Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/555ac2c6-acdb-32df-964d-1c421e471192.roa
File:                     555ac2c6-acdb-32df-964d-1c421e471192.roa (raw, json)
Hash identifier:          96WEjf7qyvVR2eKUilWzBuCLeXhfyZgUzMJbfQ9djTY=
Subject key identifier:   B5:D3:AB:AF:D0:28:9F:73:B7:F7:B0:B5:9C:1A:DC:D6:2B:B7:4B:4A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B6D2CCA56CAF1AAF61F625200
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/555ac2c6-acdb-32df-964d-1c421e471192.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     6939
IP address blocks:        172.252.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:ca:56:ca:f1:aa:f6:1f:62:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=5060ddd4-020e-4f47-a345-1be2ba837dc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1d:72:06:6e:8f:b5:70:cb:2a:a3:4a:dc:34:
                    7c:89:48:20:7e:9d:55:15:46:3d:50:d2:8b:82:80:
                    30:d2:cf:ad:3b:4f:27:1f:c4:91:38:f3:5a:94:e2:
                    52:92:19:be:48:97:b7:f0:36:79:d2:3a:6c:54:6b:
                    99:af:0f:6c:5e:b3:c3:4e:56:87:28:75:3b:a4:fa:
                    95:c9:3c:2e:e6:68:02:7e:af:55:79:a0:bc:ed:74:
                    c3:ba:ba:c8:08:4a:41:28:8a:3b:2b:a6:97:9f:7c:
                    ef:99:f7:68:07:1b:ce:11:69:a9:19:da:0a:d8:a1:
                    75:04:02:41:99:0e:83:4b:19:58:61:06:66:68:0d:
                    47:2a:62:d5:be:b8:37:dd:cb:93:98:37:ff:30:3b:
                    c4:e0:fe:b9:f8:c5:c3:05:d2:11:ba:a9:1c:5e:e9:
                    14:15:82:ad:e9:65:0c:20:f7:6a:7b:a8:2d:a8:d6:
                    30:be:d3:73:21:a9:28:4b:c3:3d:62:6b:80:79:ca:
                    18:df:2f:3d:2d:c4:ee:fc:87:92:a0:8a:ba:80:e0:
                    0f:8c:e6:b1:16:ea:23:4b:67:4e:45:d0:03:fa:ea:
                    56:74:42:de:db:ca:9f:76:47:2a:d9:56:e5:0c:28:
                    08:fa:d3:c6:e3:8b:6b:82:da:b9:83:94:c6:aa:ff:
                    47:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D3:AB:AF:D0:28:9F:73:B7:F7:B0:B5:9C:1A:DC:D6:2B:B7:4B:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/555ac2c6-acdb-32df-964d-1c421e471192.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:80:70:ad:96:be:7b:de:b0:6b:88:98:16:5b:61:b0:55:8a:
         48:6f:2f:55:46:cd:0e:69:5a:ad:09:aa:2d:f5:dc:cb:2d:46:
         32:ba:63:b7:8b:9f:fd:ed:44:44:fb:c2:75:8d:4d:87:40:28:
         f9:91:d6:20:da:48:ab:17:97:e2:09:96:91:a0:34:ba:8e:84:
         00:f5:21:81:d6:e0:4c:81:f2:e2:21:d3:51:2d:ed:30:dc:ed:
         06:65:40:17:fe:d6:07:11:9c:90:ea:5d:1d:86:14:2a:82:ea:
         1b:8b:ee:13:57:57:c7:b2:45:51:07:f9:fb:49:8f:38:8d:93:
         60:bc:41:9e:57:d0:df:eb:a2:ec:b5:79:72:e5:d3:89:59:70:
         1c:89:8a:02:78:78:5a:b5:51:27:ec:97:e3:3b:5d:7e:d9:83:
         80:0a:c8:ac:9b:49:05:b5:8a:be:85:ba:9d:64:82:d5:13:aa:
         1d:8b:19:58:07:01:95:1a:b7:2d:72:60:42:58:36:97:49:f1:
         0a:c4:7f:9c:fd:93:3b:96:10:85:f0:ca:57:9e:9a:d1:2f:87:
         46:21:e6:73:b6:e2:74:d0:ad:7f:dd:51:17:d4:90:18:f4:27:
         be:91:b9:2c:9f:75:32:d0:08:ae:ba:bb:6d:0f:7f:c0:a3:91:
         6b:00:21:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:08:40 2025 by rpki-client