Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dc10bb05-40cd-314f-a1dc-6e1e12c4d236.roa
File:                     dc10bb05-40cd-314f-a1dc-6e1e12c4d236.roa (raw, json)
Hash identifier:          trUjf29ijOOU6NternTBj1skWmTvNp/gWDbq56FWntc=
Subject key identifier:   A3:29:F2:6B:70:B4:4E:56:F5:0A:D3:53:FA:4A:66:52:91:47:F1:F0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B92DD90EB86A41FC1B1793600
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dc10bb05-40cd-314f-a1dc-6e1e12c4d236.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     18779
IP address blocks:        172.252.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:90:eb:86:a4:1f:c1:b1:79:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=78363563-82e0-458c-b7ff-a3f8b934add6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:66:51:e4:da:47:4c:60:f8:c4:f2:03:6c:6a:
                    ea:b1:61:9a:fd:b7:d5:12:08:98:a4:93:46:01:f4:
                    a7:3e:ed:f4:c6:d8:d5:a3:1b:a8:f8:c8:a1:5f:ee:
                    a3:15:e3:ee:93:7b:d6:e0:c6:04:bf:19:0e:b6:1b:
                    d8:69:f7:cb:ac:c7:31:c3:87:e3:e5:95:a6:96:95:
                    23:4d:6d:8a:bd:39:fb:00:b7:b2:da:82:6d:71:53:
                    4e:05:4f:cc:86:36:1f:54:ab:73:65:a1:e3:78:1f:
                    08:37:29:cb:c1:41:4a:dc:28:bd:51:51:d8:85:6d:
                    a4:b3:51:dd:e9:05:54:8f:67:4e:d1:97:ed:17:89:
                    da:2a:0b:d1:c1:94:bc:0e:3a:28:95:09:44:53:ff:
                    45:57:cd:23:f1:87:45:68:96:6f:ed:32:5e:95:97:
                    49:d0:d8:42:27:74:21:cd:9a:79:0b:5e:ad:19:74:
                    87:49:11:24:fd:07:59:7b:37:86:21:02:ff:99:9f:
                    ce:22:20:43:de:4d:5f:29:b2:da:89:3a:91:cf:bf:
                    50:57:d3:10:82:60:49:2c:36:ea:ec:2a:cc:b6:f1:
                    13:9b:bd:43:4e:91:13:4f:7a:3c:17:2d:8e:e7:d6:
                    e1:97:0f:c5:85:f9:8b:eb:5c:0d:c0:24:68:1f:cf:
                    75:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:29:F2:6B:70:B4:4E:56:F5:0A:D3:53:FA:4A:66:52:91:47:F1:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dc10bb05-40cd-314f-a1dc-6e1e12c4d236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:8e:17:77:aa:4f:a6:26:34:f9:bc:ef:54:9e:c7:ec:d1:a7:
         74:3b:fe:34:05:6f:62:79:52:d4:dc:6a:30:d6:b5:da:9f:cd:
         16:9e:f9:62:15:f3:94:8b:7d:f7:fc:a6:ff:ff:bc:46:b0:91:
         50:95:49:55:47:0e:72:03:29:57:22:c4:fb:33:4e:f4:f9:43:
         a1:cf:6a:f7:5d:27:48:ec:a7:b8:c1:ce:ae:06:05:93:fb:5c:
         4a:66:d2:38:51:46:12:fd:20:74:8a:5f:e4:b3:b9:ad:8d:15:
         2f:4c:99:23:2a:26:1c:f4:ff:50:c6:e6:16:14:5d:80:e3:3b:
         e8:96:b7:ef:74:c6:d9:24:b8:c0:4b:19:2b:7e:f7:58:06:dd:
         0e:f3:55:35:cf:fe:a8:d4:fb:0b:fc:4b:81:6f:49:5c:8c:0a:
         52:64:f5:52:b2:f9:45:2f:37:b8:73:f1:7a:c5:cb:65:25:3c:
         0d:49:05:29:e0:d2:7a:18:ac:26:9b:55:b3:e6:3b:f1:79:68:
         1b:0f:2b:c2:57:9e:69:d6:a3:cd:73:26:7f:12:7d:0e:75:7c:
         31:dc:96:ae:13:25:79:2b:9f:e4:b9:06:29:97:5b:ed:95:a9:
         96:9b:c8:2d:3b:d5:c6:c3:df:d9:0e:0c:fb:e9:d5:02:3a:8f:
         6d:71:a2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:48:06 2025 by rpki-client