Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e7f6b8d9-0ae8-3cca-9e01-b79fe90db49a.roa
File:                     e7f6b8d9-0ae8-3cca-9e01-b79fe90db49a.roa (raw, json)
Hash identifier:          SzETIOAJVp65Gpp0+4qkmcU9ait8sLqBhw3Lq8BykQE=
Subject key identifier:   CB:30:7A:D6:41:A6:2D:72:AF:2E:60:F3:8A:12:D7:0A:8A:4E:74:7E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B92DD8B7714A9E33692C5D080
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e7f6b8d9-0ae8-3cca-9e01-b79fe90db49a.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     18779
IP address blocks:        172.252.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:8b:77:14:a9:e3:36:92:c5:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=edd4216c-e8c2-4a01-9fd4-20d78840304b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:59:17:63:d9:44:95:a9:0b:84:ae:6d:ac:f7:
                    ca:7f:7e:9b:f7:bd:2a:11:b8:23:0f:09:6e:bf:11:
                    5f:77:7f:34:d5:4a:08:a9:4c:00:4c:16:ff:7d:12:
                    60:cd:22:be:72:63:7a:f8:95:0d:71:c1:e5:85:8d:
                    ad:c7:1a:d2:2a:e9:67:4f:a9:ea:85:6c:a7:7d:2e:
                    d1:10:13:43:57:d5:09:9c:3e:a9:15:1f:d5:21:2c:
                    04:54:f4:41:bf:7f:88:52:23:bd:aa:d4:a8:67:0d:
                    77:04:be:a9:6a:b4:f2:5f:07:b2:29:4d:08:96:b4:
                    b2:af:57:78:87:30:d8:b1:dc:43:81:a1:06:6c:4a:
                    32:c8:09:c9:5d:a1:92:02:09:09:3c:44:3f:b3:f8:
                    71:b1:3c:15:5c:79:d8:62:5e:99:b8:e2:8e:a0:f6:
                    c6:30:69:11:13:8e:4c:28:b0:16:af:14:d1:b5:cc:
                    f6:29:57:cd:b0:1b:58:64:4a:14:2b:a9:75:0a:a8:
                    d5:6b:a6:20:a8:b5:3b:ea:85:fa:19:a4:8c:8a:c2:
                    f3:ad:97:40:3c:17:fb:01:58:98:ca:e1:f1:23:1a:
                    79:fa:8a:92:75:47:db:07:df:b2:85:5b:3b:bd:cf:
                    58:e4:13:25:93:13:c8:2c:f2:d0:15:d7:d5:9d:44:
                    72:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:30:7A:D6:41:A6:2D:72:AF:2E:60:F3:8A:12:D7:0A:8A:4E:74:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e7f6b8d9-0ae8-3cca-9e01-b79fe90db49a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:84:4f:29:0e:fd:87:eb:ff:e1:50:10:0c:2f:46:ad:cf:f1:
         37:04:d5:b3:37:f0:4b:82:86:e4:5b:38:3e:b7:b9:f1:01:48:
         7e:24:33:11:af:ac:61:4b:47:4b:52:9a:58:14:3a:c2:70:72:
         28:02:ed:49:e5:a2:cc:dd:25:40:a7:25:67:c2:cc:fd:4d:48:
         d9:8e:be:93:23:6d:41:2f:81:6a:26:fa:4b:53:01:0c:e5:10:
         b4:c8:61:62:c1:02:3a:14:de:53:50:c1:bb:11:e3:10:b0:20:
         6a:35:ff:29:2f:d7:d0:a2:e4:31:65:40:ab:e6:48:b4:08:ec:
         60:b6:cc:43:96:6b:4d:13:32:8a:0e:ec:5d:16:68:ca:68:2c:
         d7:d2:6b:8f:61:c0:ba:58:87:d9:77:17:7d:fe:d2:82:6f:6a:
         e0:9b:55:2c:3f:70:41:a4:40:bb:1b:1c:f5:d7:5c:69:dc:c5:
         e0:79:ff:6c:65:11:94:74:1d:90:41:6b:20:2e:82:32:b6:64:
         8b:de:a3:86:9f:de:9e:92:7c:cb:49:e1:8d:27:3a:99:38:7f:
         df:3b:42:19:d4:8b:5a:11:2c:7e:18:59:e1:e3:de:1d:f8:2d:
         95:82:b5:9f:43:20:8a:12:7f:80:bd:5e:14:1a:17:f6:33:53:
         5a:16:89:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:48:13 2025 by rpki-client