Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cffb8cf9-c618-3477-bc32-214f30c996ca.roa
File:                     cffb8cf9-c618-3477-bc32-214f30c996ca.roa (raw, json)
Hash identifier:          CtfK9+uI3g6ptcJ7/f7tWDlNdcAiA5Qs7PQZ122yJ7s=
Subject key identifier:   24:4F:D0:D7:DF:01:89:EA:FC:8F:66:67:2D:AD:ED:25:5F:B9:DE:5E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B6D2CCD636888E9974648A000
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cffb8cf9-c618-3477-bc32-214f30c996ca.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     6939
IP address blocks:        172.252.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:cd:63:68:88:e9:97:46:48:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=2d00c127-6482-4886-bb89-ecf27e3a962b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ee:12:14:38:6d:dc:3e:21:3d:d1:98:7b:4f:
                    7a:5f:eb:5e:cd:dd:64:65:e7:5d:1f:3a:95:2c:bd:
                    96:b4:f1:c6:99:67:8a:24:3a:81:2f:ee:ca:48:c2:
                    89:83:4f:78:0d:8f:4a:7b:e9:df:8f:b3:4f:43:ed:
                    90:d1:11:0d:e6:3c:97:b7:47:bc:da:c2:35:46:5c:
                    a5:20:d5:7d:c7:b3:ed:41:46:00:f1:d4:de:52:80:
                    49:17:1b:48:3b:af:9a:74:1f:40:68:95:26:cd:c9:
                    f0:30:b4:5a:2e:91:fc:8d:2e:10:9d:95:f2:e7:2e:
                    ad:73:e4:ef:26:5f:94:65:ee:be:bd:87:b4:49:a8:
                    e1:c4:68:92:09:2d:cb:55:3a:9b:45:8a:4b:5d:1e:
                    46:db:86:28:4b:00:99:a1:2c:a5:02:3f:ec:5d:38:
                    1a:48:fd:12:bb:98:f2:a9:f8:47:fb:71:a3:96:a1:
                    fc:25:da:4d:06:4f:86:c5:e4:bd:74:84:16:06:0e:
                    e2:ca:b6:ae:e6:71:01:a6:61:48:6e:2c:8e:1c:2d:
                    dc:48:8c:8f:f9:fc:01:97:b0:7b:61:b4:aa:dd:c8:
                    06:e5:cf:3e:e3:f7:11:c4:8b:ba:38:a8:32:e7:02:
                    cb:4f:cd:05:f8:d7:57:5b:a4:be:55:56:f2:2c:3b:
                    f4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4F:D0:D7:DF:01:89:EA:FC:8F:66:67:2D:AD:ED:25:5F:B9:DE:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cffb8cf9-c618-3477-bc32-214f30c996ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:9d:36:03:00:d7:60:76:c8:87:9b:e5:1a:8d:b3:ad:a3:03:
         de:32:19:78:bf:63:ac:43:aa:c8:6f:5c:4b:bf:4b:17:55:9e:
         6b:76:87:e4:dc:24:d3:89:21:b4:22:0d:9f:c2:db:f3:a0:16:
         21:e3:0c:11:bc:dd:dc:9d:a3:b1:2f:26:51:bc:e2:2c:d6:3c:
         0e:ba:40:5f:de:44:75:d1:43:5f:28:b3:64:bb:f2:ae:e5:f3:
         cc:72:b8:88:df:18:30:63:f1:8a:36:04:4e:b3:86:5d:a3:10:
         52:53:75:5d:32:fc:e9:ee:2f:a6:09:d0:f5:1d:64:d0:5c:b9:
         82:d2:3b:eb:35:34:3f:f5:a8:8a:d3:7d:55:68:7a:62:14:3f:
         c4:2a:8e:91:1a:c6:74:b0:45:99:f8:42:91:90:ff:a7:24:47:
         4a:5c:83:9d:48:a8:96:6d:20:f0:6b:3d:03:5a:a9:2c:0b:29:
         b8:ea:19:fe:4f:e8:3b:b9:29:18:e4:09:41:ed:d8:00:13:75:
         fe:a4:7e:5e:38:07:d5:cd:1e:6f:c2:66:84:d1:f2:00:2e:ad:
         c8:f2:f8:cb:62:0f:91:8c:e5:db:e3:dc:35:b7:1b:76:2f:cf:
         3d:cf:24:76:08:3d:27:b6:1f:ca:c2:b5:8a:2f:d9:09:1c:ad:
         7e:c2:7d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:08:51 2025 by rpki-client