Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0f09edb3-fee4-35bf-b5e5-c9b524166bf1.roa
File:                     0f09edb3-fee4-35bf-b5e5-c9b524166bf1.roa (raw, json)
Hash identifier:          T5YkzY3div4/ojrQD5OfTybkgR2YpQOPNW3xe12wJhc=
Subject key identifier:   28:5E:29:97:35:FD:9B:1C:CE:3F:2F:96:60:E1:07:68:86:64:A4:9D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B6D2CCD5779D8C238ECA56080
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0f09edb3-fee4-35bf-b5e5-c9b524166bf1.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     6939
IP address blocks:        172.252.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:cd:57:79:d8:c2:38:ec:a5:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=8e67189c-b266-46f9-b0d1-1b3692b1245b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:72:29:b8:4c:0a:95:df:96:50:6c:25:1c:d6:
                    28:64:0d:aa:84:e6:90:0c:21:06:73:33:ae:bb:2e:
                    0f:ea:ee:14:10:2d:b7:c7:b8:1a:99:82:af:97:01:
                    1b:a6:b1:47:af:75:60:96:89:0d:6d:ef:e1:c3:fb:
                    9c:18:d4:ec:4c:da:d4:cc:d0:89:d7:40:4d:e8:37:
                    89:de:4b:56:e0:9f:ee:50:ca:42:91:99:de:ca:0d:
                    eb:ce:d1:92:6d:de:22:38:63:16:a2:b9:8a:a4:30:
                    80:dc:ad:76:d6:8f:4f:3e:e8:7c:c2:56:67:32:cd:
                    5d:13:5e:9e:87:c1:2d:a5:2a:9c:15:92:66:dd:e0:
                    f7:38:5b:fb:82:77:d9:e6:40:90:40:f2:c2:2a:69:
                    c9:21:b3:ea:f7:61:d4:d1:8f:c3:ef:70:8b:f0:12:
                    67:a8:c5:77:dc:2d:2d:f2:9b:04:eb:c3:29:26:e7:
                    1f:dd:41:70:91:87:70:2a:d1:a4:7b:3b:ff:e9:e0:
                    26:0c:35:30:78:8d:8c:46:88:52:f0:fa:af:65:b7:
                    e6:d9:78:8d:2d:a9:02:56:ce:b0:7e:c8:5b:4a:bf:
                    e1:f0:54:79:91:2f:e4:17:90:03:ca:a9:f8:88:26:
                    3f:c9:19:01:9b:bc:90:8f:bc:4d:12:59:5a:83:33:
                    30:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5E:29:97:35:FD:9B:1C:CE:3F:2F:96:60:E1:07:68:86:64:A4:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0f09edb3-fee4-35bf-b5e5-c9b524166bf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:17:1a:37:01:2d:a4:7c:5b:77:d9:13:d4:b6:2d:1f:97:d8:
         8c:6d:e4:04:17:28:f2:4d:87:89:c4:28:c7:ab:b2:63:53:c7:
         b0:20:cd:3a:d3:49:a7:2f:56:90:f5:79:08:78:02:94:f1:8d:
         53:52:9e:e5:c7:eb:3c:a3:0e:e9:aa:0d:62:fc:49:66:c1:fe:
         f5:8d:43:14:aa:b0:08:ec:e1:fb:c5:37:b6:75:78:55:86:7c:
         9f:90:53:0b:41:b5:cd:44:99:77:be:0d:e3:43:53:13:90:24:
         45:74:ff:15:70:54:9d:81:3f:f0:cd:e4:8d:41:f4:34:94:85:
         7d:34:d9:10:bc:b9:54:2d:82:3b:a2:83:0a:e9:c0:ac:99:68:
         26:b8:35:76:f9:36:49:22:03:89:fe:4e:6b:f3:e5:c5:89:be:
         90:c6:16:86:70:dd:fe:dd:97:40:92:40:18:c5:7b:c3:0a:a5:
         d2:56:95:49:34:e4:bf:fe:05:b2:f6:b6:6c:54:6d:a6:7f:31:
         53:d7:b8:07:8a:d2:92:2c:9f:a6:c0:69:93:e2:41:0d:d6:1a:
         7d:b3:3f:85:81:e4:6c:5e:3f:08:2e:d7:7a:9d:0a:b3:3a:76:
         cf:8c:b2:af:78:56:a7:0f:32:74:b8:88:8d:73:44:25:13:63:
         2a:9f:27:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:15:10 2025 by rpki-client