc:94:38:ac:30:76:
         91:12:71:89:f0:a1:50:a6:51:07:26:9f:28:67:1b:ba:eb:a6:
         53:80:0f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:48:04 2025 by rpki-client