Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/39158e08-933b-3939-87e4-f20d7a3d74c1.roa
File:                     39158e08-933b-3939-87e4-f20d7a3d74c1.roa (raw, json)
Hash identifier:          cYL3ZXs+EkamowmVFmHmvJc65NkOatBSyrH9BhzTmuk=
Subject key identifier:   EE:A7:C3:B0:81:70:CE:7F:C3:50:98:35:0B:E2:FE:5D:F6:87:4C:CA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A43DB0C99DCA9543DBE451380
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/39158e08-933b-3939-87e4-f20d7a3d74c1.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     400536
IP address blocks:        172.252.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:0c:99:dc:a9:54:3d:be:45:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=1546a449-6e6a-4bf8-a987-a8d0e991b177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:11:4c:f1:77:b5:c1:98:90:3e:2b:e0:50:09:
                    2f:a4:0b:69:c0:34:72:a3:94:6e:5d:c2:5c:eb:54:
                    74:9d:f9:01:18:09:e6:7c:1e:3e:f3:e5:1d:35:b7:
                    b1:2d:41:40:6d:72:a9:89:84:9a:22:e6:6b:a9:b3:
                    58:b5:a7:47:91:15:0c:9a:bc:50:23:6b:eb:d3:d8:
                    c4:a7:0f:89:31:ab:fb:0a:65:39:62:68:67:93:1d:
                    11:97:47:6e:9c:20:0c:2b:ac:35:97:82:b1:ec:61:
                    f3:38:90:e6:92:1e:ac:7e:83:8b:17:ee:f3:f4:37:
                    dd:12:33:ae:dc:89:84:6e:8e:fa:cb:da:18:fa:e6:
                    de:35:39:91:7f:36:4d:f2:1c:1b:3f:aa:de:c6:f1:
                    cf:44:6f:52:7d:a4:57:13:29:87:00:c3:31:7a:3e:
                    df:4b:b1:a9:c9:8a:bd:e1:09:a9:93:c3:7a:3a:83:
                    0f:d8:65:78:ba:95:e0:ed:d5:c9:d7:1e:5e:02:90:
                    b6:63:a6:67:1f:f8:ae:b2:5c:27:c7:4b:ec:40:6a:
                    44:e8:f2:88:2c:c9:1f:2c:26:55:b9:ac:a6:8e:c1:
                    da:bc:ae:dc:b4:ea:b6:6f:20:ea:b6:64:a2:04:ab:
                    83:5d:30:ef:1e:e2:60:e4:86:aa:e3:f4:d1:29:19:
                    5a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A7:C3:B0:81:70:CE:7F:C3:50:98:35:0B:E2:FE:5D:F6:87:4C:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/39158e08-933b-3939-87e4-f20d7a3d74c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:ba:aa:30:8e:9e:2f:0a:39:83:16:90:6f:ee:93:f4:3b:c3:
         df:6f:cc:6b:0a:bf:94:52:4c:b1:d3:5f:c1:0e:a4:f5:65:d9:
         f7:f8:49:79:34:8d:63:41:d8:e2:48:08:04:6e:f6:5b:8e:27:
         29:1e:a4:2b:06:f4:e6:ac:a9:f2:a6:83:3b:7a:4b:ad:8b:be:
         78:d3:2f:dc:c5:b8:83:4e:0f:54:77:a1:db:a9:bf:61:50:ee:
         32:1c:b5:98:70:21:ee:03:7d:9e:ec:e1:4f:6a:70:96:54:7f:
         85:46:64:c7:a9:50:26:98:67:ac:c5:2c:a7:67:d3:47:15:0f:
         a5:e8:a0:be:47:c3:93:40:01:23:4c:8b:7b:a5:ed:49:51:5e:
         04:f6:8f:9a:b3:8c:0a:82:1b:3b:0a:f5:9b:98:1b:e4:a7:c3:
         41:68:8d:27:9f:e4:2f:3c:7b:7e:35:f8:a3:57:6f:9c:b5:c4:
         b0:e6:3f:75:0a:dc:da:90:23:28:8e:0e:f0:d0:3f:29:3e:14:
         a5:7c:51:cd:42:fa:03:fb:75:f2:aa:0d:52:40:26:a0:c7:6a:
         ed:4a:4f:02:5e:c5:f8:f5:c9:00:c6:a1:11:14:a0:03:99:2f:
         28:b4:8f:55:23:a2:3a:5d:53:2c:27:ed:ed:ba:45:43:6b:d4:
         ed:2e:cd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:27:53 2025 by rpki-client