Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1f706f80-1826-3bdf-a8e3-5b51a98126da.roa
File:                     1f706f80-1826-3bdf-a8e3-5b51a98126da.roa (raw, json)
Hash identifier:          RbPrTcVUGBxtj+96cJ+OigioD510YG8zepfJOwcZpt0=
Subject key identifier:   FC:E0:E9:0C:3E:3D:42:AF:2A:5A:75:5E:9A:07:61:AE:82:04:DB:C6
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B758CA6A4B9555C38370B2040
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1f706f80-1826-3bdf-a8e3-5b51a98126da.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     397293
IP address blocks:        172.252.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:a6:a4:b9:55:5c:38:37:0b:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=3bcd95b7-eabf-4c68-a1b8-1859725eac64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:21:25:de:56:69:74:d1:e5:35:d3:67:24:65:
                    a3:f2:e1:aa:44:20:f2:e6:d6:95:bb:d6:6c:1b:d3:
                    6b:6f:82:84:fb:d3:ff:c9:1a:d3:ce:8c:db:54:17:
                    58:3a:21:c4:ff:88:66:67:65:67:e1:5e:70:5d:d5:
                    22:d3:18:70:f6:ac:3a:5e:86:1c:82:5f:97:9d:15:
                    64:7c:ec:62:db:81:05:1d:3b:1f:82:6c:af:1a:1b:
                    cc:79:cc:b8:00:9d:d2:de:e1:b3:7b:9b:af:16:0a:
                    f9:77:d1:f4:17:30:19:de:b5:b2:90:f3:9b:1a:b8:
                    cc:85:9a:a2:53:62:7e:ad:17:81:0e:12:19:d4:72:
                    ad:f0:86:91:34:79:75:aa:7e:0f:1a:ff:54:0c:29:
                    7c:17:85:20:bd:02:b6:e4:df:6e:0d:35:2d:46:72:
                    1e:44:66:a8:d9:f7:7f:b2:83:ca:a1:76:9c:0f:c4:
                    38:79:8e:9b:8c:e2:12:77:70:c1:90:27:fa:5f:64:
                    18:57:02:d3:1e:1b:4b:eb:8c:7b:aa:19:fc:1e:cb:
                    36:11:0e:50:35:fb:6f:5b:c3:5a:c2:86:14:02:db:
                    a4:dd:4d:f4:70:02:cc:75:f0:f7:d0:33:85:14:ac:
                    35:d9:f3:e8:c9:fa:bb:ed:d5:f5:8d:68:3f:d5:f2:
                    a6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E0:E9:0C:3E:3D:42:AF:2A:5A:75:5E:9A:07:61:AE:82:04:DB:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1f706f80-1826-3bdf-a8e3-5b51a98126da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:a4:a3:5e:b7:4e:df:41:37:65:ae:df:de:7d:d5:9a:de:54:
         a6:f5:6b:fb:cf:49:56:d1:33:58:3e:c8:30:35:e5:e4:e9:16:
         a0:f1:3b:ac:ac:44:77:2a:32:34:0e:a5:f5:93:9e:ca:d5:72:
         fd:c5:ba:2b:cc:27:b6:77:0a:ac:b0:77:5b:2e:f1:93:38:ce:
         88:52:29:11:1a:ba:44:e8:a4:02:68:f9:41:78:59:09:6e:ee:
         0b:b5:79:d1:f3:fa:59:91:ec:36:12:bd:fb:24:24:b8:7b:b5:
         89:d3:25:1e:d2:88:1c:a7:fe:54:e0:0f:77:2b:42:da:2a:9d:
         5c:fe:00:16:3e:51:95:b7:29:f2:d8:27:5f:a1:b4:2c:2b:a5:
         01:e9:2b:35:e2:fc:41:2e:c5:26:d3:13:17:9c:82:19:03:95:
         fb:1c:1c:e5:d0:8c:0b:33:86:75:62:a7:35:25:6e:fe:80:ce:
         07:d4:03:f4:0b:5b:07:46:54:29:0d:fa:22:21:56:02:a4:f8:
         d4:69:a0:55:e8:dd:f5:98:52:18:49:5d:42:fa:9c:80:d8:7b:
         b1:f8:b6:5b:19:49:7e:ab:d1:00:bc:4e:84:8c:d4:af:b1:e1:
         6f:23:8f:db:44:43:db:80:1d:ff:37:c6:3d:1d:7e:9a:8e:7e:
         a0:2b:4c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:17:59 2025 by rpki-client