Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/eb7438c4-c3f5-3edd-a4fc-a45a4014367b.roa
File:                     eb7438c4-c3f5-3edd-a4fc-a45a4014367b.roa (raw, json)
Hash identifier:          6nOwEkURhCEZkQts/li+kylBAWfYWSzqAPhfEBPw8tQ=
Subject key identifier:   09:6B:01:DD:3F:B0:2C:FD:0A:71:E3:14:44:BE:64:26:FB:76:75:A8
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B6D2CCD09F58610D3EF67A480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/eb7438c4-c3f5-3edd-a4fc-a45a4014367b.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     6939
IP address blocks:        172.252.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:cd:09:f5:86:10:d3:ef:67:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=b9210d66-046b-4903-8358-4022db6c7520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6f:48:cd:57:a8:aa:6a:4a:86:a6:09:0c:2c:
                    85:88:34:bb:2a:cf:00:36:f8:5c:f1:01:77:aa:24:
                    32:f4:9f:25:d1:13:19:4b:d6:55:bc:06:7d:0e:3e:
                    90:58:39:d1:43:30:73:f4:de:4a:c6:36:43:6c:1f:
                    b2:74:72:3f:3e:05:df:9c:cf:9f:05:8d:68:ad:93:
                    1b:cc:c0:83:dc:7f:86:83:4b:70:b9:73:cd:3f:37:
                    60:44:87:46:36:75:c1:29:c8:7d:1d:55:bc:9d:f0:
                    d3:c6:aa:51:5b:69:73:19:81:c6:ee:0b:31:73:16:
                    9a:f6:43:63:27:46:46:c2:a9:1c:35:c2:40:e4:48:
                    82:72:9e:3f:12:ab:17:68:39:c6:97:3b:33:0c:62:
                    e2:82:ed:e9:c9:85:86:e6:9e:c5:bb:8c:66:98:9a:
                    be:3e:04:c3:e8:d1:71:ed:37:69:90:a5:ca:82:4b:
                    a7:7d:2d:6d:1d:e6:3f:64:cb:8f:4e:50:9e:11:63:
                    c8:e9:cf:90:37:9f:98:09:94:80:a6:ea:b0:d8:e2:
                    24:a0:fa:b7:72:67:24:96:67:42:70:bf:55:c0:46:
                    4c:60:74:43:a4:b0:f5:a7:71:3e:54:fb:39:f6:c3:
                    12:99:74:61:6b:b4:03:58:19:e5:c4:5d:a6:c3:b5:
                    cf:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6B:01:DD:3F:B0:2C:FD:0A:71:E3:14:44:BE:64:26:FB:76:75:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/eb7438c4-c3f5-3edd-a4fc-a45a4014367b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:b7:a0:77:b8:94:d4:a4:1a:bc:04:aa:f0:32:c9:58:a5:1b:
         2a:d5:de:6c:75:bb:42:d6:42:97:37:19:18:63:d1:4a:c6:0f:
         da:8f:4b:31:3d:57:af:4f:4d:a3:2c:0a:3f:49:07:07:8b:58:
         37:65:02:d8:d7:06:d8:79:dd:41:36:54:6f:d8:1a:9e:72:72:
         c4:02:31:f9:f2:e7:47:45:98:7e:a7:93:bd:b4:ee:e5:8f:40:
         ef:ad:cd:7f:ea:66:48:73:20:66:98:24:97:9b:56:78:02:6b:
         62:bc:7d:fb:e7:4c:96:d4:be:94:84:b4:e0:fb:82:ef:c6:6e:
         a9:74:29:66:ed:e6:c9:fa:a2:ca:a7:d2:37:61:38:db:0a:7a:
         a7:19:3d:04:73:ed:0e:be:fc:9c:6f:87:a2:cf:92:26:4f:aa:
         bd:43:e5:40:94:75:a7:95:ed:7d:30:8a:57:b7:c7:5a:c8:c8:
         ab:93:aa:a8:8f:48:cf:c6:5e:8c:e3:b3:3b:63:a2:95:fb:ce:
         87:2b:69:4a:e5:cb:f4:68:44:92:54:77:cd:7b:7c:02:f6:51:
         28:29:05:06:5c:3a:4e:f3:06:2a:93:94:2f:51:31:15:8e:fe:
         75:da:5b:77:5a:b9:4a:24:f2:e1:2f:0a:9a:9c:87:c0:6f:a1:
         18:ec:6a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:17:44 2025 by rpki-client