Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b94c30b7-58dc-32b8-8c57-a7e14138dc8e.roa
File:                     b94c30b7-58dc-32b8-8c57-a7e14138dc8e.roa (raw, json)
Hash identifier:          WH3VcuH27H/6twpaipvtXuMrw/ZLakLDoe+WJ6nnp/8=
Subject key identifier:   9A:1A:9F:37:43:5E:75:AF:6A:9A:D5:9D:1D:84:A9:11:5C:C0:89:ED
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B92DD8C06B368138333059AC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b94c30b7-58dc-32b8-8c57-a7e14138dc8e.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     18779
IP address blocks:        172.252.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:8c:06:b3:68:13:83:33:05:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=dd55b035-7d64-42f9-943e-0d94b56d7ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f5:ef:87:bc:24:9f:08:80:84:1e:fb:9a:7b:
                    0c:a7:81:cb:50:ce:60:92:74:77:63:af:62:45:e4:
                    26:ce:7c:84:20:dd:c8:45:e8:96:69:a8:b5:58:ab:
                    1e:53:25:ec:66:65:60:d8:a9:ae:51:c5:8a:44:9b:
                    8c:9b:cd:54:1b:2d:0e:f6:ec:11:85:9f:7d:5b:04:
                    2b:f8:33:1f:82:46:c1:b5:e3:86:19:05:3f:eb:2c:
                    37:8d:be:60:0d:bf:75:2e:70:91:b1:79:b5:fe:b6:
                    34:37:23:44:35:c1:b2:6e:d7:8c:64:d2:7c:bf:35:
                    59:9a:04:ef:29:8d:22:59:52:88:ba:2e:e5:80:85:
                    dd:74:d0:df:54:16:dd:fd:7d:3c:c8:4f:6b:ae:85:
                    b6:8c:a5:54:d0:27:cf:76:c0:bc:6a:b0:b1:b6:d5:
                    d2:a7:07:98:32:d0:1d:49:05:5c:2d:49:70:c4:24:
                    1e:36:f8:a2:96:44:11:9b:5d:36:f1:72:ad:24:b8:
                    d5:78:81:7d:f2:bd:9c:94:46:8a:af:bf:17:ee:48:
                    53:31:e9:14:0f:6a:53:5d:77:5e:f8:cc:ad:da:f6:
                    9a:05:6e:68:ad:d1:a9:28:12:95:c1:7c:a3:73:ff:
                    61:7a:bf:92:d8:cb:f7:27:6e:7d:e8:9e:85:be:1b:
                    16:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:1A:9F:37:43:5E:75:AF:6A:9A:D5:9D:1D:84:A9:11:5C:C0:89:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b94c30b7-58dc-32b8-8c57-a7e14138dc8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:b3:28:8b:e6:f4:7b:29:32:38:4c:71:55:b2:de:9f:ee:65:
         fc:06:bd:56:10:de:c5:ac:f9:2d:57:ef:46:2b:b9:17:29:3b:
         e3:85:1c:11:5d:fd:39:2f:a1:0a:ca:29:46:c5:d0:4d:43:7a:
         b9:7f:d4:37:4d:05:b7:42:22:14:af:7c:f0:99:1f:b5:17:e7:
         ad:34:1d:74:ca:15:76:d4:67:95:27:c5:7b:f8:2f:01:0f:2e:
         8e:42:4d:53:cf:f1:ef:8f:7d:d9:57:c0:25:27:2c:cd:f8:b1:
         c6:82:ba:11:96:0d:85:bd:bd:b6:1b:51:e7:74:e7:b6:c3:d5:
         dc:ec:8b:df:ac:49:04:3e:24:09:06:23:f3:8c:2a:10:10:16:
         5a:0a:c3:c5:59:f4:3b:75:4f:11:31:3c:a3:25:4e:39:41:46:
         2d:9c:d1:89:63:48:0e:d8:06:25:79:bc:5f:5f:24:b4:61:43:
         ef:09:9a:4e:25:cf:0b:fe:21:3d:14:bf:17:b7:62:1c:39:07:
         b8:aa:ba:42:06:3f:07:5c:9d:3f:6a:48:24:59:02:32:db:1d:
         35:c0:1b:99:0a:fb:f7:9f:8e:11:02:af:48:73:04:40:b6:43:
         31:46:84:71:f9:df:dc:8f:ed:ec:49:2e:ed:47:db:43:9e:d3:
         75:3f:23:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:48:14 2025 by rpki-client