Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/66e9636a-301b-3271-a014-e5f87e8d1c15.roa
File:                     66e9636a-301b-3271-a014-e5f87e8d1c15.roa (raw, json)
Hash identifier:          48e3JF8N2qLE37/7yODZO+27yVU1QouERM/yUOh7GQQ=
Subject key identifier:   41:21:CE:DF:2A:36:63:7E:9E:4A:AA:7B:66:CD:54:C0:1A:BC:4D:BC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B2FC1B85BDF77244AE9A055E0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/66e9636a-301b-3271-a014-e5f87e8d1c15.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     152868
IP address blocks:        172.252.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:b8:5b:df:77:24:4a:e9:a0:55:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=dd35f034-4d06-4432-aaf8-dd82691c3f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:64:80:cf:57:f2:1d:b1:63:8b:58:d8:a9:51:
                    a5:b3:31:95:96:5d:ed:1c:97:a9:b3:f5:f9:d5:c7:
                    4b:cc:ad:44:68:12:03:7d:e1:55:68:3c:a1:db:06:
                    fe:12:fa:cc:b0:9f:00:65:bf:0a:df:18:92:41:be:
                    c5:a4:81:d5:77:dd:20:78:1f:d8:cf:ab:87:fd:62:
                    cd:b8:9f:c8:a7:d3:ab:60:fe:ab:40:25:83:b7:52:
                    d6:89:df:62:27:a6:9e:1d:4f:84:24:1e:34:4e:bc:
                    48:4a:d6:fa:8a:7b:3b:e5:12:29:44:4e:71:62:70:
                    7f:f6:40:2f:ce:4c:75:e0:ac:43:42:b9:a2:d6:93:
                    3a:98:30:55:ab:8a:af:62:b3:8a:be:a0:34:1e:be:
                    b4:cb:ff:03:30:1a:ed:85:8c:ff:ff:5a:50:aa:a8:
                    af:86:d4:a4:a6:55:c7:e9:1a:d6:bd:c8:22:dc:7f:
                    b7:36:25:b6:69:4a:84:95:d2:0d:87:f0:07:9f:95:
                    ec:38:ea:80:61:72:2c:95:a9:95:ee:c3:66:90:72:
                    c4:fc:d7:1b:df:dc:38:05:9e:be:74:b0:1d:c5:d0:
                    1b:14:61:b4:bd:f6:c4:9d:47:e6:05:f0:df:77:87:
                    76:5b:97:31:96:b3:e9:31:e5:6a:d5:78:84:82:a0:
                    3a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:21:CE:DF:2A:36:63:7E:9E:4A:AA:7B:66:CD:54:C0:1A:BC:4D:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/66e9636a-301b-3271-a014-e5f87e8d1c15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:8e:8c:47:6d:e9:0a:f0:67:64:9b:1e:66:c7:90:57:f3:84:
         fb:4c:35:28:2e:73:04:9f:4e:e0:09:5e:80:49:9e:d5:c8:37:
         e1:a0:00:f6:77:43:6a:48:37:3a:01:82:30:74:77:40:83:f4:
         8f:06:18:3b:db:2f:32:a6:15:3d:8a:cf:68:2d:3a:22:7f:ef:
         88:ff:93:db:16:a2:9f:33:bc:6e:44:c6:1b:d0:81:72:65:2f:
         be:0d:96:02:8a:30:2a:2f:32:d2:c8:8b:9f:29:ea:eb:c2:5c:
         29:e9:43:7b:76:45:0a:2d:c8:3f:ae:22:6d:ad:6f:ff:22:9f:
         06:00:66:34:b5:1c:69:6e:db:cd:cf:b8:2b:95:57:03:13:b9:
         4e:24:c4:ea:f0:ce:68:d1:32:82:c7:3b:a3:c7:19:ce:03:8a:
         8f:9a:3d:60:1e:b3:aa:f3:40:d3:5a:7a:6c:ac:cd:7a:f8:b4:
         71:5d:1c:ed:65:76:c3:97:9e:aa:91:34:84:3f:9a:2f:1c:36:
         bc:8c:e9:5c:fd:a1:cf:6b:9f:31:b9:37:93:64:14:73:18:08:
         56:71:b4:f6:23:25:e5:2c:51:a9:54:9b:0e:97:96:b1:67:81:
         08:11:b9:c6:f9:55:52:98:c7:35:d7:f6:43:7e:9a:14:f3:b1:
         04:14:d0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:18:28 2025 by rpki-client