Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/10008147-5b7d-388a-a1e6-699a4050b99d.roa
File:                     10008147-5b7d-388a-a1e6-699a4050b99d.roa (raw, json)
Hash identifier:          uW4H0q7aRTmMcWp2N1QvwGKeI0L2fElpceM1I9tNQuw=
Subject key identifier:   10:D4:0F:DB:3A:2B:95:D4:0C:74:79:6A:42:E9:FE:38:61:25:53:18
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AB220BA72A4789FAF6168FFC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/10008147-5b7d-388a-a1e6-699a4050b99d.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     18779
IP address blocks:        172.252.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:ba:72:a4:78:9f:af:61:68:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=22036b2b-b68c-4090-8f2f-171f68bb4266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c6:63:47:77:e8:73:ee:69:28:7c:f7:3b:7e:
                    94:37:26:2e:ca:78:3a:e0:e9:a9:49:2e:a0:1e:d0:
                    98:e5:a1:df:d8:83:6e:eb:20:dc:b9:8c:77:43:07:
                    fd:2b:b4:db:09:07:80:a6:cb:b6:dd:a8:46:c8:32:
                    b6:27:75:a5:ab:bd:3c:14:6f:01:35:0e:c4:ef:60:
                    16:2d:ad:ff:16:14:13:f1:35:11:c4:6e:cd:12:3e:
                    e2:eb:93:08:38:fa:5e:bb:c7:37:df:4c:00:ce:f5:
                    d4:ca:29:b9:8b:30:15:b2:87:d8:40:1b:ad:fb:ce:
                    d8:ef:c3:9c:51:61:cc:9f:5e:61:11:f9:aa:77:ba:
                    bb:f6:ae:92:e1:2f:fc:9d:b0:28:a3:d9:c3:9c:0f:
                    0f:ed:3a:67:02:a5:e1:56:88:91:bf:39:47:87:88:
                    7b:1b:f9:72:56:62:4d:8c:2f:c8:e2:7a:5b:23:85:
                    53:c9:b5:ee:dc:af:3a:75:b6:8d:13:5a:0a:da:24:
                    2c:00:19:05:74:9f:3a:c5:a2:01:b4:a6:29:31:ac:
                    62:c5:ee:77:bf:a8:69:a3:b4:6a:df:2d:52:3c:32:
                    82:97:3d:f6:f8:a5:20:f6:75:02:f2:24:7d:d1:78:
                    a4:7c:2a:f6:0f:0e:9b:c9:df:58:6e:e5:18:b5:0c:
                    80:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D4:0F:DB:3A:2B:95:D4:0C:74:79:6A:42:E9:FE:38:61:25:53:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/10008147-5b7d-388a-a1e6-699a4050b99d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:89:f4:f8:13:66:8c:15:12:ce:46:07:1d:ce:fb:61:a6:c8:
         48:bd:b7:14:e7:cd:8d:c8:df:45:38:58:e4:32:7f:42:85:f2:
         4a:39:26:c0:d3:9c:f0:dc:09:19:90:b9:e1:d8:a8:ed:da:65:
         b0:8d:25:61:e0:1a:01:29:ae:ea:b5:e9:85:00:4d:46:80:2a:
         f6:e4:69:85:6f:4f:f6:59:1b:84:26:3d:08:28:a6:73:06:12:
         f5:7f:7c:c7:18:85:89:90:a1:03:49:fa:19:6c:20:7e:1b:fd:
         d9:49:a1:51:ff:62:09:16:44:c7:17:d3:ef:a6:3a:cb:67:a0:
         77:d8:0e:cf:18:ba:0c:f1:bf:dd:e2:11:e8:6e:ae:92:31:d9:
         2f:7a:40:39:cb:c3:0c:f4:3d:ae:07:1e:18:8c:cf:82:f8:ae:
         d4:b7:db:ad:43:ce:35:6c:da:8d:05:d5:a0:d0:77:ab:68:b2:
         db:27:95:03:43:f1:bc:f6:61:0a:22:50:58:e2:c0:10:7f:ad:
         a2:35:83:19:72:b0:e1:3f:cc:ea:50:0c:aa:52:99:ce:7e:43:
         c6:8e:66:6c:5e:68:03:7c:36:a8:d7:ba:76:85:d6:74:e3:60:
         ea:66:3f:5d:a8:e3:3d:3f:a0:27:32:16:1d:e9:20:d7:9f:6b:
         04:52:8b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:31:47 2025 by rpki-client