Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2c1b859a-2c39-377e-be30-51a7d24f4161.roa
File:                     2c1b859a-2c39-377e-be30-51a7d24f4161.roa (raw, json)
Hash identifier:          pkNW95JuwkxTOEbyMKyQRV6JTA+BBxav0LDY2MdES50=
Subject key identifier:   B4:27:B9:ED:A7:DC:8A:42:CF:F3:D6:5E:C5:71:25:47:42:A7:20:0A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A8DC1E095268D7990C4650A40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2c1b859a-2c39-377e-be30-51a7d24f4161.roa
Signing time:             Fri 18 Jul 2025 00:20:23 +0000
ROA not before:           Fri 18 Jul 2025 00:20:23 +0000
ROA not after:            Thu 16 Oct 2025 00:20:23 +0000
asID:                     6939
IP address blocks:        172.252.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:c1:e0:95:26:8d:79:90:c4:65:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 18 00:20:23 2025 GMT
            Not After : Oct 16 00:20:23 2025 GMT
        Subject: CN=e4381421-609a-48b6-8648-e2b8a1470dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1c:1d:94:09:6c:63:56:a2:f3:be:aa:72:10:
                    07:92:fd:f1:c9:62:55:b4:70:1d:b5:f2:38:9c:1a:
                    e2:18:26:ed:1b:c5:40:ad:ae:e3:d6:4c:28:8f:cb:
                    48:8f:1d:67:19:4d:99:4d:52:8b:db:9a:3e:ab:21:
                    bc:dd:a3:06:5b:06:7b:43:3c:49:11:66:b5:f8:4a:
                    0e:97:2e:bb:ec:b3:28:31:da:33:5a:2a:34:ac:45:
                    d2:38:5b:35:f1:9b:0a:05:0e:00:bc:4c:14:e7:62:
                    6b:d7:b1:0f:cb:1f:48:3a:7b:f0:22:c8:3e:c7:15:
                    0d:43:9e:42:94:8e:18:10:a6:df:01:40:d6:85:57:
                    b1:3c:51:86:a3:2c:ab:55:5d:93:12:e1:77:ec:2e:
                    48:66:2b:7f:48:5c:fe:94:f0:ac:6e:23:20:0c:64:
                    c5:b0:c4:94:ac:76:e5:00:b7:62:03:ce:b0:0d:ff:
                    f3:c5:58:23:fe:40:d5:51:54:c0:7f:a7:b8:9c:28:
                    69:a4:0f:12:61:de:60:5e:4d:8c:cd:cc:3f:f2:78:
                    ed:a4:29:97:66:db:9e:6b:6e:b5:8b:f1:a5:5a:32:
                    11:d1:3c:7c:c8:ff:02:82:01:ab:b8:47:cc:87:0c:
                    fc:11:c3:c2:a6:db:a0:ba:3d:ae:ae:a4:45:09:a7:
                    42:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:27:B9:ED:A7:DC:8A:42:CF:F3:D6:5E:C5:71:25:47:42:A7:20:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2c1b859a-2c39-377e-be30-51a7d24f4161.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:1b:2e:b6:4f:6b:58:f2:4f:8a:4f:d3:2a:4b:a7:86:58:ed:
         f1:11:07:66:68:82:77:71:0f:11:3d:85:52:ff:2e:79:68:f1:
         89:54:9e:56:7d:f4:f7:5c:41:46:d2:b0:9d:42:cb:02:59:5c:
         ad:37:25:1d:fa:6d:35:c5:6e:c0:c6:c2:c1:50:34:a4:f3:77:
         9a:2d:4e:a1:d1:c1:11:f4:78:28:41:ed:50:97:74:8a:85:e2:
         f1:62:2f:b0:37:9d:84:89:8c:ff:07:09:1b:09:28:ff:ac:3e:
         da:77:d7:e0:42:d6:6f:4d:31:fc:fd:20:72:a1:5d:11:13:34:
         b7:d0:cc:38:3c:81:85:3f:b9:15:e4:45:0b:a4:b1:f6:65:93:
         21:63:7b:e1:18:2a:f2:c1:c0:fc:27:f8:85:49:bc:49:6b:fb:
         08:69:63:f8:91:b9:0e:61:ab:00:ff:87:67:93:98:1c:c2:8f:
         02:cb:c3:13:b6:64:2c:91:90:4e:c8:ca:5d:c8:20:14:5e:c8:
         e6:ef:fc:bd:fa:eb:f8:06:38:b7:f3:02:e6:56:f4:60:df:ae:
         f9:66:34:bf:27:61:e5:d7:fc:e4:84:1b:19:41:75:d1:8b:c8:
         22:0d:b0:64:b1:f4:da:07:64:ba:1e:fb:21:6e:01:95:63:c4:
         b3:0f:d8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:49:47 2025 by rpki-client