Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a/79302624-3a51-37c1-9c17-2d2e9c4c8388.roa
File:                     79302624-3a51-37c1-9c17-2d2e9c4c8388.roa (raw, json)
Hash identifier:          aAMy/RJZhuFef8dGn5tmAtWjrfNdwpqLjq6erebCri8=
Subject key identifier:   3C:A6:A8:9E:E6:D3:FC:C4:0D:7B:66:B3:A9:82:A8:BF:DD:EF:CD:47
Certificate issuer:       /CN=4c077b20-9311-4e07-96bf-a5c414450c8a
Certificate serial:       010D0C9F4328584ACE0BB05ADD9C7D899B0ED500
Authority key identifier: 15:2A:AA:09:98:F4:80:7A:1F:8E:91:6E:6A:D6:8A:1E:0D:D1:3F:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a/79302624-3a51-37c1-9c17-2d2e9c4c8388.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     852
IP address blocks:        142.52.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a/4c077b20-9311-4e07-96bf-a5c414450c8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a/4c077b20-9311-4e07-96bf-a5c414450c8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:b0:5a:dd:9c:7d:89:9b:0e:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c077b20-9311-4e07-96bf-a5c414450c8a
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=6648cbb0-31d4-4ca6-9e0f-306b57eba2a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:64:25:d0:96:ae:b1:72:f7:dd:f1:df:a9:5b:
                    86:d4:a4:90:d9:f2:52:69:b4:7e:a3:5a:dd:5e:cd:
                    0a:5c:b7:30:26:8e:b3:c3:82:87:ee:24:d1:a9:04:
                    bd:33:cd:3a:36:35:2b:9a:6e:f9:c5:02:65:9f:c9:
                    8d:fd:a6:5b:82:cc:86:9d:dc:7f:4b:f9:66:71:77:
                    c2:4e:31:ce:43:d2:a3:0d:6a:c8:5a:78:1d:56:cd:
                    65:72:6d:49:f6:31:b0:96:47:76:e8:8b:e2:f7:30:
                    bb:fd:48:ef:d0:c0:40:3e:e2:da:4c:56:2f:c8:79:
                    a2:2d:d0:27:7b:b3:42:fb:5a:06:00:14:eb:d4:d7:
                    18:73:fa:5c:86:72:ea:c4:1d:dc:2f:22:52:5b:c5:
                    bd:fd:ca:9b:0f:ed:9a:a8:a3:26:71:78:2f:d5:17:
                    ec:5a:83:ae:57:05:69:53:de:81:91:0d:4f:82:f3:
                    8c:6b:46:34:9e:ad:28:ec:e3:8a:2d:23:4b:05:70:
                    43:4c:4e:98:a1:ae:1d:5f:51:c2:99:05:44:b0:53:
                    c7:e5:cb:b2:a8:62:4d:44:c7:bd:f7:51:f8:c9:b8:
                    4a:34:36:1a:9c:0d:e9:87:02:ed:93:85:b2:62:65:
                    19:88:a2:a7:72:eb:45:9a:82:61:b6:9f:f3:55:2b:
                    34:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A6:A8:9E:E6:D3:FC:C4:0D:7B:66:B3:A9:82:A8:BF:DD:EF:CD:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a/79302624-3a51-37c1-9c17-2d2e9c4c8388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a/4c077b20-9311-4e07-96bf-a5c414450c8a.crl

            X509v3 Authority Key Identifier:
                keyid:15:2A:AA:09:98:F4:80:7A:1F:8E:91:6E:6A:D6:8A:1E:0D:D1:3F:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.52.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:5f:1b:c0:b4:3f:3a:de:84:b7:07:0f:63:9c:0f:29:1d:a4:
         8a:6a:74:91:e2:98:55:e1:bd:51:cf:c2:ed:70:f3:a1:93:79:
         c4:79:93:b5:79:37:35:d7:ee:8a:6b:cd:1d:8a:89:68:70:2d:
         a2:cd:c7:db:a4:97:6a:23:83:84:84:67:22:cf:8a:23:3c:a9:
         a2:ed:9b:25:f3:c4:f6:aa:7b:1d:b5:f6:be:0b:b9:43:33:d6:
         5c:a5:24:b9:72:e2:43:7d:a9:5f:1a:6b:bb:f9:00:4f:84:c6:
         ce:f8:5e:6c:f2:de:6d:38:f1:8a:0e:17:5e:20:ea:b2:eb:84:
         63:a0:6b:d6:98:50:77:63:d2:d8:d6:e7:c7:11:57:59:d5:3d:
         5f:a4:74:e1:3f:e0:d5:59:75:a2:bc:c8:7d:60:42:c3:5d:48:
         f4:16:cf:ac:91:78:24:fd:9d:52:69:c0:e5:e2:e0:d8:a7:13:
         96:cb:7d:d3:82:f7:6d:8f:5b:f3:11:cf:ad:ec:b8:6a:fb:05:
         b1:8d:e4:6c:d4:9b:94:97:e6:55:8c:f5:a2:26:2b:10:7c:d9:
         20:91:ca:8c:29:7a:14:3b:28:39:e3:13:6c:eb:9f:54:d9:fa:
         04:93:0c:28:27:f5:97:82:e3:ce:8e:cf:e3:77:ab:61:1e:6a:
         85:a4:41:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:31:42 2025 by rpki-client