Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af0fceb2-d3a5-3b21-b0f0-7ccca8a285cd.roa
File:                     af0fceb2-d3a5-3b21-b0f0-7ccca8a285cd.roa (raw, json)
Hash identifier:          zrXi160N460TWyrho+9MAaxyvyr+GuIe0+3qtbpBOw8=
Subject key identifier:   E4:F8:48:AF:B6:77:C1:86:D9:D4:38:FA:78:AA:4B:18:C9:A9:38:1E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B6D2CC8ED2A3AA52796B66FC8
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af0fceb2-d3a5-3b21-b0f0-7ccca8a285cd.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     6939
IP address blocks:        172.252.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:c8:ed:2a:3a:a5:27:96:b6:6f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=c93bc4ee-facc-4a8d-9c88-907753a0b6b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:df:f0:34:ad:2e:3e:7a:ee:ce:47:23:73:55:
                    a7:d9:70:0d:92:e7:98:ac:47:68:93:1b:33:5d:bd:
                    62:4c:b5:60:76:0a:de:53:68:f7:c1:4f:5d:2d:06:
                    43:90:d9:6b:de:0f:1a:cf:99:2c:09:0e:7a:7d:6e:
                    21:75:73:da:6b:5e:cb:9f:51:ec:52:c0:82:2d:0d:
                    1f:a5:7f:4e:b3:b3:41:06:5c:52:52:f3:25:77:b0:
                    48:42:89:41:3b:3f:66:bb:73:05:b9:42:a5:f5:54:
                    8a:84:56:11:b2:af:60:26:25:2f:18:d4:2d:66:23:
                    40:1a:4b:63:cc:6c:ee:d6:8c:5f:c9:bc:1f:55:6a:
                    e7:b2:01:7b:fb:8b:30:f0:01:c6:29:d2:a3:5f:fa:
                    ee:e4:a5:a9:ef:8e:22:f6:57:6f:74:1c:5d:52:d9:
                    7b:d3:5a:ff:2d:8e:d0:e8:93:48:f6:d2:33:a1:ce:
                    cd:e9:e6:8a:a1:81:a3:b8:4b:69:0a:9a:a5:4e:f6:
                    bd:00:9a:43:1f:77:2a:b2:f7:99:d2:76:08:66:8b:
                    96:9d:b0:08:bd:21:33:85:5d:6d:30:08:15:23:91:
                    61:df:10:ee:0e:37:34:e0:f0:ff:20:53:57:fb:f4:
                    67:80:40:2e:09:67:c9:14:32:62:b7:67:2a:6d:3c:
                    61:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F8:48:AF:B6:77:C1:86:D9:D4:38:FA:78:AA:4B:18:C9:A9:38:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af0fceb2-d3a5-3b21-b0f0-7ccca8a285cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:bf:dc:07:b5:28:11:05:de:7c:c0:bf:79:65:92:e5:f0:d3:
         20:b8:53:a2:68:0e:e6:39:42:ac:5b:8d:09:e7:94:d6:da:fb:
         55:bd:e0:c2:f9:bb:2b:e9:50:f1:f8:5f:b7:29:94:47:f6:06:
         a6:f4:d3:6c:56:7c:99:e4:3d:53:ee:80:35:f8:e1:f2:38:0c:
         11:59:88:1d:a3:09:26:39:85:ea:29:8e:3d:26:e4:60:26:01:
         4b:02:b6:4c:19:de:0d:cb:5a:23:a4:da:20:2e:fb:a8:fb:34:
         4f:83:eb:03:cf:f8:72:54:38:3a:81:22:d0:6e:4c:73:5f:a2:
         7a:2a:0f:a9:8e:8c:8e:74:8b:05:ed:e7:e9:a1:8f:c2:f6:33:
         6b:22:2e:56:0e:a4:ff:d1:1c:e2:9f:43:c4:34:97:51:b0:6b:
         56:5f:38:43:64:6f:f6:f9:89:35:cb:d7:fc:a9:06:38:3b:e8:
         b1:23:de:d3:58:f3:fa:50:9d:d4:fe:23:12:49:b5:97:2b:7f:
         c8:6f:28:75:d3:fc:76:7b:73:c5:f0:df:81:89:5c:b4:9f:7e:
         ed:38:d7:fb:23:fe:81:f5:ef:1c:fe:3c:74:e3:dc:7b:64:67:
         0e:dc:f9:7e:ff:6b:df:77:79:4f:ae:a1:10:14:1f:db:8c:e7:
         40:9d:b0:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLMjtKjqlJ5a2b8gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
YzkzYmM0ZWUtZmFjYy00YThkLTljODgtOTA3NzUzYTBiNmI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9/wNK0uPnruzkcjc1Wn2XANkueYrEdokxsz
Xb1iTLVgdgreU2j3wU9dLQZDkNlr3g8az5ksCQ56fW4hdXPaa17Ln1HsUsCCLQ0f
pX9Os7NBBlxSUvMld7BIQolBOz9mu3MFuUKl9VSKhFYRsq9gJiUvGNQtZiNAGktj
zGzu1oxfybwfVWrnsgF7+4sw8AHGKdKjX/ru5KWp744i9ldvdBxdUtl701r/LY7Q
6JNI9tIzoc7N6eaKoYGjuEtpCpqlTva9AJpDH3cqsveZ0nYIZouWnbAIvSEzhV1t
MAgVI5Fh3xDuDjc04PD/IFNX+/RngEAuCWfJFDJit2cqbTxhTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOT4SK+2d8GG2dQ4+niqSxjJqTgeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYWYwZmNlYjItZDNhNS0z
YjIxLWIwZjAtN2NjY2E4YTI4NWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPyEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJC/3Ae1KBEF3nzAv3llkuXw0yC4U6JoDuY5QqxbjQnnlNba+1W94ML5
uyvpUPH4X7cplEf2Bqb002xWfJnkPVPugDX44fI4DBFZiB2jCSY5heopjj0m5GAm
AUsCtkwZ3g3LWiOk2iAu+6j7NE+D6wPP+HJUODqBItBuTHNfonoqD6mOjI50iwXt
5+mhj8L2M2siLlYOpP/RHOKfQ8Q0l1Gwa1ZfOENkb/b5iTXL1/ypBjg76LEj3tNY
8/pQndT+IxJJtZcrf8hvKHXT/HZ7c8Xw34GJXLSffu041/sj/oH17xz+PHTj3Htk
Zw7c+X7/a993eU+uoRAUH9uM50CdsAQ=
-----END CERTIFICATE-----
Generated at Sat Oct 11 13:27:20 2025 by rpki-client