Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8a60b27d-8ff7-394b-a6b6-09b3b7ef553f.roa
File:                     8a60b27d-8ff7-394b-a6b6-09b3b7ef553f.roa (raw, json)
Hash identifier:          NWBSMcr5LS35sMDVGDTWZR9yxWFO1r586Oz1Vejb+u8=
Subject key identifier:   89:75:0A:46:5D:8A:1B:AE:54:FF:E0:D9:1B:E2:0C:F7:77:DD:06:4D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B92DCE431F4539CB4408558C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8a60b27d-8ff7-394b-a6b6-09b3b7ef553f.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     18779
IP address blocks:        172.252.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:e4:31:f4:53:9c:b4:40:85:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=9666b892-2511-4163-bac3-cee7444abd6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:08:9e:4e:c5:84:5e:71:b0:46:b5:52:58:63:
                    b5:fd:76:e0:51:c8:e3:bd:62:2c:c8:83:1b:d4:63:
                    e9:2f:a2:c7:38:c3:4e:89:fb:06:15:6b:7a:18:d6:
                    41:61:f1:8b:8a:3f:a2:f5:d3:38:89:24:ac:f6:ac:
                    dd:54:38:a4:23:0f:0f:3a:23:b2:d4:ee:8f:2b:6b:
                    75:bb:98:b3:8c:75:9f:15:cd:04:5e:31:5d:e8:71:
                    d0:73:a0:88:e3:3e:85:fb:f8:3d:84:21:3a:c4:06:
                    a7:e3:e0:1b:26:86:2f:46:19:24:1f:cf:54:b5:03:
                    67:f6:27:ad:3c:e8:e4:4f:fe:f9:ea:69:ce:83:7f:
                    86:ec:a2:e5:15:d8:e4:e8:c5:72:d5:6f:b6:67:30:
                    95:0c:be:cc:32:57:83:61:56:d5:d0:2d:cc:a3:cd:
                    3e:c6:97:3b:4c:37:be:5b:7f:93:eb:46:3e:4b:40:
                    16:73:88:09:eb:ee:00:be:11:8c:c5:ec:7c:45:6d:
                    bb:a1:03:2d:b1:e3:0d:c6:39:89:ae:5b:f5:29:68:
                    1a:44:9f:cf:dd:1b:e7:49:8b:b7:14:63:6e:08:00:
                    6f:39:c7:26:5d:c0:20:df:11:63:2b:74:96:26:cb:
                    eb:1d:ab:98:9a:71:50:ea:ae:d4:46:78:bc:0a:27:
                    57:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:75:0A:46:5D:8A:1B:AE:54:FF:E0:D9:1B:E2:0C:F7:77:DD:06:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8a60b27d-8ff7-394b-a6b6-09b3b7ef553f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:4b:ed:43:6d:30:fb:e5:c1:3d:8f:46:ab:d9:02:98:4a:7e:
         66:42:8a:9e:1a:8f:41:77:b5:51:8b:f0:bf:1a:ee:6b:a0:51:
         fb:0c:a5:bc:10:d3:37:76:c8:32:12:b5:3a:92:5f:e2:f1:d9:
         82:89:d6:8c:b4:91:88:99:e4:e9:45:ee:c4:25:75:71:4d:ff:
         18:9b:b8:31:c1:d0:ff:ff:4b:e7:9d:bd:e5:ca:aa:57:95:b3:
         2e:af:7c:70:8f:9e:ad:78:6f:fd:40:5b:3c:06:e8:65:a5:a3:
         fd:a1:74:c8:0d:83:73:d3:e5:3c:bb:1a:86:cb:18:59:9a:54:
         ab:3a:66:9a:23:0e:ff:9d:36:da:b4:70:af:a2:29:a9:da:7a:
         0a:ef:d8:68:f8:08:ed:28:2b:f1:b3:e8:1f:95:84:21:16:5b:
         0e:23:e6:21:28:3c:25:96:5d:0a:56:72:10:38:4a:77:d0:13:
         d3:1b:29:ad:f2:d1:63:55:40:e0:58:34:14:33:1a:a3:b0:bd:
         73:71:96:58:5b:33:06:08:28:64:43:a7:cb:a1:fd:3f:03:58:
         ad:86:76:c3:0e:a3:1b:ef:8c:b4:28:4f:a6:d4:ec:7e:7a:70:
         04:09:d1:07:b4:07:9e:e5:00:d9:db:ac:06:0e:11:32:b1:2b:
         42:9d:5a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:48:16 2025 by rpki-client