Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/24225c25-d23e-3bb0-b443-d48252658d11.roa
File:                     24225c25-d23e-3bb0-b443-d48252658d11.roa (raw, json)
Hash identifier:          1KeZwo7swc2DA1gmvkY3s25e3JDcUc0YvD0yyVQSU08=
Subject key identifier:   E8:BD:81:F3:C5:0B:12:49:3E:59:30:E9:EF:0A:5C:8B:12:50:7E:16
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AE9F66AC288C1B6217CD62740
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/24225c25-d23e-3bb0-b443-d48252658d11.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     400402
IP address blocks:        172.252.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:6a:c2:88:c1:b6:21:7c:d6:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=a534ef93-db5d-4e55-950d-0034cc9fb2b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:72:c6:da:de:a1:9f:33:28:2e:dc:30:aa:35:
                    f8:6f:ca:1f:44:56:41:e2:37:ef:2e:68:52:41:20:
                    62:22:12:db:ba:41:b4:65:ee:59:d7:f1:99:9d:e6:
                    c2:ab:16:64:64:24:66:27:22:49:2c:36:ad:4a:93:
                    b7:f2:ef:ee:fb:5b:8c:e0:fe:ff:11:3a:a0:6b:78:
                    0b:5e:b0:38:d7:40:17:78:a5:08:67:f7:5e:7b:5c:
                    ac:f3:3e:37:ca:1e:1c:e6:1a:40:8f:21:d6:12:df:
                    23:3f:01:0b:9f:a9:c6:dd:65:db:92:dd:50:fb:de:
                    86:9e:48:f3:c7:4a:a3:08:24:17:8d:de:9e:a0:e1:
                    30:e8:5b:e9:dc:e0:f4:d9:c5:8c:c7:41:6c:e5:1a:
                    b3:6f:6a:46:01:9d:44:18:34:d2:86:53:48:88:17:
                    b3:57:40:80:c0:1d:a4:1a:0d:ef:3a:11:7d:29:df:
                    c3:8d:05:58:76:c0:88:6b:c0:34:15:92:a7:da:96:
                    26:b3:68:26:fd:c8:0d:bc:61:dd:f2:6f:89:7d:ff:
                    89:24:24:c6:84:62:7b:de:89:59:b6:ff:ab:93:00:
                    88:02:b6:cc:ed:11:1c:88:75:f9:fa:90:1c:a9:00:
                    00:3e:8c:dd:6e:68:08:a7:36:62:13:14:25:bd:c0:
                    e8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BD:81:F3:C5:0B:12:49:3E:59:30:E9:EF:0A:5C:8B:12:50:7E:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/24225c25-d23e-3bb0-b443-d48252658d11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:7b:26:f8:31:a5:49:72:e4:84:d4:76:98:04:62:cc:a1:3c:
         f1:19:79:56:91:ad:47:c5:9e:05:d6:f2:a6:c2:ab:99:2d:95:
         fc:66:8a:0b:c1:24:9d:6f:96:25:35:6b:64:8a:3d:96:1e:2e:
         e9:c1:7b:b4:6a:f2:31:b9:37:ca:c8:71:c6:44:c6:f1:49:24:
         66:af:7d:11:85:ac:c3:25:1a:a0:b0:09:3d:5e:81:99:1f:f8:
         b4:5d:16:b7:63:c8:1d:fb:0c:22:a2:42:db:42:7d:65:d3:95:
         d5:0b:5e:e4:3c:96:b3:ed:28:48:cf:99:bd:41:67:71:01:61:
         4b:12:7f:4b:7e:ac:4a:ee:81:df:f2:9c:c4:17:ab:19:07:ce:
         c4:6e:fd:6e:d8:8c:e3:13:20:2a:8a:e4:aa:3b:7f:f0:c9:e2:
         93:ac:11:bb:54:54:bb:0e:9a:c5:4c:29:84:bd:29:1c:37:35:
         7f:17:b6:08:ff:46:ca:a6:a6:29:92:c8:04:7b:e6:d8:8a:ec:
         4a:9b:d9:63:33:25:ed:02:b2:bc:2e:86:47:bf:c4:1f:47:06:
         a3:8c:f2:84:30:dc:9f:fa:80:50:61:3c:23:c7:62:5a:b0:d1:
         8c:14:5f:f2:68:81:03:ef:ed:97:8c:83:cd:ca:c0:59:3d:f3:
         e6:d8:6b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:20:54 2025 by rpki-client