Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2e0be475-cd3c-3f1c-8d12-cf92b7dda257.roa
File:                     2e0be475-cd3c-3f1c-8d12-cf92b7dda257.roa (raw, json)
Hash identifier:          6Ci9XbfyfQMNTTFatohijpLhaUBBIFUqh/ffy322hp4=
Subject key identifier:   A1:A4:B7:D1:37:2A:1E:85:F4:9A:9C:C9:42:19:12:26:03:D3:69:47
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849D164FBE4837FA9FE2C944100
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2e0be475-cd3c-3f1c-8d12-cf92b7dda257.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     18779
IP address blocks:        172.252.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:64:fb:e4:83:7f:a9:fe:2c:94:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=0dddf3b5-1bbe-4d52-8aa0-1752121a13e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fc:0c:e0:0c:85:f7:34:3b:20:64:64:57:cf:
                    6d:c6:b2:4f:53:6d:9f:d0:c3:ea:1d:6a:05:cc:d2:
                    f7:0d:d6:77:a9:3e:d0:b3:74:7e:40:5c:58:70:80:
                    88:b6:68:4d:45:dd:d3:4f:1c:7d:d8:0b:2a:79:03:
                    49:d7:7f:87:6d:a5:ce:18:12:5e:0f:05:f1:84:92:
                    de:7a:6c:f7:4c:a4:9e:71:46:84:71:36:ba:b4:83:
                    24:e8:29:7c:7d:44:0d:08:d5:c8:37:ee:da:50:01:
                    fd:b1:32:c8:03:ac:bc:9e:c4:17:35:53:ba:e5:8d:
                    65:e5:0f:06:5d:57:d2:d1:65:0d:86:3e:f1:83:d1:
                    a7:5f:8e:bd:58:28:66:93:38:f8:53:30:3d:8e:3d:
                    da:9f:b0:e2:5f:07:46:8f:66:c2:8a:b1:33:73:bd:
                    b1:8f:ea:4e:55:d5:48:12:ce:93:9d:ff:db:fa:27:
                    63:b8:3e:33:fd:23:14:d0:3f:5f:06:fb:45:f7:69:
                    27:34:e2:c0:72:cf:8b:e5:33:60:c0:39:cd:ed:ac:
                    da:cb:97:ab:ca:91:de:0c:dc:8a:5b:96:bf:b9:a4:
                    2f:0c:98:cf:b5:1a:3c:49:ae:a3:55:d5:1a:12:ea:
                    1b:86:bb:d6:b5:51:ed:2a:6b:d9:c6:d0:ba:34:57:
                    93:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A4:B7:D1:37:2A:1E:85:F4:9A:9C:C9:42:19:12:26:03:D3:69:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2e0be475-cd3c-3f1c-8d12-cf92b7dda257.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:a9:ff:6b:f5:39:68:f9:ce:d9:8a:ad:cc:ad:d0:43:01:42:
         96:0e:3a:8d:26:58:de:f9:f9:5b:b2:40:b9:f4:5f:6f:cd:14:
         43:cf:5c:22:78:36:6a:c0:ac:35:0a:4c:fe:0d:19:9f:09:9f:
         86:b9:15:54:3a:ad:28:7d:be:cb:1d:f4:b4:2e:de:a4:bc:df:
         18:08:aa:3e:cb:cb:0f:80:7a:95:a5:12:53:08:99:af:a5:21:
         d5:ed:8c:c9:aa:c9:48:40:ad:23:03:62:3d:2f:2a:92:9f:aa:
         90:dc:c5:52:f8:d3:ec:92:36:06:0a:36:4c:28:e4:6b:ec:70:
         60:49:fa:37:38:f4:86:29:4f:ec:fe:4c:48:85:33:ff:c7:e5:
         10:0a:61:e0:82:27:42:96:0f:2f:af:9b:b7:d0:1e:ea:2a:3c:
         1e:0e:8b:16:e5:12:af:4d:51:36:ca:7d:5d:bf:4b:ee:cf:a5:
         19:82:1a:67:75:a6:93:30:1c:16:df:96:2a:79:ac:77:9f:e3:
         e6:f6:c7:12:fb:6c:4c:8a:a1:09:51:be:19:40:f3:f4:b1:10:
         01:f4:ba:0e:4f:68:ae:65:13:c2:05:63:69:ca:14:21:d4:1c:
         5e:31:3f:8f:9d:f1:85:8b:28:56:47:43:8e:aa:1c:69:43:b4:
         41:a3:aa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:30:17 2025 by rpki-client