Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a/41b9a725-821e-36d0-a436-0aaa20644a23.roa
File:                     41b9a725-821e-36d0-a436-0aaa20644a23.roa (raw, json)
Hash identifier:          DPw/AXhGGRHVy+PEs2CiMu5BzMyYW1KvIEONeVe5+no=
Subject key identifier:   36:3D:0A:0C:14:76:02:CD:60:3E:52:21:68:9C:CA:B5:0D:33:C6:73
Certificate issuer:       /CN=4c077b20-9311-4e07-96bf-a5c414450c8a
Certificate serial:       010D0C9F4328584AE1971D7AA6E076BE68E01380
Authority key identifier: 15:2A:AA:09:98:F4:80:7A:1F:8E:91:6E:6A:D6:8A:1E:0D:D1:3F:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a/41b9a725-821e-36d0-a436-0aaa20644a23.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     852
IP address blocks:        142.52.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a/4c077b20-9311-4e07-96bf-a5c414450c8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a/4c077b20-9311-4e07-96bf-a5c414450c8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:1d:7a:a6:e0:76:be:68:e0:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c077b20-9311-4e07-96bf-a5c414450c8a
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=72dd1fa6-d2fc-4807-9b13-721ae162a4d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:15:69:50:a2:e5:d1:c1:71:fb:e7:92:c9:db:
                    52:42:93:41:c8:20:93:78:48:42:70:0d:67:3c:24:
                    ea:2f:39:5c:b3:ca:25:5e:40:13:9e:8f:3d:5e:0f:
                    89:0d:25:37:f3:8c:00:97:d5:7a:4b:3f:26:e9:3f:
                    08:bb:65:ad:86:ec:8e:90:85:9d:4a:bc:d1:b8:48:
                    dc:d8:1a:a5:77:53:93:7c:d9:31:e8:b3:5f:39:a6:
                    32:d7:9d:8a:08:8a:ac:a2:c5:81:b4:c3:a3:b8:80:
                    b7:dc:f8:e6:df:e9:aa:3e:57:dd:40:ea:72:6d:5b:
                    9f:5b:b7:3f:8c:fa:7c:1a:02:78:6f:63:a1:62:87:
                    44:31:48:17:0c:d7:46:a1:7a:42:eb:bd:3b:e0:ab:
                    57:5f:0f:23:84:9b:0b:3d:43:49:c9:71:2f:c6:b9:
                    86:7d:24:c2:08:15:3a:71:9c:25:29:55:0b:6e:c3:
                    8b:33:ef:a3:29:05:33:a9:14:fa:c4:2b:39:97:26:
                    ed:dd:ab:e6:48:7a:f5:af:a2:7c:8b:6e:77:dd:18:
                    01:71:fc:65:44:aa:ed:a1:68:c9:a1:1b:68:43:35:
                    0f:80:3a:79:31:5a:48:1e:47:7f:ce:a8:7c:13:02:
                    ce:35:fe:9f:35:47:ce:4f:31:6f:73:cc:b7:38:58:
                    ff:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3D:0A:0C:14:76:02:CD:60:3E:52:21:68:9C:CA:B5:0D:33:C6:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a/41b9a725-821e-36d0-a436-0aaa20644a23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a/4c077b20-9311-4e07-96bf-a5c414450c8a.crl

            X509v3 Authority Key Identifier:
                keyid:15:2A:AA:09:98:F4:80:7A:1F:8E:91:6E:6A:D6:8A:1E:0D:D1:3F:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.52.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:3c:d4:dc:db:3a:c3:ff:2e:17:d5:08:1d:dc:6b:64:0f:42:
         ef:01:29:5b:f0:81:48:e0:82:a7:32:96:f0:d8:7a:c3:d1:73:
         60:c3:7c:02:31:d2:a3:50:63:93:14:27:7f:fb:7e:6e:cb:e0:
         bc:d4:90:4a:e3:e5:1f:f6:91:d4:ee:44:1f:8e:58:7e:68:b4:
         3d:ff:28:5f:de:09:2f:e5:93:05:2f:49:88:7f:9a:2e:ea:10:
         73:05:36:5d:aa:b4:6f:22:22:8f:05:3f:3e:e3:38:fc:12:e6:
         e7:21:88:eb:91:5d:6e:aa:dc:cd:4b:02:6a:7a:a2:ed:7b:9e:
         c4:d6:71:69:20:b2:dd:72:a2:8e:f5:3d:fb:e6:ba:1a:ce:46:
         5f:d8:49:ec:09:a2:a0:6b:ef:9e:bc:3b:d5:53:a7:48:41:f7:
         ac:bb:d8:11:ab:ab:5b:c2:8d:73:9a:e7:57:32:a9:9c:10:66:
         09:dc:5a:18:06:59:81:74:26:9b:61:2a:4a:88:76:7c:db:e9:
         f0:b2:90:32:22:a2:2e:d7:7e:f9:b9:10:90:ca:ad:c8:3d:df:
         65:63:6f:41:47:9f:0c:7e:2e:dc:94:75:08:a9:5f:8d:45:62:
         56:72:01:27:f1:34:b7:8e:bd:3b:ee:4b:a1:28:db:18:25:30:
         06:48:a0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:24:31 2025 by rpki-client