Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/be103ab9-f254-308e-9595-59376841b2ef.roa
File:                     be103ab9-f254-308e-9595-59376841b2ef.roa (raw, json)
Hash identifier:          B6ROjQkRSkYWJw+SFwYiUzJ4AcvyicxJxQ8Zl+05bQk=
Subject key identifier:   5C:5B:FF:BA:E0:66:87:50:E5:4B:0F:1B:85:54:88:72:2F:BF:4D:E4
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B2496DC26EC2DB0984825D3C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/be103ab9-f254-308e-9595-59376841b2ef.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     400536
IP address blocks:        172.252.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:dc:26:ec:2d:b0:98:48:25:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=b9df6162-f339-46f6-a9ec-68684bd86ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f5:7f:64:da:be:6f:89:72:cc:32:f0:c6:bc:
                    6f:f0:88:95:25:77:be:46:f0:28:c1:2d:2a:df:9c:
                    0d:23:10:3f:e3:0b:eb:46:02:08:f9:23:cc:8c:c3:
                    89:99:83:09:53:9c:94:e4:03:ae:e1:93:c0:0d:b5:
                    bb:17:b6:ce:29:22:e4:17:86:27:17:e7:b3:8b:dd:
                    e7:01:b4:78:be:34:0c:ab:1f:02:0d:b0:78:bd:0c:
                    2a:44:e3:17:3f:fc:3f:9d:81:1f:a7:55:ea:fa:e6:
                    a3:3c:4a:53:80:8a:8f:b3:5a:23:d7:0a:75:7e:69:
                    3b:c0:6e:47:91:1b:20:fd:37:eb:02:1b:1c:12:95:
                    70:74:62:b9:bb:84:b7:ad:d2:f5:d0:1e:6f:5b:f1:
                    25:e1:03:3e:f7:0c:1e:3c:92:e1:0a:35:94:6c:ba:
                    e7:ed:6d:0c:ef:b4:c6:a1:54:27:07:3f:00:ed:4c:
                    f7:21:5b:55:cb:8e:3f:5d:57:b4:56:f5:0b:d8:41:
                    3e:1b:f0:51:24:d9:e2:00:98:08:dd:3b:9c:61:67:
                    35:5f:89:89:bc:99:69:b0:48:51:d8:82:a7:b2:89:
                    48:5f:02:13:2e:2d:ef:5a:35:d5:06:7f:02:3f:5d:
                    3a:f1:e9:cf:ae:43:76:f1:6d:cb:80:f5:c4:8e:e5:
                    05:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:5B:FF:BA:E0:66:87:50:E5:4B:0F:1B:85:54:88:72:2F:BF:4D:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/be103ab9-f254-308e-9595-59376841b2ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:e7:59:c3:22:2b:2a:51:16:49:6f:71:ab:8e:bd:11:b0:fd:
         29:f4:06:c6:b6:4c:64:39:c4:97:00:25:97:4e:db:9d:b8:66:
         06:24:ea:26:94:b2:de:3d:1f:38:5b:e9:03:28:cb:da:8c:6a:
         53:d1:a4:7e:54:28:22:98:f3:40:04:78:c9:12:40:ee:48:b4:
         d8:88:28:65:fc:19:f2:50:2a:f2:33:07:1f:9b:55:60:27:09:
         af:bc:0d:fb:c9:31:65:07:cb:91:48:b6:75:4d:20:9e:59:de:
         07:67:72:ea:3d:ae:84:58:d8:aa:90:9f:60:00:5c:fc:0f:c5:
         51:61:69:e2:bd:f3:e2:9c:de:56:4d:a9:9a:69:03:09:1d:ab:
         10:95:eb:a8:10:43:e2:ed:5a:50:fa:78:7c:19:dd:9d:47:27:
         f2:03:a5:c0:ef:ae:a9:c5:70:c5:98:95:23:a8:b6:9c:a2:b3:
         ef:94:03:20:f8:ad:35:86:32:18:48:91:e2:eb:ad:f0:87:b2:
         6b:53:6c:d6:3c:94:11:06:de:01:a3:85:db:86:db:d4:43:45:
         ea:13:b1:dd:6e:02:f7:7c:18:ff:ef:c3:33:2e:2e:85:4d:5b:
         1d:26:5b:68:7d:e9:dd:04:0c:f0:bd:4f:9b:b5:53:26:7d:f9:
         78:19:fc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:15:47 2025 by rpki-client