Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bb5fdf73-7018-36a7-9803-86c5e1dffff8.roa
File:                     bb5fdf73-7018-36a7-9803-86c5e1dffff8.roa (raw, json)
Hash identifier:          7qlvUuA8KTym+iKa2pd6npkR8dV/9xJf3ZJSf914QOQ=
Subject key identifier:   12:E5:3B:E2:C4:06:47:CC:A7:49:B5:60:92:9C:8E:CE:D9:6A:80:E1
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AD23C39A23B727C8538E0FEC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bb5fdf73-7018-36a7-9803-86c5e1dffff8.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     44477
IP address blocks:        192.177.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:39:a2:3b:72:7c:85:38:e0:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=05a72ac4-5738-4564-b3e5-b1dafc825472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c7:2d:73:9b:a1:05:c2:9b:e8:85:23:ba:1f:
                    d3:3b:cc:a1:1a:85:d9:3c:af:84:cd:e1:93:9d:0a:
                    6b:f6:89:ca:5b:64:a3:78:94:ba:1c:c5:ce:f6:78:
                    52:f5:c2:f1:2a:05:4d:4e:a1:a4:c8:f5:14:29:0c:
                    be:53:3c:ea:a0:d3:87:ac:70:d8:ba:d9:29:a3:cb:
                    f0:98:fa:e5:c3:db:c6:bf:e3:e7:2f:3e:b8:92:9e:
                    e4:86:d4:36:a4:5d:23:00:b6:e5:dd:e1:bb:5e:15:
                    fb:37:44:af:64:26:b9:7a:a5:ed:5e:b6:92:8b:7a:
                    dd:b9:5b:b7:dd:b6:d8:8c:ce:cc:19:90:44:30:bb:
                    1f:f0:5a:08:03:64:1d:08:9e:d4:8e:df:ed:ac:f0:
                    9b:50:09:07:55:fc:db:44:5f:d0:9e:dc:72:51:ab:
                    75:bb:5b:99:a0:91:55:f8:39:34:f6:78:0b:45:fe:
                    75:27:a3:ec:d9:4f:73:37:57:ea:50:bc:d0:6a:9a:
                    1f:b4:20:74:e3:d0:cb:65:49:39:e3:68:29:84:db:
                    32:42:9c:6c:53:1a:e2:d3:b3:f1:19:9d:59:ea:65:
                    69:e5:80:de:20:7b:98:fe:d7:14:7c:28:da:ab:6c:
                    8d:85:bb:67:26:92:c4:ae:dd:45:c6:b2:f2:5e:57:
                    a3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E5:3B:E2:C4:06:47:CC:A7:49:B5:60:92:9C:8E:CE:D9:6A:80:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bb5fdf73-7018-36a7-9803-86c5e1dffff8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:6a:37:81:93:c5:4b:81:e0:1c:3a:ba:67:b3:76:b6:2a:78:
         2a:0f:a6:97:1e:41:57:a5:36:d4:44:a7:a6:4d:4f:89:41:9f:
         af:1a:6e:bd:b2:95:9b:e3:c9:27:c9:9d:51:4b:a2:0e:cb:c3:
         0f:0e:eb:c1:0f:90:b5:71:50:ef:12:f3:d6:c8:5f:d8:d8:b1:
         0b:9b:aa:a2:cb:0a:ef:76:e8:5a:38:18:25:55:cd:c8:18:2e:
         a5:f2:ab:81:f9:21:35:27:bb:a7:50:aa:61:74:66:a0:ac:a0:
         ea:c5:eb:8c:d4:79:d4:25:28:9c:48:bd:17:21:81:f2:bf:ac:
         8a:d9:4b:0e:d8:af:6f:01:75:7e:ef:32:7c:e6:53:a8:b9:f1:
         43:32:eb:fc:35:2b:86:d7:c8:27:b5:30:44:c1:a1:a3:a2:61:
         27:ec:05:ae:c9:15:f4:90:f3:da:2b:ca:98:5f:61:06:45:23:
         64:9d:45:d1:2f:d4:59:d1:32:84:2f:8c:63:71:e1:39:d1:51:
         3c:47:2d:37:7a:7c:e0:95:1e:6b:d3:19:ff:7e:5d:60:2e:c4:
         d2:e4:6f:fe:db:b5:63:6a:c0:97:1f:66:7d:c4:3b:42:95:71:
         3d:5e:2f:52:a4:aa:44:be:4d:51:87:e5:a6:f6:50:fa:6b:52:
         f1:85:fc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:41 2025 by rpki-client