Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9f8866f0-a189-337f-bc3b-33307db8114d.roa
File:                     9f8866f0-a189-337f-bc3b-33307db8114d.roa (raw, json)
Hash identifier:          QwdnsdRhcvTJ0VNEEV7ZQmZjA8uBYYyiRNlXB/rs8k4=
Subject key identifier:   22:9A:9C:AE:CD:EE:FD:F9:32:E3:90:D5:38:47:E3:DF:AF:0D:7B:DA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AE8913E18F587610BBCA2CFC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9f8866f0-a189-337f-bc3b-33307db8114d.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     10557
IP address blocks:        142.252.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:3e:18:f5:87:61:0b:bc:a2:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=ff737c3b-8c5e-4454-90e1-00638ae2f92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:95:40:c7:01:4b:9a:e2:0e:08:68:33:52:83:
                    fe:e6:6c:80:bf:28:1e:ee:e8:5b:82:8e:26:5d:b2:
                    ca:b4:ec:5d:56:a3:4a:e5:78:54:4c:73:20:89:be:
                    6f:a3:3e:57:04:66:74:8f:a0:3e:91:03:a0:42:3d:
                    f6:09:75:26:67:f2:44:e6:76:1d:92:37:54:62:56:
                    c9:69:4b:34:ce:71:b5:14:af:c2:4f:5a:71:da:c6:
                    bf:51:20:db:22:21:f4:d6:df:39:06:a2:36:d6:43:
                    3b:48:e5:35:d2:8c:3b:41:ab:4b:4b:1c:6a:0d:77:
                    23:50:cf:b1:89:8c:74:9b:87:38:64:a2:2a:cc:5d:
                    53:cd:79:e5:fb:1a:cd:be:c8:ff:54:47:6d:52:69:
                    d2:d5:27:2e:f1:45:1c:1b:3c:57:16:ea:60:f2:aa:
                    e4:59:06:ba:21:e0:6d:64:e4:70:42:41:f5:2f:7d:
                    6d:f1:c8:e2:e2:7d:1c:36:88:e7:28:4f:40:e6:2f:
                    d1:1e:18:5d:5d:46:6c:e9:84:23:f7:50:27:18:91:
                    66:0c:07:ba:7d:4f:b9:dd:c1:c9:16:fe:58:3f:94:
                    ca:c9:e6:45:51:e9:73:c2:b9:b7:d5:bf:26:7a:fd:
                    6d:94:9f:4a:80:cc:6d:0b:44:4d:04:00:a8:72:7c:
                    76:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9A:9C:AE:CD:EE:FD:F9:32:E3:90:D5:38:47:E3:DF:AF:0D:7B:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9f8866f0-a189-337f-bc3b-33307db8114d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:00:39:d7:74:40:47:b2:40:ac:70:06:0b:b9:85:30:8d:90:
         fa:07:27:1d:32:e2:63:bf:44:c8:3c:83:a0:d5:e7:9d:6f:0b:
         80:32:d5:85:b2:30:2f:e2:68:48:e7:80:74:b4:da:cd:d3:fa:
         5d:39:c7:36:93:d8:35:61:05:58:82:4b:21:e8:4d:97:ee:a6:
         51:5c:eb:df:37:b9:9d:5b:32:9e:98:58:43:9c:8c:9d:d2:a9:
         7d:e4:db:73:35:ba:87:48:ff:b7:61:4a:a0:01:29:bb:1c:71:
         09:d2:0b:d1:6f:94:d3:f5:72:d0:4f:82:e2:c6:95:8d:57:dc:
         fc:18:d8:2e:cb:9b:47:7b:1e:ce:49:fc:3a:a5:8c:b0:0b:08:
         1b:6c:c0:2b:33:c6:dc:b1:05:18:5d:cb:a7:78:04:79:1f:9d:
         d7:f3:92:fb:81:97:15:fb:9c:40:26:d4:31:f6:5e:e4:08:72:
         cf:bf:dd:15:b3:f2:cf:2e:47:c2:7a:59:0a:6f:64:86:86:cc:
         b9:0a:a5:63:38:c0:46:ac:19:85:2a:63:ac:d2:0f:93:6d:d2:
         3c:d0:e5:c9:52:f1:42:e4:e5:08:15:b1:2a:10:bf:c8:9b:59:
         84:49:f9:1d:ac:f1:e9:46:a3:82:b9:8e:f0:bd:d0:fe:57:5c:
         50:72:bc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:49:56 2025 by rpki-client