Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3937814f-0a24-33e8-823a-2bdecf03364a.roa
File:                     3937814f-0a24-33e8-823a-2bdecf03364a.roa (raw, json)
Hash identifier:          9RxwGASsA4SixYkWD8GjFvrFw6Jx/Rqy4Y7Uy8ihFpA=
Subject key identifier:   B8:50:F7:9A:B9:27:CE:65:30:DB:E7:CA:6B:BF:CD:81:05:6D:44:F1
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B6D2CC8CCAB83EFD8948DE980
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3937814f-0a24-33e8-823a-2bdecf03364a.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     6939
IP address blocks:        172.252.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:c8:cc:ab:83:ef:d8:94:8d:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=45fb3b9a-5544-45da-be8f-d1f7cffd8f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:09:c9:15:d1:10:25:17:77:40:8a:07:e2:f4:
                    84:e5:ec:53:17:b8:8c:96:dc:2e:32:ee:16:3c:04:
                    7c:a3:7f:11:8e:23:01:78:74:ae:50:1f:f4:22:2f:
                    d0:d7:dd:c8:af:67:83:31:0b:94:97:0d:0a:6c:e2:
                    94:a0:83:66:42:95:69:c0:e0:72:fe:5e:bc:2e:8d:
                    9e:66:61:d3:04:55:a2:ab:24:f7:6f:aa:53:40:fb:
                    4b:39:d5:1d:c3:b7:c4:63:4b:1e:40:86:1b:6a:1b:
                    b9:cb:b7:f4:e1:20:13:25:af:b7:7f:60:40:d7:ed:
                    68:3a:fc:15:aa:53:67:c3:a3:fa:5f:a9:15:4f:d1:
                    b2:a2:f7:a0:2b:57:fa:04:55:d0:a9:98:da:14:e0:
                    ff:f5:00:76:e4:c8:a4:80:ab:e0:29:f0:c9:8a:22:
                    21:4b:80:76:98:e1:b2:5b:cc:26:cc:1a:2e:70:08:
                    4e:41:72:e8:e2:68:aa:71:fc:a4:57:87:41:8a:de:
                    10:ea:be:86:c6:03:88:01:d2:c2:e8:94:27:a5:16:
                    dc:1a:10:5d:79:8c:64:42:3c:a7:13:c6:6f:cc:e1:
                    03:09:84:4b:97:cc:45:51:c6:cc:e7:2e:b2:4a:35:
                    e5:7a:af:9d:1f:27:55:32:6a:71:10:de:a0:af:f2:
                    4f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:50:F7:9A:B9:27:CE:65:30:DB:E7:CA:6B:BF:CD:81:05:6D:44:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3937814f-0a24-33e8-823a-2bdecf03364a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:b7:63:d0:01:e8:74:9e:e1:40:f6:b1:27:83:e5:ff:fa:10:
         eb:71:30:17:77:54:53:a3:43:79:f7:6c:5d:ef:a7:90:3f:cf:
         64:c4:11:c6:5d:db:ba:71:31:7b:af:9d:01:18:c1:2d:8a:c3:
         8f:bf:9f:1a:82:10:84:67:c8:3a:e7:09:eb:c9:ea:dd:ba:d6:
         f2:93:6c:c2:d6:eb:26:37:55:45:12:66:95:c7:6b:55:fb:07:
         56:54:68:7d:c7:0f:a7:60:87:00:91:97:55:19:04:21:66:47:
         84:b1:31:79:91:3c:25:b2:3c:13:a7:4d:f7:77:3d:13:39:41:
         43:f5:9d:5c:25:87:a9:e3:e3:0f:2e:9f:1d:02:a7:ab:56:e3:
         cf:b4:ff:cb:d6:68:e7:2b:9e:95:84:12:b3:c0:cf:9b:e5:bb:
         5a:02:71:f5:4c:a4:31:19:20:5b:95:d4:6b:88:a0:69:e9:39:
         b4:ab:6d:f8:9c:ac:6d:2e:37:44:0e:d7:ba:15:8e:43:ce:1e:
         0a:d3:3a:ee:71:7b:df:c2:de:0a:4c:c5:08:2a:e9:e2:4f:78:
         f8:74:34:5a:f8:7f:c7:89:7b:38:7a:58:a5:b2:ef:d1:29:2f:
         98:d2:03:69:3e:e1:d4:cc:7e:1c:cf:27:6b:b2:2e:53:2b:fc:
         44:dd:e5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:12:45 2025 by rpki-client