Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7b85a506-d1a8-3fdc-8b7c-2d60c8d0d664.roa
File:                     7b85a506-d1a8-3fdc-8b7c-2d60c8d0d664.roa (raw, json)
Hash identifier:          IWTFSkHu8RAeXv+9SjKI5kk3Av9nELKq801MwQup17I=
Subject key identifier:   95:E9:BD:EC:5E:E8:CC:5B:17:7E:EF:32:CE:57:1A:EF:98:D1:29:FA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B6D2CCAA22287BB25988F5300
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7b85a506-d1a8-3fdc-8b7c-2d60c8d0d664.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     6939
IP address blocks:        172.252.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:ca:a2:22:87:bb:25:98:8f:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=2c4aa580-e24f-470c-bbfb-2649451a8218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7d:bd:ad:a1:87:8b:6a:80:d4:b1:75:f7:f1:
                    a5:ec:c0:94:ec:46:42:f8:a5:a4:6a:29:fc:94:76:
                    e2:bc:02:ff:a2:cd:5e:d9:b8:14:16:ca:ac:d1:eb:
                    c1:6b:12:ae:b3:93:5f:eb:3b:29:68:04:eb:d9:75:
                    25:49:99:61:71:1d:55:3e:a2:66:70:f4:07:14:48:
                    2f:83:54:24:7e:62:85:d5:fe:1f:1f:41:fb:22:13:
                    3e:0b:e9:80:96:e3:3f:3b:9b:9f:dc:17:21:57:25:
                    c6:b5:72:30:dc:30:e9:61:6e:20:51:5b:9c:b4:07:
                    c4:fa:db:da:29:4e:ea:73:c2:51:9d:c3:c7:d9:26:
                    7f:44:ac:5c:36:6a:b6:4f:15:d1:56:9f:db:68:08:
                    d1:c7:1a:7f:1e:b2:cd:04:ce:89:30:71:d2:b7:db:
                    70:6d:43:e0:63:2f:fb:cc:e9:19:34:a0:b4:f4:0a:
                    03:64:f0:0d:bd:fa:53:b2:95:f5:3c:23:04:97:f1:
                    8f:8f:3d:91:5a:fe:e7:f0:6c:56:b7:06:56:71:56:
                    2f:4a:7f:53:1e:d2:5a:67:6b:66:67:3f:86:f2:00:
                    19:14:83:02:0d:94:3a:72:42:34:20:ba:4b:a7:d2:
                    56:e1:25:68:e1:ef:6e:c2:54:5c:28:21:a9:41:56:
                    76:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E9:BD:EC:5E:E8:CC:5B:17:7E:EF:32:CE:57:1A:EF:98:D1:29:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7b85a506-d1a8-3fdc-8b7c-2d60c8d0d664.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:6d:f3:71:74:4f:92:3c:68:28:02:d8:36:b3:ba:1b:26:35:
         f4:56:5e:e0:b9:f4:ec:f7:8f:5f:7e:e3:42:40:fd:c3:7c:c0:
         07:1e:e1:28:ab:a0:8d:5d:31:88:99:77:bf:46:57:54:0e:a6:
         f8:65:31:2c:25:92:ec:3e:84:80:ba:29:6d:87:6a:5a:0c:01:
         f0:f9:78:6d:6d:03:7c:fe:32:40:ac:db:18:57:40:02:69:e7:
         ca:b1:ef:0a:6a:3a:15:16:0f:c4:e2:94:2f:ba:33:78:96:21:
         04:2b:65:e7:6f:bd:91:04:6d:12:2f:13:34:c2:2c:0a:53:15:
         62:05:39:4f:0d:65:43:8f:d1:e8:84:05:da:17:2c:62:4f:eb:
         46:a7:3c:25:38:e8:d1:22:42:31:77:e1:19:c8:25:50:7b:00:
         18:50:38:0c:7b:ce:a4:69:00:3b:a6:ec:f4:e2:7d:75:72:0a:
         b9:21:69:8f:a8:fb:97:aa:ee:7f:88:0e:90:19:49:63:11:a2:
         39:1d:ae:e6:57:b1:09:8c:3e:6f:09:4e:c4:fc:5d:bc:35:53:
         45:7b:72:06:a8:8c:5a:ba:bd:2c:cc:fd:be:1d:60:14:e5:83:
         c0:06:ff:62:7b:ea:c0:dd:32:b6:a3:d3:40:b6:9b:d8:04:c9:
         fa:c3:a1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:17:54 2025 by rpki-client