Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/526770e9-3ca9-312b-9d8a-25dbd147c8ad.roa
File:                     526770e9-3ca9-312b-9d8a-25dbd147c8ad.roa (raw, json)
Hash identifier:          QorSYLSpJI2ZejYgErrxX50RIn9ehzLUgjZ8bj+aYSs=
Subject key identifier:   69:76:71:7A:63:ED:4B:7E:F3:5F:DB:73:A0:75:C9:6C:02:FB:57:44
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AD23C39EAE7848F2AF404DC00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/526770e9-3ca9-312b-9d8a-25dbd147c8ad.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     44477
IP address blocks:        192.177.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:39:ea:e7:84:8f:2a:f4:04:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=6aa8c1ce-995e-49c8-be80-09199ffec40b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6f:61:24:e7:67:5f:ec:50:46:81:27:34:ec:
                    f4:5e:c2:e6:e3:b4:2f:c4:36:0c:a7:91:1c:ae:cd:
                    99:15:af:8d:fd:0f:61:59:65:60:b6:2a:da:c7:23:
                    ef:f4:01:62:8f:ca:de:34:27:3a:84:3b:47:4a:06:
                    7f:c3:7f:38:5f:57:dc:cd:58:f7:9b:17:f7:07:e5:
                    d4:7e:83:68:62:35:e9:a2:3b:14:17:45:ab:c1:85:
                    a6:27:7a:91:aa:d6:11:28:e9:7e:72:be:24:05:48:
                    07:88:c0:df:d2:44:14:eb:60:5f:ca:a7:da:1a:34:
                    07:d0:a1:f2:be:c9:dc:d5:75:0e:68:d0:6b:6b:1f:
                    5a:cb:e6:97:14:d4:c8:1a:45:ed:ec:90:b9:65:88:
                    68:85:17:1a:b6:06:bf:bb:2a:7f:fc:cf:4f:d1:69:
                    5e:c8:0a:fb:fd:ee:66:7a:4f:27:e2:88:1f:4b:42:
                    91:ed:86:f9:7e:17:fa:81:c5:f2:8d:67:7b:d9:18:
                    26:67:37:18:24:db:5a:17:67:fc:45:42:1e:b6:ba:
                    38:a2:d7:77:d2:65:e0:52:67:57:6c:95:f2:14:98:
                    df:85:15:a2:44:e8:7a:f3:85:cb:b6:f6:de:3f:e0:
                    18:b3:df:ea:a7:ee:44:e7:81:dd:99:e0:a1:6b:1c:
                    5d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:76:71:7A:63:ED:4B:7E:F3:5F:DB:73:A0:75:C9:6C:02:FB:57:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/526770e9-3ca9-312b-9d8a-25dbd147c8ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:80:10:49:d5:42:7a:ad:f1:96:b8:08:5b:29:45:30:49:67:
         5a:b2:42:8a:3d:e9:93:37:e4:61:5d:ec:31:eb:19:db:c9:21:
         11:93:2a:16:36:1f:e7:66:a1:70:61:94:95:ff:aa:cb:4f:c8:
         e0:a9:4e:37:2b:ba:7c:6f:b9:c3:1d:e5:d6:01:25:74:01:20:
         bd:0c:e7:d0:47:f5:bb:12:0f:28:e3:d2:89:eb:f0:96:54:47:
         df:a8:6f:e2:e0:e4:1d:db:37:fd:70:74:da:00:6a:06:47:08:
         75:24:58:6e:94:5c:06:12:19:29:3a:bd:10:c0:b1:ec:cb:2e:
         e7:a7:65:97:40:84:de:44:93:8a:d2:5a:4c:32:94:1a:1f:66:
         97:2f:bc:b2:01:d9:3e:75:cd:ae:3b:2e:25:72:ea:e4:29:06:
         b4:9a:d0:02:8c:01:60:d1:71:30:f5:e7:7c:4c:1d:65:5c:fc:
         3f:0f:41:c4:3a:cb:96:d6:b1:78:5c:1e:71:34:49:94:1f:b8:
         4b:c0:e7:3d:78:ab:dc:9d:6a:31:b7:2a:21:46:a6:b7:8c:c3:
         aa:98:08:06:79:00:03:2d:81:9c:a4:f0:9c:21:92:02:4e:7a:
         51:e5:ec:4f:ae:26:e6:4f:78:48:bc:7e:28:58:df:e9:a8:e4:
         d5:34:c8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:24:52 2025 by rpki-client