Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8c86455d-f13b-372e-b391-956d94bb7962.roa
File:                     8c86455d-f13b-372e-b391-956d94bb7962.roa (raw, json)
Hash identifier:          vcfxMAaNld/qSe3qGnZdQeIsI2QnBTw+B1Z8UAfq0FU=
Subject key identifier:   8B:17:8F:15:38:3E:33:2D:18:B7:FD:BA:03:8E:FB:DB:50:4B:51:4A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AE1971BF7949EC1EF8955AA00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8c86455d-f13b-372e-b391-956d94bb7962.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     401688
IP address blocks:        172.252.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:1b:f7:94:9e:c1:ef:89:55:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=cbbbf9e6-2553-414d-b172-a6c9c6690d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:53:d5:59:3f:23:e6:70:a4:f0:2d:9c:1a:46:
                    e9:b5:54:8f:e0:8f:ea:d7:a1:19:64:e8:a8:15:b5:
                    17:7e:b3:3d:a5:53:bc:13:d3:62:b2:ab:50:00:5c:
                    52:6e:bb:4b:78:71:7a:ad:89:1b:a0:f3:d2:2d:4e:
                    c9:d4:66:49:a9:81:85:73:c1:a2:0a:52:a7:81:7a:
                    82:69:b5:1c:65:96:a9:90:6e:71:31:f0:4a:b1:f5:
                    0c:e4:77:c1:f9:62:b7:6e:c0:40:cc:9d:fe:57:dc:
                    66:fc:2a:72:4d:fd:5a:61:cd:e6:d0:7c:fd:27:81:
                    34:92:91:13:fa:15:c4:f3:5d:d8:54:28:fc:d2:74:
                    e3:66:27:34:d8:47:80:8f:b9:79:e3:cc:f9:28:36:
                    a7:ea:ec:d2:e6:40:c2:0f:75:26:b5:5e:e8:58:c3:
                    6a:e8:b3:8c:40:79:00:56:3e:c2:79:f7:d8:fb:8e:
                    18:f1:d6:69:44:0b:86:a7:d2:f1:55:c2:4d:32:24:
                    48:3a:75:2d:cb:5a:22:f9:7c:31:85:62:99:c5:fe:
                    1a:3f:5e:f0:99:32:8d:e1:fb:ee:d1:51:c2:f6:5c:
                    7d:85:b5:a8:e9:df:b6:6c:37:79:f7:56:dc:18:08:
                    d1:cd:46:b2:ef:c5:1f:48:37:c3:7f:0c:9e:0d:1d:
                    bb:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:17:8F:15:38:3E:33:2D:18:B7:FD:BA:03:8E:FB:DB:50:4B:51:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8c86455d-f13b-372e-b391-956d94bb7962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:a7:76:6f:61:63:24:d6:a7:42:f7:13:4c:4a:1a:c5:39:59:
         a8:05:f9:39:92:cd:cd:82:d4:8d:57:7b:72:3a:68:8e:bb:a4:
         ac:31:ab:fc:4e:50:c9:88:eb:d5:fa:f7:42:6f:1b:3a:b8:9b:
         94:e0:b7:ee:5d:3e:91:76:47:a5:e6:a1:8c:ee:4c:b7:30:ab:
         bb:ab:ad:94:31:99:93:1b:22:bc:f3:b1:cc:2d:93:d2:08:6c:
         b9:21:c1:fe:0d:d6:6a:47:d2:28:31:1e:86:b2:20:34:f8:cc:
         95:d1:36:5a:3e:10:8d:d7:b4:cb:11:25:74:ec:a4:77:5e:0d:
         de:14:a7:35:8b:99:13:ee:55:9c:9d:cc:26:4b:0d:20:d3:f1:
         98:d7:85:9f:09:e1:82:f6:56:52:74:a3:44:ec:dc:42:f1:f0:
         c9:ca:5e:47:77:39:e0:18:69:0a:a8:55:b4:02:d9:6c:07:e5:
         c2:f7:75:2e:54:cc:03:05:2a:ab:ef:e4:40:71:84:e7:47:c2:
         0f:25:d7:2c:37:76:e5:dc:22:ab:ee:be:9a:2c:8e:da:c9:ae:
         90:b1:7e:49:fe:aa:e8:e0:b2:e2:b0:80:48:a2:07:1b:62:3d:
         2a:6b:c4:3f:84:f3:e8:a6:3f:ba:e3:7c:b2:a0:53:a4:3b:fa:
         b4:59:57:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:30:29 2025 by rpki-client