Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/034d1a74-e037-3898-8cfc-f6bbc279348a.roa
File:                     034d1a74-e037-3898-8cfc-f6bbc279348a.roa (raw, json)
Hash identifier:          iDzsNJ/jV/7OuomlnPASUzBlP+Wzi8IHubrheAFeH6Y=
Subject key identifier:   A5:70:80:8F:13:32:82:3A:11:E1:A5:7D:BC:BF:A3:03:2E:94:1E:E3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B33F1B79D22BAC0AB640604C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/034d1a74-e037-3898-8cfc-f6bbc279348a.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     152868
IP address blocks:        172.252.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:b7:9d:22:ba:c0:ab:64:06:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=39a0fc85-d3ba-4d52-8a98-3c45e795c9e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:09:51:72:ed:d2:9f:71:c9:2f:4d:e4:8a:f4:
                    da:ca:67:0a:e7:77:05:40:75:af:48:36:9c:d3:c9:
                    cd:c4:9c:f8:92:65:b4:b9:76:ff:8a:97:4b:a1:34:
                    88:a8:75:53:a5:4c:7d:21:6e:74:bc:59:d3:95:2e:
                    61:1d:15:34:cd:47:df:64:38:e1:eb:82:63:0e:ef:
                    5d:64:d0:a1:a5:ac:3c:3b:88:eb:46:11:d4:79:b1:
                    f2:01:40:18:55:45:c6:a9:ab:8b:d2:de:14:05:fe:
                    59:2d:2c:98:4f:cb:f9:02:c5:25:8b:d9:d4:06:7d:
                    66:7b:6d:f0:1f:68:8e:a9:5b:9a:55:f4:b3:30:ce:
                    13:b5:18:15:6e:5b:61:e3:c2:43:36:61:d6:33:60:
                    6e:5f:41:79:69:7a:5d:e6:8b:a9:7e:8d:48:ae:9c:
                    30:44:b6:cd:7b:c6:a3:a8:74:f9:cf:84:3b:90:04:
                    45:b5:a3:f1:81:1a:c8:f3:ce:b2:2c:57:0d:05:54:
                    0a:69:be:bd:e5:bf:ae:fc:ec:cd:8a:f7:d8:d7:41:
                    1c:7b:99:d0:fd:d2:d1:14:4b:49:7b:c7:70:35:31:
                    47:98:00:85:44:bb:a8:1a:32:20:0c:37:e4:92:ac:
                    32:f8:48:8c:4d:65:81:6d:c2:00:91:85:d6:de:d8:
                    78:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:70:80:8F:13:32:82:3A:11:E1:A5:7D:BC:BF:A3:03:2E:94:1E:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/034d1a74-e037-3898-8cfc-f6bbc279348a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:d8:7b:d6:ce:09:e3:0b:e2:05:d6:b2:12:d2:08:40:c8:64:
         80:2b:02:a9:74:5e:05:e3:bf:e8:d8:00:5f:2a:3c:2a:fa:64:
         5e:59:98:43:52:f5:61:d1:1d:17:ee:26:55:a3:ba:6f:ab:86:
         f5:37:2c:fb:7a:f0:25:73:5c:a5:7b:26:c2:59:a1:cf:4f:43:
         70:86:54:64:80:d3:c2:76:5a:e4:9d:30:ab:b8:d7:9c:9a:05:
         bc:ce:a0:c2:4e:db:b8:a5:ac:26:c3:5a:dc:db:8c:c4:0c:17:
         dd:2d:f1:ab:40:03:a7:4f:54:fc:eb:0f:b9:f5:0a:16:db:99:
         bf:98:f1:f4:2e:15:0a:8d:3b:a2:b5:cb:bc:51:ae:93:69:a6:
         79:53:46:78:59:e4:b2:29:61:79:b6:82:69:e7:79:3b:5b:a9:
         f8:25:87:0b:0d:9f:5c:17:26:5c:4b:a1:f7:2b:3f:41:4e:ca:
         30:a4:c0:84:5c:61:4f:0f:e3:49:6d:cc:6b:97:d1:c6:bf:03:
         ee:5a:57:b3:c9:7f:a9:64:43:2a:e4:39:eb:e9:f9:3e:f1:fd:
         98:d6:1c:80:13:a2:db:90:6b:0c:42:d8:06:6d:fe:47:18:2b:
         c0:bd:8a:35:e0:12:81:fe:ee:f2:64:8f:a6:58:9c:5a:92:d4:
         a9:af:ef:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:20:33 2025 by rpki-client