Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/1b1ce9b1-a0fc-3aa7-aa77-7498674524f1.roa
File:                     1b1ce9b1-a0fc-3aa7-aa77-7498674524f1.roa (raw, json)
Hash identifier:          XbY663tmETssiIxnmd0X5Siz179uul1atCm341LYlI4=
Subject key identifier:   29:B9:78:0A:6D:BC:7E:EE:72:48:AD:F5:46:87:66:4A:52:C7:97:4A
Certificate issuer:       /CN=51772dd7-991f-47b2-b40b-d92a8497234e
Certificate serial:       010D0C9F4328584AF9514010E0FA5D5C7167A000
Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/1b1ce9b1-a0fc-3aa7-aa77-7498674524f1.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     16509
IP address blocks:        72.18.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:40:10:e0:fa:5d:5c:71:67:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=e3fc1081-e881-430f-819d-660e00885b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f9:fc:b3:65:ab:df:1a:61:95:b1:9b:67:6d:
                    28:b2:84:aa:75:37:eb:a9:8c:12:f6:71:22:3a:b6:
                    7a:a4:d9:0c:fb:cb:a3:ff:30:24:3b:4c:ed:e4:64:
                    4c:c6:ab:9f:f2:7e:59:4a:8e:62:f9:dc:77:e2:01:
                    63:f8:5a:bc:b5:d5:b3:68:7a:d9:03:47:b3:4f:86:
                    bc:77:7a:db:25:05:2a:91:65:5b:92:44:7e:35:76:
                    92:e0:3b:6f:ac:b6:87:9b:31:16:cd:ae:61:c1:eb:
                    93:ca:2a:a4:0e:30:b1:27:ac:6a:e0:eb:d8:4b:11:
                    0e:65:b8:a2:01:4a:94:ea:20:76:42:d2:4f:37:41:
                    67:89:d5:b9:2f:fa:82:a2:91:00:41:09:25:44:bb:
                    6b:c4:ae:af:22:67:07:11:95:83:10:aa:e4:8f:80:
                    aa:06:03:5f:40:a6:b3:e9:24:8a:fe:fe:49:17:3a:
                    8c:2b:b3:6e:d6:ed:ed:cd:9a:79:b1:65:ab:0f:ba:
                    52:5c:a8:48:67:5c:14:f3:dc:ab:3a:5c:a2:8d:e5:
                    76:f5:f0:e6:74:87:83:ad:9c:8d:7f:28:37:b0:0d:
                    b6:8d:e6:fc:5e:25:4d:85:a0:a1:56:f0:3b:68:40:
                    0f:7c:05:c9:a7:fc:f9:9d:b5:7b:4d:df:9d:c1:3d:
                    da:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B9:78:0A:6D:BC:7E:EE:72:48:AD:F5:46:87:66:4A:52:C7:97:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/1b1ce9b1-a0fc-3aa7-aa77-7498674524f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl

            X509v3 Authority Key Identifier:
                keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.18.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:74:ab:72:1a:73:66:6b:b1:26:7d:c5:cc:cf:79:6e:2f:ec:
         0a:7d:49:29:e3:a2:4c:6a:5c:f0:74:fd:7c:b6:ee:15:2a:ef:
         ce:44:c0:52:b4:f5:7e:4a:dd:8c:3f:8d:dc:4d:3f:27:f0:e7:
         c2:54:2e:ac:37:68:4c:e1:5c:48:b9:15:c7:85:b3:5b:4e:b1:
         32:d6:01:65:b7:3e:df:a6:ac:4a:34:2d:d6:64:89:85:da:d4:
         23:31:48:0c:3e:29:1f:c3:93:65:bb:53:d6:ce:66:78:f7:56:
         64:4e:b3:8f:68:29:55:fd:d7:23:b3:80:f4:4e:12:ce:c6:c4:
         b6:37:37:57:13:a0:57:85:e1:80:0b:73:97:9a:14:b5:b4:fc:
         a7:f2:74:2a:8e:db:3e:41:43:a3:f0:22:df:b3:22:44:8f:83:
         a5:52:ec:86:23:3b:2f:c0:19:21:55:a9:b8:0f:17:2b:63:a3:
         76:af:e0:e5:29:44:83:4d:e6:a9:f9:62:9e:f4:2f:c0:44:68:
         88:41:b8:a8:a2:b3:d6:2d:6d:81:ba:7c:5e:d0:8b:4c:46:c4:
         b3:b6:52:84:c0:ff:51:00:04:17:06:c3:3a:db:6c:8a:9b:a1:
         2a:59:58:b3:95:98:15:3c:c2:94:a3:d3:f6:03:a6:4c:58:9f:
         cb:8f:e3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:15:43 2025 by rpki-client