Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f527746e-dc54-3a8c-b60c-ade3c30dca4b.roa
File:                     f527746e-dc54-3a8c-b60c-ade3c30dca4b.roa (raw, json)
Hash identifier:          7/y3/u9ufnzjmt2ekm3yHKU023SXIibCE0bb+Y+yWoM=
Subject key identifier:   99:6C:5A:47:4C:DB:90:71:77:5D:BD:1A:0B:E1:2F:68:E7:CD:76:CC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A0F00F121306E091CAE5AEB00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f527746e-dc54-3a8c-b60c-ade3c30dca4b.roa
Signing time:             Mon 02 Jun 2025 14:39:47 +0000
ROA not before:           Mon 02 Jun 2025 14:39:47 +0000
ROA not after:            Sun 31 Aug 2025 14:39:47 +0000
asID:                     834
IP address blocks:        172.252.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0f:00:f1:21:30:6e:09:1c:ae:5a:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun  2 14:39:47 2025 GMT
            Not After : Aug 31 14:39:47 2025 GMT
        Subject: CN=5de219e1-a785-4882-8cac-289b36c2dde2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:50:b7:4d:c5:15:c6:b6:ee:e7:61:d0:db:b1:
                    fc:43:f7:bc:37:80:4e:99:77:af:ec:74:4e:19:78:
                    e8:03:7e:1b:c6:bf:67:09:e3:7f:6f:b9:be:10:73:
                    24:c4:82:a5:6b:4c:0e:4f:99:c5:31:18:cb:85:77:
                    93:98:ad:a3:3f:8a:18:80:72:2d:0b:96:76:17:c8:
                    70:e8:57:61:28:e8:72:12:2f:bf:61:38:c9:a2:a5:
                    a6:b8:bf:34:cb:f9:a7:3f:a4:e8:a1:66:8c:53:a0:
                    4d:e6:3e:d4:87:c3:5c:c2:8a:e3:c7:3c:78:ab:f0:
                    75:7e:dc:f3:73:1b:80:78:69:cf:f8:2a:2d:d4:6f:
                    1d:d5:b2:c9:af:57:a9:36:36:a4:08:69:28:74:86:
                    1b:ef:cf:34:33:0c:24:44:c3:7c:83:65:b3:00:5b:
                    24:2b:60:bd:fb:c5:55:bf:d1:bd:ef:cc:c8:81:14:
                    63:ef:14:fb:15:cb:e4:a4:64:6b:b0:9e:ad:85:b2:
                    b0:77:e6:29:9d:bf:8f:96:89:be:72:82:00:d4:6e:
                    ba:a4:3f:5c:82:23:ab:42:29:89:81:03:cf:2c:f6:
                    35:d9:a6:ed:12:2e:40:a5:28:95:96:b2:6f:5b:cf:
                    a5:50:4b:09:47:a3:14:ab:81:92:7d:88:90:86:6f:
                    c1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6C:5A:47:4C:DB:90:71:77:5D:BD:1A:0B:E1:2F:68:E7:CD:76:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f527746e-dc54-3a8c-b60c-ade3c30dca4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:cd:fb:3f:64:ee:8f:8a:06:ca:88:81:3f:1c:52:8f:4c:b3:
         1a:dd:cd:66:0d:ba:5e:60:ff:6d:b2:cb:58:e3:15:ba:a3:85:
         44:55:71:0c:07:9c:87:e9:ed:8b:3b:81:9f:9f:0e:71:7a:c9:
         1c:03:0f:39:db:13:e2:b4:63:74:a9:55:17:e6:ec:ce:a2:e1:
         85:59:0f:da:b0:49:6a:3d:5c:f8:11:95:af:93:51:5d:17:5f:
         57:33:e6:f6:8f:dd:6b:99:99:e0:45:1d:38:12:65:31:1a:25:
         e3:d8:3a:58:dd:69:23:e5:c2:b8:41:23:3e:aa:45:9f:5b:bd:
         f8:0c:84:6b:5b:1f:82:d6:0c:32:7c:ea:94:41:3c:4d:dc:90:
         59:bf:a5:8c:70:34:39:ec:87:24:56:3e:a6:28:eb:fd:1d:01:
         98:7a:94:d1:2b:48:da:e6:c8:02:46:64:1e:b4:fa:a2:52:de:
         6a:e9:fd:33:17:17:93:32:cb:d1:2f:39:b2:b3:43:73:59:36:
         d2:fb:d4:f2:ea:02:9f:3c:ff:1b:55:10:5b:a0:81:38:34:64:
         0d:1c:77:d8:a8:1b:89:15:40:ec:a9:d5:ba:9e:56:2f:28:2c:
         cf:e3:21:9b:bb:22:39:64:82:dc:52:fa:d4:f0:3a:3b:2e:d6:
         7a:9a:60:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:43:03 2025 by rpki-client