Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7445f3a4-f808-3bc6-a984-95fe4eba71c7.roa
File:                     7445f3a4-f808-3bc6-a984-95fe4eba71c7.roa (raw, json)
Hash identifier:          +cSqxbESyBHxsp3/oECpisc4pjH4Tz9R6YcNfghYqZQ=
Subject key identifier:   7E:23:ED:2A:05:9E:DC:FE:F6:FF:E0:86:1A:C2:16:F5:F8:36:0F:6D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B6D2CCC6FFE599FBF19905280
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7445f3a4-f808-3bc6-a984-95fe4eba71c7.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     6939
IP address blocks:        172.252.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:cc:6f:fe:59:9f:bf:19:90:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=2ce2f734-10bd-42ec-b5ad-d6827214073e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e9:4a:a6:df:24:b1:1f:d2:95:91:dc:7f:fa:
                    3f:58:db:87:59:10:57:7b:2d:b5:7b:e1:dd:ed:7f:
                    e3:3a:30:ba:30:58:1b:24:be:1a:69:43:72:3b:33:
                    c4:66:ca:75:4e:50:fb:2c:45:38:ea:f1:dc:2c:45:
                    aa:0e:b4:99:6e:0f:a4:c0:9f:e7:50:3a:97:f3:9d:
                    36:36:a7:3a:92:9b:82:ce:c3:33:80:e7:f8:e2:66:
                    aa:6e:ba:33:ba:bb:26:f7:b6:cf:f9:20:63:b6:00:
                    ba:d0:d9:aa:0c:1e:a8:fe:07:38:f5:ea:32:1c:f0:
                    25:01:4c:28:d1:e7:85:0d:32:e0:7d:5f:b9:1d:1a:
                    49:fe:08:b5:81:c4:31:15:ac:1b:f7:8f:20:93:1b:
                    10:19:9c:ab:7e:81:8e:60:31:0d:57:b4:c0:63:6c:
                    8e:9e:f5:7e:8c:41:cb:1b:86:7c:34:a2:32:59:75:
                    f2:a4:ef:cd:49:d6:05:f7:69:76:62:d7:a0:c0:52:
                    f7:45:64:fb:91:b7:f3:02:ca:b1:2e:ee:2b:fa:ce:
                    a1:8e:c5:e6:59:36:5c:97:bc:5b:b1:4f:9a:6d:f9:
                    76:ed:20:6c:7d:a2:6d:d7:25:b6:9f:c4:aa:b5:69:
                    27:07:60:1a:c7:c1:39:d8:d5:c5:2a:10:99:35:d4:
                    83:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:23:ED:2A:05:9E:DC:FE:F6:FF:E0:86:1A:C2:16:F5:F8:36:0F:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7445f3a4-f808-3bc6-a984-95fe4eba71c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:df:08:6e:18:45:ec:05:36:43:ab:55:d6:63:0b:1a:47:35:
         71:9c:14:9b:ce:21:57:46:9d:7f:bb:50:bb:ea:9b:87:d8:c7:
         cd:22:83:55:91:c7:6b:ac:a6:be:c6:fc:68:75:85:5b:e7:72:
         17:13:30:c2:14:21:3d:fe:e8:e6:f1:1f:75:8c:fa:d7:b9:3a:
         15:b6:1a:e6:52:6d:15:02:47:59:4c:ea:d9:69:6d:18:ba:f5:
         56:5c:da:7a:92:fa:cb:99:dc:18:c7:a9:11:97:64:1d:9e:ef:
         8d:7b:b0:75:e5:d3:e4:ed:4a:6a:5a:9e:47:01:91:a3:a2:5f:
         f9:d5:2b:ca:36:aa:f8:68:d5:99:cc:72:25:06:e6:a2:3d:80:
         09:3a:78:07:8b:a4:1c:db:7f:8f:ec:e9:40:02:1d:27:c6:a5:
         c5:49:03:de:0a:0a:8c:2f:9d:7d:50:1b:a5:f2:75:15:51:19:
         36:37:4b:f1:a6:5c:80:0d:06:5c:d8:b5:18:a3:2e:fe:a3:a8:
         64:77:0a:6b:4c:5d:05:1b:c8:c3:ef:c4:eb:3b:f9:1c:49:a9:
         00:34:41:81:07:03:75:48:c7:b3:d1:94:7a:2b:ff:82:f5:6e:
         3a:d8:ca:7a:63:1b:6f:33:f6:e3:d5:0f:b2:9a:61:af:b8:68:
         fa:0e:ce:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:11:26 2025 by rpki-client