Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/25b1c232-4ff6-3aea-95e4-15efc8b69ce3.roa
File:                     25b1c232-4ff6-3aea-95e4-15efc8b69ce3.roa (raw, json)
Hash identifier:          b07GpSZsZDmLVNBiRkBiYJrfx0YQWc5sP9FPCYQHT+w=
Subject key identifier:   6B:DE:32:AB:86:4A:E5:58:A3:C1:A9:55:92:97:19:13:5B:11:37:F0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A07D545BE25F592CFA8B7CF40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/25b1c232-4ff6-3aea-95e4-15efc8b69ce3.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     5650
IP address blocks:        172.252.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:45:be:25:f5:92:cf:a8:b7:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=779dcb42-ddfe-4916-8266-62302e3b869f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:eb:c5:b7:67:68:5f:99:35:15:49:37:1f:42:
                    79:f6:13:44:84:43:73:26:2a:6f:58:96:51:d0:81:
                    99:da:4c:de:2f:d3:a6:56:88:96:1e:fa:50:a1:75:
                    17:45:1f:98:58:a7:a3:a8:26:31:e2:10:ba:e9:f9:
                    4a:bb:90:dc:0a:6f:56:63:07:ee:6b:72:98:8f:31:
                    39:ad:a8:06:b6:5c:0a:bc:3c:70:14:34:90:5b:b8:
                    6b:43:f4:d0:55:6b:26:9a:0e:57:9a:e6:1a:85:92:
                    ca:9c:ad:40:1e:be:12:bc:86:f3:5e:ed:83:3d:f5:
                    e3:7d:44:9b:7e:f1:68:43:6d:24:e7:84:db:fa:ed:
                    88:31:b8:3a:6b:c2:0a:de:4b:6e:ae:4c:54:f5:76:
                    5a:6d:a9:be:48:32:03:60:68:86:a1:5c:80:d9:36:
                    4f:30:38:86:1e:30:a5:9c:78:b8:9b:5a:37:7c:78:
                    34:71:20:64:fa:17:96:4c:3b:00:4d:5f:1f:52:c6:
                    c8:78:ce:89:d3:b1:5e:39:0a:3e:d5:70:c1:ff:6a:
                    84:13:98:f2:82:3c:2a:57:25:ee:45:e9:50:89:70:
                    17:3c:5a:9d:70:82:24:3e:a0:a0:f0:17:7a:65:60:
                    a4:fc:fb:a7:e7:3a:68:73:9b:5f:86:1b:12:04:d2:
                    94:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DE:32:AB:86:4A:E5:58:A3:C1:A9:55:92:97:19:13:5B:11:37:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/25b1c232-4ff6-3aea-95e4-15efc8b69ce3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:b4:1a:a1:f0:37:fe:31:b9:5e:86:4c:60:0b:88:ee:17:2d:
         f2:9e:9c:9e:08:e4:3b:2e:86:28:b3:c8:29:10:93:92:5c:21:
         d0:66:70:19:43:ba:7f:ed:a7:4b:9b:e9:24:8a:da:2c:65:f7:
         7c:36:c3:c3:4d:51:44:38:7a:76:25:ae:6a:e1:bf:b1:a8:00:
         95:43:5f:79:e6:0f:10:5a:94:e1:75:92:38:04:d1:36:d8:00:
         2a:2a:88:5d:2e:63:b9:91:43:61:fc:f8:ec:73:e8:e3:36:15:
         b6:22:1e:ae:6e:89:86:78:39:c7:6f:62:50:2c:3d:0b:9a:26:
         e8:6d:40:06:4a:f6:bc:d1:a6:98:d1:1e:7a:73:a9:b2:ef:a3:
         8c:5f:86:84:b1:db:26:e2:a3:c8:a8:52:78:91:56:0c:08:f9:
         46:90:88:db:d8:5e:0a:d3:b1:c1:71:1c:f7:58:ae:da:ba:2c:
         89:07:ff:48:e1:94:51:2f:b5:e1:90:48:04:54:f7:b3:c2:0d:
         aa:be:40:31:7e:2a:1c:1c:30:7e:63:e1:17:53:6d:05:57:d7:
         37:be:0b:68:2a:09:d9:c7:c1:92:5a:3c:70:98:a7:5e:30:26:
         23:c0:69:05:d0:d1:9f:3b:4f:5e:9b:fb:cd:ff:c3:f5:b7:16:
         65:e4:a6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:03:36 2025 by rpki-client