Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/919d603a-1188-3f03-b158-e5114ba7bb6e.roa
File:                     919d603a-1188-3f03-b158-e5114ba7bb6e.roa (raw, json)
Hash identifier:          2I5wksji/jqaivEGckJ4C4giwvRoA548Met4d8NsEW0=
Subject key identifier:   8E:70:8D:54:09:C1:33:BE:D4:4E:2A:B7:B4:0D:05:19:A4:D1:E4:A5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849D164FB0D4C7AE33F645D5A00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/919d603a-1188-3f03-b158-e5114ba7bb6e.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     18779
IP address blocks:        172.252.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:64:fb:0d:4c:7a:e3:3f:64:5d:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=d5a8da00-6a6b-4046-a593-f99aad132534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:19:09:1a:a2:7f:74:1d:ad:c4:1d:20:61:c0:
                    7d:56:22:b8:bf:0f:16:d4:84:77:2c:b7:3c:4a:fa:
                    c9:cc:6e:5a:77:84:57:c0:29:c1:0f:dd:41:44:6f:
                    7d:3e:39:b7:22:29:c7:d6:c5:15:70:9d:83:eb:4e:
                    e8:9f:ae:b8:09:d0:11:a3:2b:f8:3a:cb:7c:f5:c4:
                    18:2f:2b:33:7a:01:81:c0:31:b7:87:3a:d4:da:ce:
                    2c:1b:f2:c3:37:b0:f3:a5:69:2a:84:2a:81:3f:1d:
                    8d:61:85:d9:df:10:c2:6d:3f:5d:5d:80:43:26:d3:
                    9a:40:35:02:a1:2c:f4:be:58:19:a8:85:c9:e1:48:
                    84:3c:75:44:cc:00:e6:38:f3:97:fe:b6:4a:fc:f3:
                    31:16:69:32:4a:0b:d6:76:b8:83:e3:1a:2b:8f:c3:
                    07:bd:79:48:cc:00:52:26:e4:c6:09:ad:c1:7a:38:
                    30:a5:e3:b1:52:0a:86:52:28:46:22:92:89:00:1d:
                    6d:85:87:f6:0a:df:fa:5c:f1:77:61:00:d8:08:46:
                    ba:72:24:53:4e:21:65:62:8a:71:d6:f7:42:6f:17:
                    d3:80:86:c5:f7:c7:93:fd:ec:fb:7e:0e:6b:c2:80:
                    a4:d0:83:87:f8:69:9e:f2:ea:8e:5c:25:96:58:b5:
                    46:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:70:8D:54:09:C1:33:BE:D4:4E:2A:B7:B4:0D:05:19:A4:D1:E4:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/919d603a-1188-3f03-b158-e5114ba7bb6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:65:89:81:38:9d:c0:45:b8:81:bd:4d:39:64:ab:eb:ba:6a:
         45:e2:8a:a7:d9:ea:61:93:6d:bd:cf:f6:78:62:41:36:0b:f9:
         e9:91:97:62:e5:21:75:6f:f5:b4:ff:d2:01:c7:ac:b0:f4:b7:
         d9:60:8e:80:58:67:3c:cb:a3:9e:eb:7f:94:6f:37:6c:47:bd:
         e9:fa:19:0e:56:77:c0:bc:5c:5d:05:42:0b:dd:84:12:4d:cc:
         ad:ae:4a:af:0c:c9:bc:bb:a6:17:b9:5a:18:28:cf:ec:81:f6:
         64:b9:ad:52:e1:7e:a6:31:24:89:d5:11:af:ef:84:a4:7b:09:
         62:4a:9d:26:14:7a:a9:28:3d:99:45:4f:9a:8d:d2:bc:4c:79:
         5b:d3:cc:39:7a:01:0f:7d:c9:9c:28:8a:31:85:ba:a4:b0:54:
         9c:c6:10:55:d2:58:32:6f:4f:3a:e4:69:e0:e1:04:87:84:da:
         0d:22:3c:65:62:21:5d:26:9f:be:8c:b1:a2:f0:59:d7:6c:13:
         92:db:97:80:cb:f1:7d:32:8a:b9:44:46:9a:c5:ed:b5:fd:34:
         41:b5:c3:a1:2f:1e:27:73:b9:01:e8:38:e8:28:c1:6f:ae:ec:
         4e:07:73:7a:1d:86:78:b7:d5:74:1d:cd:aa:94:ec:6d:36:11:
         53:09:7f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:39:35 2025 by rpki-client