Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/594d798a-ec1f-385c-a641-2488b815c49b.roa
File:                     594d798a-ec1f-385c-a641-2488b815c49b.roa (raw, json)
Hash identifier:          CpPnWUGYYRz1D6fkqU5WNPPLg0fvwt8MBEQxQU3byYw=
Subject key identifier:   44:87:EF:38:6E:3D:F9:1F:59:D3:F9:00:1D:C5:D3:E7:8D:23:AB:D9
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AC17B929C43989B3A846E1B40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/594d798a-ec1f-385c-a641-2488b815c49b.roa
Signing time:             Tue 05 Aug 2025 13:00:41 +0000
ROA not before:           Tue 05 Aug 2025 13:00:41 +0000
ROA not after:            Mon 03 Nov 2025 14:00:41 +0000
asID:                     149430
IP address blocks:        172.252.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c1:7b:92:9c:43:98:9b:3a:84:6e:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug  5 13:00:41 2025 GMT
            Not After : Nov  3 14:00:41 2025 GMT
        Subject: CN=57aec20e-6a25-41a3-9e7b-da4c02183cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:6e:1a:0e:1d:b7:de:cc:d1:8b:86:73:c3:bb:
                    88:7f:a9:c1:f7:44:51:76:17:19:8a:49:76:b8:49:
                    50:38:6e:6f:9a:fe:c1:78:0d:97:8e:c8:9a:39:8b:
                    a2:5e:4f:b9:eb:47:a6:42:96:9f:f8:bc:61:18:c9:
                    36:70:7b:f4:66:df:8d:fa:ff:45:6a:23:b1:26:00:
                    65:24:a7:42:b7:6e:07:9a:f8:87:f6:3c:e7:8f:3d:
                    19:8e:be:71:cd:35:f1:da:45:3c:f3:be:a0:3c:55:
                    0d:3b:35:ca:e9:dc:c7:3f:a6:87:fb:22:17:6c:e6:
                    8f:a3:90:5b:0f:1b:40:4d:3c:b1:56:84:a5:4c:07:
                    d9:48:c5:b8:6d:96:5f:4a:9d:8d:08:d0:ae:a2:08:
                    f9:90:f0:81:f4:a6:9f:c3:02:c4:b7:64:cd:0e:b8:
                    20:0a:ed:ce:2b:37:15:db:76:96:66:5c:b5:dd:cd:
                    9d:71:c5:7a:50:1c:7a:14:5a:3c:86:e0:ec:7d:af:
                    a2:c2:0e:fe:96:40:e3:b0:b6:ea:f1:b4:d8:76:bc:
                    b0:12:1c:7e:39:38:57:6f:5a:92:25:3b:05:19:f3:
                    2d:c5:d1:eb:7c:d1:b5:81:a3:09:36:d6:cd:88:31:
                    c0:49:67:b2:01:f4:cd:98:b7:69:6a:27:9f:63:44:
                    22:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:87:EF:38:6E:3D:F9:1F:59:D3:F9:00:1D:C5:D3:E7:8D:23:AB:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/594d798a-ec1f-385c-a641-2488b815c49b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:1f:e2:5b:71:0c:cb:ce:19:2f:a6:ac:b7:46:e5:33:58:be:
         30:c0:a0:68:09:d6:91:2a:e3:76:3b:1e:f0:5c:2f:b8:5f:72:
         23:50:b2:ad:ab:ea:89:77:94:16:d6:b5:15:41:0b:c4:0c:80:
         83:b3:b5:17:2e:0a:3f:3c:b4:ea:26:dc:0c:f3:33:b3:62:f5:
         31:1c:a7:41:ac:fe:01:fa:f4:96:33:39:e3:84:3d:e3:67:ed:
         98:80:ef:79:bb:ac:57:be:7f:ca:4f:4e:19:89:23:83:61:56:
         dd:bb:9c:62:b7:de:6e:10:9f:d8:dd:95:5a:12:90:cb:45:71:
         bc:77:06:c6:88:c2:a1:fe:37:b5:27:7b:05:4b:4f:f5:77:7c:
         db:3f:dd:93:1d:e4:d5:d7:17:e2:da:b4:a2:c1:3d:82:44:3c:
         9c:86:9c:e5:4a:ff:49:ed:d0:f0:51:62:84:45:d6:46:a0:12:
         47:0f:d1:81:3f:76:59:9c:ea:ae:51:6e:57:79:80:56:d3:7f:
         f9:35:e5:ab:6c:f4:99:fb:d8:8e:5b:7a:44:ed:84:e6:4f:8a:
         20:8f:58:04:93:2f:70:26:66:9c:b8:5f:c8:77:84:6b:3c:aa:
         1b:44:7e:ef:54:36:27:59:e2:41:0b:4e:03:fe:c6:78:60:06:
         6f:51:0b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:24:10 2025 by rpki-client