Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/219fc177-a4c5-33da-a0d0-6e3d248be896.roa
File:                     219fc177-a4c5-33da-a0d0-6e3d248be896.roa (raw, json)
Hash identifier:          g7cfqgGVbv1cuezB1jJSSROOQjlJ2DnB4fdTs3i0guI=
Subject key identifier:   C2:3A:EB:E5:B2:17:E6:63:DE:0F:7E:47:AB:2D:8B:23:63:71:44:FE
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B004BF012811413B9F3A18480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/219fc177-a4c5-33da-a0d0-6e3d248be896.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     2914
IP address blocks:        172.252.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4b:f0:12:81:14:13:b9:f3:a1:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=72cc5caf-382f-4439-aa76-47dd73eaab3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:50:3e:a6:47:f3:dd:a6:f4:fa:ca:88:b4:67:
                    61:9f:f5:9d:f4:00:ab:60:ab:75:5b:45:7f:57:20:
                    9f:dc:84:06:62:70:d7:91:9f:83:fe:32:87:85:20:
                    f5:be:42:fe:39:7f:62:36:55:d6:82:cc:a4:75:96:
                    c9:7a:c9:38:63:54:c1:9c:01:52:8d:ae:89:99:e5:
                    be:fe:f5:4c:dc:58:f0:78:b9:8c:f0:05:39:04:e1:
                    9e:a5:a6:61:44:60:35:94:39:72:5e:b8:84:c9:c8:
                    21:6b:66:25:1b:d3:a2:e2:3e:ae:ad:ba:f3:0f:73:
                    cd:45:3e:5c:1c:2f:36:c3:bb:06:e1:a8:ab:4c:c4:
                    ae:7f:9a:14:54:f3:ca:7b:15:a2:5c:c8:6d:bb:b9:
                    90:74:2b:e0:9f:f7:33:7a:e7:e9:65:11:30:50:77:
                    11:5a:c9:14:be:bc:16:de:e4:41:5c:17:73:ee:24:
                    40:60:a3:ab:27:30:e6:3b:0a:f0:1f:12:71:ad:25:
                    9a:07:b4:a3:b5:3a:39:8d:27:51:87:7f:f5:e5:2d:
                    6d:29:2e:c0:24:1b:5d:a4:3b:11:cd:c6:98:d5:7b:
                    16:de:07:e1:a5:0e:2b:5b:ab:1b:f5:b8:2f:b4:59:
                    0a:a4:e1:fc:13:3b:83:65:78:1f:b8:c6:70:5b:75:
                    0e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3A:EB:E5:B2:17:E6:63:DE:0F:7E:47:AB:2D:8B:23:63:71:44:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/219fc177-a4c5-33da-a0d0-6e3d248be896.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:5c:34:0f:7a:10:a6:2c:1d:52:78:82:ec:70:f5:3c:50:38:
         5a:e9:a4:e4:2d:86:f7:f4:c2:2f:60:03:54:bb:48:bf:40:93:
         76:b2:7f:3a:f3:c0:ed:e4:81:b6:cd:70:51:15:f0:d3:d8:68:
         d2:57:3c:9e:16:2e:89:73:41:cc:84:9e:07:18:eb:4b:94:83:
         68:c6:21:53:e0:21:fc:bc:d8:ec:1a:0a:42:59:fe:ea:2a:8c:
         4c:eb:aa:85:cc:d0:8e:d5:36:32:c8:b6:76:5f:35:aa:03:ad:
         24:63:7e:89:c5:a3:07:45:d9:fb:b9:98:38:98:63:4f:18:10:
         24:6f:0c:7c:b9:7d:46:6d:51:06:04:2b:4b:79:81:13:9e:29:
         c7:32:77:0c:2e:2f:a5:02:ba:4b:5d:35:f4:81:a1:ee:33:8a:
         7c:2a:6e:5d:5e:d3:61:8a:f2:3a:30:1f:13:32:67:63:d8:50:
         8a:1b:c8:df:3d:e0:ae:2c:56:48:80:1c:40:85:53:46:c0:01:
         4c:56:20:e0:b3:48:64:52:6f:4b:33:dc:70:d2:c8:e3:a9:51:
         67:4b:c7:95:2b:5c:9c:4f:3c:ee:09:e6:ea:f2:64:81:a5:3e:
         aa:af:c8:0b:43:cf:b5:c7:68:62:89:8d:f5:67:3b:bf:57:69:
         0c:57:0f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 11:59:08 2025 by rpki-client