Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cc7eca25-aa97-3521-86c5-4a2283d4b069.roa
File:                     cc7eca25-aa97-3521-86c5-4a2283d4b069.roa (raw, json)
Hash identifier:          Yvqw9oRjAKHOfcVtVMcDOKbntyL3JIVLI7xqWaP96KE=
Subject key identifier:   51:8D:A1:69:5B:0F:90:4A:74:6A:44:50:6D:5E:B1:23:EE:56:D4:DD
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D237A3449B9F9AF03FEDB3C00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cc7eca25-aa97-3521-86c5-4a2283d4b069.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     6939
IP address blocks:        172.252.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:34:49:b9:f9:af:03:fe:db:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=8d767d1f-5905-4525-a1c0-862f4239cd0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:41:76:7a:53:32:a7:82:5c:52:8a:67:21:d1:
                    08:39:2e:8c:4d:4b:84:33:01:3b:fb:40:ae:c3:1d:
                    52:7f:d6:c2:53:48:10:60:41:b2:4f:a7:b0:19:55:
                    09:1d:64:a4:ee:be:14:84:6b:ed:cf:b7:66:1e:c3:
                    85:1b:a8:b6:91:e9:c9:4a:28:ef:30:1e:40:07:e7:
                    18:32:2d:bb:0e:e6:03:37:7a:a5:f7:f6:ef:e8:99:
                    12:9b:b4:09:57:e6:37:ba:03:ad:6b:08:bf:d5:ef:
                    c9:64:05:34:25:10:39:c5:6f:40:1d:be:ae:4d:cb:
                    34:5b:e7:a4:75:21:72:5d:22:ce:bd:26:82:86:da:
                    7a:84:b5:52:a3:ff:ce:51:5c:2e:f3:b6:03:22:f4:
                    05:c2:35:b1:90:47:e8:4d:3a:0c:63:f5:00:5b:10:
                    d8:4e:c0:79:26:33:70:57:f2:b4:3c:f3:a1:15:32:
                    f7:69:c0:8d:c0:45:ed:db:05:a0:e0:0a:eb:fe:b3:
                    3d:62:a2:7b:f7:f1:9a:38:c8:4c:30:dc:d9:97:3b:
                    57:94:c7:8d:3d:86:19:1f:6a:34:3b:3c:dd:ed:1d:
                    f5:04:bb:1e:38:a3:cc:20:cc:49:82:89:35:33:ce:
                    57:de:dc:2d:50:66:ea:e8:7e:63:22:aa:54:ca:79:
                    ed:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8D:A1:69:5B:0F:90:4A:74:6A:44:50:6D:5E:B1:23:EE:56:D4:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cc7eca25-aa97-3521-86c5-4a2283d4b069.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:84:c5:93:4d:c8:7b:9a:ce:71:6b:44:5e:40:62:37:64:df:
         e3:09:d9:a4:92:43:60:26:26:db:6d:0c:37:07:a0:70:54:e4:
         3d:51:6e:ac:09:f3:c4:21:0b:87:67:db:13:3c:fe:7d:26:98:
         0b:4e:7e:19:5d:ee:65:0d:3d:2e:26:9d:b8:4e:ef:07:f4:46:
         a2:70:99:f6:a3:71:09:53:8d:b5:85:37:af:6f:37:7b:68:dd:
         d8:f5:08:61:9c:aa:06:37:a1:d2:20:a7:92:29:30:1b:6e:06:
         7c:88:54:96:14:93:7c:ea:4a:69:bd:e2:61:a0:08:f6:bf:6d:
         a0:04:50:34:ee:c6:96:f6:8f:5c:8d:17:83:a5:13:d0:fc:b9:
         8b:75:54:20:3a:5f:d8:15:7d:ce:a7:96:44:94:57:5e:da:b4:
         b0:70:75:58:24:2d:22:47:50:bf:42:81:87:69:05:73:9c:43:
         02:44:12:77:43:b2:f5:50:d3:d4:27:d3:ea:59:65:c2:fa:9b:
         2c:d2:89:35:f4:39:16:dd:b1:3e:cd:41:81:04:c7:17:0f:5d:
         02:cf:10:b7:7f:a3:70:9f:0b:fd:f6:57:fe:9c:28:35:d9:0a:
         2a:9b:bf:fa:16:80:ea:c3:17:20:3e:15:f4:19:f4:b6:05:75:
         8a:df:12:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:37:06 2026 by rpki-client