Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e11e7c4e-ebf9-3895-bd28-d8bf65d3f0af.roa
File:                     e11e7c4e-ebf9-3895-bd28-d8bf65d3f0af.roa (raw, json)
Hash identifier:          jJv8ajcGx5hlskpmuDKM4qHuwcNmrTy35oPK1m4DZtU=
Subject key identifier:   DD:C3:70:94:F2:90:51:CA:C6:7D:96:7E:D6:52:F8:38:17:47:67:96
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B44B1C481C21295565EE3C680
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e11e7c4e-ebf9-3895-bd28-d8bf65d3f0af.roa
Signing time:             Sun 21 Sep 2025 13:00:42 +0000
ROA not before:           Sun 21 Sep 2025 13:00:42 +0000
ROA not after:            Sat 20 Dec 2025 14:00:42 +0000
asID:                     18779
IP address blocks:        172.252.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:44:b1:c4:81:c2:12:95:56:5e:e3:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 21 13:00:42 2025 GMT
            Not After : Dec 20 14:00:42 2025 GMT
        Subject: CN=adf72295-a743-47a9-93bf-025d1b3d883a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:74:ce:e2:4e:06:d6:9b:de:f2:28:1a:d1:3f:
                    3f:2a:bc:b9:97:6f:db:22:a6:3d:a4:c1:d0:8d:0b:
                    bd:09:1d:0b:a3:a6:44:cb:92:9b:f8:8a:0d:d3:74:
                    8e:50:ac:23:28:cd:f3:1d:1b:5b:85:af:c2:5e:bf:
                    05:f3:06:93:af:91:08:b2:2a:79:8a:64:7a:fc:07:
                    bd:ea:73:70:f1:08:d3:ce:35:ab:94:a6:e9:c5:be:
                    02:10:87:6c:4a:58:d6:01:94:72:04:d4:0c:7c:db:
                    0c:5b:c8:aa:2b:55:a9:89:1f:c2:43:33:63:c3:8e:
                    38:d1:ec:0c:05:50:df:50:fb:a3:f9:0a:3d:d5:75:
                    c3:2d:20:39:50:14:b9:5d:1a:11:f7:6f:76:a3:25:
                    11:7d:e2:7a:79:71:4b:c9:2f:a6:23:76:da:85:f0:
                    08:e3:09:37:ea:46:74:38:44:82:17:77:d4:2f:e6:
                    c5:fa:32:9b:f5:b7:c5:b3:11:80:fb:0f:7e:3a:35:
                    8f:d6:76:09:cd:74:e7:0d:0c:5d:58:7e:bf:bb:7d:
                    75:b8:50:8e:4c:36:33:34:5d:8c:ea:67:b6:ec:d9:
                    82:4d:3b:fe:6c:45:e4:fe:c4:a8:43:bb:02:3d:2f:
                    ce:8c:55:5f:80:f5:c0:0b:c4:11:fc:02:98:b7:09:
                    0a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C3:70:94:F2:90:51:CA:C6:7D:96:7E:D6:52:F8:38:17:47:67:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e11e7c4e-ebf9-3895-bd28-d8bf65d3f0af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:b3:10:78:f6:24:29:73:c2:28:fa:df:f6:e6:f1:d3:e0:a1:
         76:f3:0c:c1:3d:ed:b7:f7:5f:64:26:04:c5:f8:33:61:45:f4:
         22:a5:e0:8e:d3:12:02:61:31:9f:12:22:3a:6e:26:6d:1e:32:
         6f:0f:f0:6e:03:12:1c:ed:85:33:8a:cc:61:f2:f6:fd:80:48:
         e0:03:01:df:e3:83:99:54:d3:c9:a8:c3:f9:c4:4b:6d:78:01:
         e3:b2:e3:15:23:43:65:42:db:88:36:f0:df:61:99:cc:3b:20:
         78:26:21:25:a1:ab:99:4a:23:eb:dd:22:6a:1b:8a:91:64:d2:
         47:a3:ef:64:87:72:c1:d7:8c:d1:93:9f:86:81:1a:e9:4b:d2:
         3c:04:40:bf:0c:77:e7:7b:9e:9f:27:d6:54:a8:6f:cd:af:98:
         ae:a2:36:4d:b0:67:5b:71:a5:1e:99:d5:83:66:b0:00:ac:56:
         70:36:30:31:a8:b4:73:aa:fd:0e:9e:1c:44:6c:ff:16:83:2b:
         96:df:03:91:d7:2f:c9:7f:fb:a9:12:d3:44:9b:5a:a0:a9:81:
         7b:94:41:b2:45:9c:e9:d5:5d:ce:f6:d0:51:fe:f6:b2:c9:fb:
         7f:e9:ee:19:d3:c1:95:d7:7f:9e:b6:23:1f:a1:2c:4c:56:b3:
         c8:ca:e7:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEscSBwhKVVl7jxoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk
YWRmNzIyOTUtYTc0My00N2E5LTkzYmYtMDI1ZDFiM2Q4ODNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHTO4k4G1pve8iga0T8/Kry5l2/bIqY9pMHQ
jQu9CR0Lo6ZEy5Kb+IoN03SOUKwjKM3zHRtbha/CXr8F8waTr5EIsip5imR6/Ae9
6nNw8QjTzjWrlKbpxb4CEIdsSljWAZRyBNQMfNsMW8iqK1WpiR/CQzNjw4440ewM
BVDfUPuj+Qo91XXDLSA5UBS5XRoR9292oyURfeJ6eXFLyS+mI3bahfAI4wk36kZ0
OESCF3fUL+bF+jKb9bfFsxGA+w9+OjWP1nYJzXTnDQxdWH6/u311uFCOTDYzNF2M
6me27NmCTTv+bEXk/sSoQ7sCPS/OjFVfgPXAC8QR/AKYtwkKaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN3DcJTykFHKxn2WftZS+DgXR2eWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZTExZTdjNGUtZWJmOS0z
ODk1LWJkMjgtZDhiZjY1ZDNmMGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPxgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFezEHj2JClzwij63/bm8dPgoXbzDME97bf3X2QmBMX4M2FF9CKl4I7T
EgJhMZ8SIjpuJm0eMm8P8G4DEhzthTOKzGHy9v2ASOADAd/jg5lU08mow/nES214
AeOy4xUjQ2VC24g28N9hmcw7IHgmISWhq5lKI+vdImobipFk0kej72SHcsHXjNGT
n4aBGulL0jwEQL8Md+d7np8n1lSob82vmK6iNk2wZ1txpR6Z1YNmsACsVnA2MDGo
tHOq/Q6eHERs/xaDK5bfA5HXL8l/+6kS00SbWqCpgXuUQbJFnOnVXc720FH+9rLJ
+3/p7hnTwZXXf562Ix+hLExWs8jK51Q=
-----END CERTIFICATE-----
Generated at Sat Oct 11 11:09:05 2025 by rpki-client