Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/66e9636a-301b-3271-a014-e5f87e8d1c15.roa
File:                     66e9636a-301b-3271-a014-e5f87e8d1c15.roa (raw, json)
Hash identifier:          knuX/3zu1E3xxXYzet9U5pLh9VknPvEiCArHt+S2nEM=
Subject key identifier:   D2:B8:96:34:CF:B3:D5:67:BA:E4:71:3A:DC:B5:88:3C:8E:C2:69:22
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A4F1FEF20F051E8A8F8C1F6C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/66e9636a-301b-3271-a014-e5f87e8d1c15.roa
Signing time:             Wed 25 Jun 2025 13:53:58 +0000
ROA not before:           Wed 25 Jun 2025 13:53:58 +0000
ROA not after:            Tue 23 Sep 2025 13:53:58 +0000
asID:                     152868
IP address blocks:        172.252.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:1f:ef:20:f0:51:e8:a8:f8:c1:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 25 13:53:58 2025 GMT
            Not After : Sep 23 13:53:58 2025 GMT
        Subject: CN=bb0945e5-93eb-4c2d-8d90-4ff9862a2145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5d:b3:40:75:59:83:f1:f9:8e:bf:f6:76:9a:
                    f9:51:a9:89:33:98:4f:7d:c2:59:8c:be:ff:2d:4c:
                    1e:79:78:a0:06:ac:a8:02:a2:2a:2f:bd:5c:0d:4a:
                    d9:b7:5d:ad:d9:76:91:9f:fd:4a:a9:d1:3c:aa:1c:
                    66:9d:61:e6:bb:12:b3:95:8f:e6:23:9a:c9:b9:ce:
                    d6:37:b1:44:37:9c:b0:ba:d4:59:11:92:68:e3:f8:
                    47:79:2a:05:5d:31:7d:55:6f:b5:b3:29:ba:b3:8e:
                    d0:c2:a1:07:78:0e:a0:e5:a9:6c:ab:76:d8:f6:e5:
                    6b:cf:72:7a:0a:77:d3:51:22:65:27:02:3a:6c:30:
                    0c:66:fe:d7:9f:16:ee:ed:68:0b:07:6f:f3:63:36:
                    2a:3a:9c:3d:c5:be:08:fb:23:fa:65:2e:1b:1f:0b:
                    89:bd:57:15:82:84:d0:1d:2a:75:ce:a2:9d:10:9c:
                    1d:a4:1d:31:92:c3:de:fd:2c:ca:70:b2:e4:c1:5e:
                    5c:fe:aa:5e:37:ba:a9:9d:47:aa:7d:c9:35:b6:d1:
                    56:91:e8:14:ae:ef:a7:db:ea:a0:68:67:23:fd:d8:
                    99:cc:5c:b8:1b:ff:c0:96:1f:db:04:bd:14:6a:58:
                    c3:9f:2b:22:30:21:50:ae:2a:6c:25:2a:fd:fd:5b:
                    dc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B8:96:34:CF:B3:D5:67:BA:E4:71:3A:DC:B5:88:3C:8E:C2:69:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/66e9636a-301b-3271-a014-e5f87e8d1c15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:88:07:d0:2c:a6:55:36:bb:df:fd:a2:1a:cd:41:22:8f:b9:
         62:f0:6f:80:e9:b5:bb:be:8c:1f:aa:1b:75:ea:bf:59:d3:aa:
         8f:2d:df:78:d3:46:ff:84:95:4c:d6:18:dd:a6:29:b2:b3:9b:
         c5:0c:65:95:5b:5c:28:25:bd:3d:96:90:0e:49:d0:de:85:05:
         6d:f7:38:f6:9c:1d:9b:53:0e:c0:43:09:91:6c:2d:19:2f:87:
         25:cf:c1:e7:3a:85:d4:ff:78:ce:96:12:b7:78:04:71:7e:0e:
         b4:72:be:cf:08:c5:0d:e0:de:47:fe:5e:ba:b5:65:3e:89:05:
         ab:8a:fc:5b:bf:b1:24:73:ea:43:99:e9:5a:84:10:61:d9:9c:
         e6:9a:57:c2:19:a3:ee:33:2a:2c:e2:f2:45:bf:a9:17:98:41:
         a8:6e:62:00:34:79:fa:1d:26:cc:c0:95:c2:14:4a:f9:ed:3f:
         72:43:83:72:49:e1:ed:43:9b:b7:aa:00:2f:63:4c:c4:c8:e8:
         7f:ff:36:5a:a3:d1:98:db:4a:03:a9:f2:82:34:bd:6c:66:1e:
         fa:55:f4:38:e3:9d:b6:4b:84:06:c3:58:58:26:4f:b1:42:05:
         2c:4a:e8:d6:18:a0:7e:ee:6b:a9:60:9b:0d:b6:17:39:39:ad:
         f9:50:d6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 05:49:58 2025 by rpki-client