Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3f13f9ad-325e-307d-91be-a8a77045c239.roa
File:                     3f13f9ad-325e-307d-91be-a8a77045c239.roa (raw, json)
Hash identifier:          sX2hoZn5Hvdqp8cLtca6ZLVcADabuWHXF4w8huxUpVI=
Subject key identifier:   B0:3D:02:F0:1E:2B:A1:06:F8:63:81:61:91:B4:DE:99:79:0F:00:71
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584ACB41238D38F61CCEB7D77600
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3f13f9ad-325e-307d-91be-a8a77045c239.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     25956
IP address blocks:        172.252.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:41:23:8d:38:f6:1c:ce:b7:d7:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=4bff008d-6003-452e-b4c6-cf7f676789ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:57:2b:d7:3a:99:61:29:9a:4d:ad:7e:00:4f:
                    41:ae:d7:fc:f9:66:61:a1:57:ab:93:ad:61:ea:53:
                    18:e0:f6:04:ba:28:58:db:44:d2:a3:70:e3:6e:9c:
                    cb:3c:89:86:48:60:27:05:10:01:71:0f:ea:4e:91:
                    27:9d:55:70:fd:b9:3c:f4:f0:fe:77:4e:95:21:ba:
                    c7:f5:cf:75:c8:09:03:3b:d8:41:6f:4a:48:ae:05:
                    b4:f4:2e:ab:1b:6f:c8:aa:32:32:eb:6e:31:24:a7:
                    b3:0d:8d:e3:f5:15:1d:57:d6:53:66:aa:54:59:ef:
                    df:c5:37:f5:db:0f:14:aa:c5:2a:a7:89:ef:3b:ac:
                    f5:43:df:49:84:15:eb:51:72:5a:6b:13:96:d0:11:
                    9d:a5:c2:81:b1:c3:86:c6:77:53:0b:7c:43:7c:19:
                    a7:44:fe:ec:f9:c3:3f:7a:09:b1:ab:e0:95:bc:56:
                    19:b4:f3:a6:08:2e:46:55:83:e7:1e:3d:4f:7d:2b:
                    97:06:45:7a:a4:d0:4f:0a:3e:f1:85:b6:ad:e4:8d:
                    d0:59:82:e5:09:80:3f:28:b4:46:18:cd:61:16:0d:
                    7e:92:4c:4d:22:f6:50:27:22:ab:99:42:42:b3:99:
                    9f:6d:10:50:26:57:82:e9:7c:0a:61:19:1b:76:d9:
                    74:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3D:02:F0:1E:2B:A1:06:F8:63:81:61:91:B4:DE:99:79:0F:00:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3f13f9ad-325e-307d-91be-a8a77045c239.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:c9:e5:bd:67:e8:57:d8:3f:30:fb:37:a8:ca:6c:2e:0c:19:
         fa:59:d8:86:03:5d:c4:98:3c:5d:83:4d:b1:63:7d:2f:43:5c:
         e9:89:ca:ce:6c:da:f3:85:ad:9e:b2:d1:de:9d:9f:06:ab:7d:
         2e:9e:5b:78:c7:d0:a7:5b:37:96:39:5f:f2:45:ce:a5:1c:2b:
         0f:41:93:49:bb:76:52:13:fa:be:c2:dd:a8:95:b6:f1:ca:c9:
         07:d1:43:03:3a:66:0a:fc:80:65:6e:8f:10:9c:6a:b2:ef:66:
         f8:e8:e3:c2:3d:7e:c0:86:1f:8d:91:b7:e1:68:b4:b7:8c:dc:
         67:f9:92:54:30:60:10:19:0c:d3:e1:88:87:87:19:65:14:f1:
         6a:77:22:3a:63:ad:bb:85:6e:41:7e:e8:57:71:d3:c5:a1:31:
         88:02:d2:ef:02:77:15:69:cc:26:4e:c7:ee:f9:da:5b:fc:92:
         54:e0:d8:b9:46:a8:bf:59:4e:66:db:76:88:a3:14:a6:77:10:
         f0:0c:ba:a1:25:a8:10:40:c3:7c:22:89:58:de:97:5f:29:49:
         b8:33:3c:fc:ec:41:dc:e8:77:cb:4f:62:3f:78:59:d8:56:24:
         b8:02:a9:89:be:93:b8:d9:e3:fa:20:ac:08:4b:ac:d3:f2:6c:
         6b:ae:9d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:19:07 2025 by rpki-client