Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e0dc8aeb-86ff-3dc2-9ad1-8d2dc6a249a5.roa
File:                     e0dc8aeb-86ff-3dc2-9ad1-8d2dc6a249a5.roa (raw, json)
Hash identifier:          4TNaxeMYjQgnwD4DaN7VZNkv/2wzAaXS2AbDgxgjJPA=
Subject key identifier:   28:F4:E6:F3:9D:44:85:F0:B7:7D:31:7F:40:DD:CC:6D:2D:85:F3:11
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AF0D7E1ABC0EED2F2CCE0DEF0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e0dc8aeb-86ff-3dc2-9ad1-8d2dc6a249a5.roa
Signing time:             Fri 22 Aug 2025 12:09:44 +0000
ROA not before:           Fri 22 Aug 2025 12:09:44 +0000
ROA not after:            Thu 20 Nov 2025 13:09:44 +0000
asID:                     5400
IP address blocks:        172.252.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:d7:e1:ab:c0:ee:d2:f2:cc:e0:de:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 22 12:09:44 2025 GMT
            Not After : Nov 20 13:09:44 2025 GMT
        Subject: CN=f603710f-03db-4923-8054-dd0e6c2c8e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c7:57:ae:a0:13:f3:80:3c:c1:44:73:94:40:
                    9f:c6:1f:bf:5c:ec:f4:b1:f1:90:e6:ae:3a:12:aa:
                    c0:98:cd:96:ce:46:03:01:f2:33:28:0a:4e:90:d6:
                    cf:d0:8d:28:48:38:94:57:7f:aa:17:4f:0e:87:53:
                    33:5d:fe:2e:3f:a5:9a:18:d6:30:95:86:7d:1a:52:
                    dd:28:f4:3f:fe:36:66:cc:8f:29:14:58:19:82:70:
                    2e:89:70:02:13:71:b1:97:d3:e8:02:50:4a:31:27:
                    b5:9a:a5:82:06:c3:9d:84:04:a1:28:d4:78:2f:4e:
                    a6:66:b5:57:29:7b:c0:6e:43:38:9f:81:9f:e3:2e:
                    d9:58:d3:7b:25:31:ef:87:d7:f4:60:be:77:cd:9b:
                    b5:e5:09:50:ae:77:72:a5:c6:a3:d5:60:b3:44:71:
                    9a:30:5b:56:54:b2:18:7f:9c:f3:6c:06:40:ee:b6:
                    a6:42:3b:2d:88:3b:73:a3:82:4b:b3:fb:80:4e:0f:
                    91:5d:06:ba:91:34:19:73:7b:df:ac:8f:7b:ae:2f:
                    4f:3c:08:84:db:d1:ed:c3:db:d2:03:dc:71:51:df:
                    be:2a:b1:0b:67:f9:a4:44:57:aa:72:15:e2:60:38:
                    5b:25:b3:77:37:d2:fe:3c:a3:96:a4:1f:70:33:7f:
                    08:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F4:E6:F3:9D:44:85:F0:B7:7D:31:7F:40:DD:CC:6D:2D:85:F3:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e0dc8aeb-86ff-3dc2-9ad1-8d2dc6a249a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:6b:34:a1:8e:d9:45:58:c1:8e:d2:11:d2:35:36:b1:d5:2b:
         7e:a9:a9:01:09:3a:f2:a6:8a:ad:c3:87:08:3a:01:52:66:58:
         e2:2d:d9:6b:d6:08:bd:a6:66:d4:8c:b9:64:22:5c:4a:1d:cc:
         5a:47:26:00:86:82:92:8c:0b:ca:1b:8b:95:e1:c7:5a:18:5a:
         df:be:34:d6:5f:5d:71:20:fb:e3:5f:9f:78:85:80:9f:1b:16:
         7e:5a:26:34:1b:99:77:48:10:89:4a:8a:e6:6b:bd:6b:cf:ce:
         58:c2:0c:aa:cd:7c:e2:36:58:bb:bf:47:9b:8c:e8:67:a1:b4:
         b9:9a:2f:0c:cd:d9:b7:1a:ad:f1:62:93:05:17:b4:a1:62:2f:
         1b:d2:ee:4e:e4:89:c6:ed:a2:17:5b:46:20:5c:bf:0e:52:9e:
         72:f4:36:b9:a9:88:d2:14:c0:94:fd:1a:c1:eb:8e:38:44:6d:
         9c:17:3e:95:38:bd:ee:c9:3d:a8:bf:f9:da:41:8f:a0:e3:78:
         e1:76:e9:37:28:ab:18:fe:aa:ce:61:36:20:8a:12:2f:7d:b8:
         bf:1f:78:99:3d:e8:b5:e3:7a:3c:17:5c:5a:f7:f0:8e:ec:47:
         de:cd:34:1b:1b:90:b1:c1:0b:3c:4b:84:82:e7:ec:d0:e7:09:
         c0:88:29:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:16:36 2025 by rpki-client