Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5294cae7-4281-38dc-8c30-badeef5b52cd.roa
File:                     5294cae7-4281-38dc-8c30-badeef5b52cd.roa (raw, json)
Hash identifier:          EV132BDTQG3yYRyYugqcTOmzDv4RZT9rSZiUNJoHHyk=
Subject key identifier:   E7:0B:56:AB:0F:96:98:CC:89:E5:C8:C0:02:EB:EE:D5:6B:D5:16:B9
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B5F377CBB832A025918396B00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5294cae7-4281-38dc-8c30-badeef5b52cd.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     18779
IP address blocks:        50.118.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:7c:bb:83:2a:02:59:18:39:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=cd825c83-940d-4b3c-a2b2-5e31e25686c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5c:bd:d8:c3:ad:83:8b:64:48:cc:ba:6e:a1:
                    f4:0a:ec:59:21:02:ee:a8:ab:df:80:3f:33:99:d9:
                    47:be:0e:62:bb:6f:1c:cf:f2:a5:11:6b:72:8d:c8:
                    b8:e7:7d:33:da:cf:c6:bf:7e:43:a1:0e:30:c5:5b:
                    d5:80:52:82:2d:a4:9a:b0:ef:fa:3a:b6:f9:6a:9c:
                    28:60:60:aa:95:6e:46:42:ff:b9:a8:97:4d:6c:b9:
                    8f:74:60:7c:54:1d:65:da:75:4c:83:b7:62:0b:f2:
                    0a:5f:b5:da:72:be:6f:db:c2:54:58:0d:0b:9f:79:
                    e1:de:fe:00:f3:1b:cc:ca:29:1b:fc:38:2f:db:f1:
                    d8:55:82:4e:9f:e3:33:bb:ed:83:91:2a:54:78:20:
                    4c:f8:1b:87:27:4e:ca:7d:87:b1:8e:dd:1f:9c:d2:
                    88:8b:82:28:ac:cd:39:4b:cc:96:7d:a1:66:da:4c:
                    3f:ce:cb:bf:a4:a4:17:36:b7:ad:80:8b:31:1d:f0:
                    23:5f:f5:bf:32:f5:19:15:28:f0:cf:df:0a:26:2d:
                    a1:c2:61:df:d3:de:03:82:c1:5d:45:ef:9d:fa:c9:
                    ea:e1:87:76:ca:b3:55:1b:64:89:08:98:0a:1f:ef:
                    29:a6:24:8b:01:f0:af:54:c6:2f:f2:85:3d:30:84:
                    d9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0B:56:AB:0F:96:98:CC:89:E5:C8:C0:02:EB:EE:D5:6B:D5:16:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5294cae7-4281-38dc-8c30-badeef5b52cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.118.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:09:9a:2b:34:8f:09:31:3a:c0:7c:27:17:b9:df:29:57:73:
         7b:51:9d:ed:76:bf:83:1b:e6:d4:f0:29:94:a1:f1:93:b3:7f:
         f8:47:f2:13:da:3d:9c:39:37:71:a9:e0:ef:81:0a:7c:a1:97:
         3b:9a:cf:79:ee:e9:c6:7f:50:e8:52:66:17:87:5e:1d:37:2f:
         ac:d7:b5:3a:96:dc:f5:f5:2e:26:3b:dd:b8:03:8c:a4:49:73:
         c6:ae:b2:34:6a:9a:51:cd:6b:0b:b4:a2:26:56:ba:f6:6f:5b:
         3c:62:f8:38:76:07:9a:c2:4b:f7:07:c6:9f:ee:12:05:cb:a9:
         d9:f0:7c:8f:da:d5:89:d4:c1:c0:22:ef:b3:c2:47:87:af:89:
         36:be:6a:0d:3d:59:ee:1a:11:fb:6a:b4:7c:3e:30:3e:e9:55:
         74:77:0d:e9:1e:7c:f4:6c:56:03:90:d2:c5:e5:f0:f1:65:d3:
         9a:72:ac:30:16:1f:21:35:e2:b3:1b:c5:e8:67:ac:bb:d9:aa:
         e6:a2:9f:c3:01:73:cd:43:90:6c:ab:fe:cc:99:da:08:31:b3:
         7f:04:44:88:78:f5:7a:ff:68:20:e9:0e:bf:24:eb:f2:63:d8:
         21:6a:dd:c5:57:bd:b3:99:69:b1:32:a0:b5:bf:71:ce:52:27:
         6d:0a:c1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:18:33 2025 by rpki-client