Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/47570fff-667d-37af-8794-199c4232999d.roa
File:                     47570fff-667d-37af-8794-199c4232999d.roa (raw, json)
Hash identifier:          rEwrwf+HF6Gcru8s/5z4RKA+Z7PlcRBI8J1e9odmzWg=
Subject key identifier:   4D:6B:3F:D8:C3:38:5E:6D:20:99:83:CC:C9:B8:EE:70:EA:90:C2:B7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A8DC1E56AC5627217C45D90C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/47570fff-667d-37af-8794-199c4232999d.roa
Signing time:             Fri 18 Jul 2025 00:20:25 +0000
ROA not before:           Fri 18 Jul 2025 00:20:25 +0000
ROA not after:            Thu 16 Oct 2025 00:20:25 +0000
asID:                     6939
IP address blocks:        172.252.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:c1:e5:6a:c5:62:72:17:c4:5d:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 18 00:20:25 2025 GMT
            Not After : Oct 16 00:20:25 2025 GMT
        Subject: CN=fa7459aa-35aa-489e-b7d9-6786fe7df08d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d5:cb:a9:6e:6e:ea:bb:2f:df:c1:80:8a:60:
                    6e:38:9d:03:19:1d:6b:5e:bf:f5:50:76:d5:5a:97:
                    2c:a3:96:3f:09:bc:b0:87:ca:81:18:4e:75:31:61:
                    31:18:b6:1c:86:53:6e:f4:2a:79:c6:01:ba:4a:10:
                    5b:75:6c:76:71:a9:c4:83:53:cf:5c:ee:d8:30:ae:
                    99:52:37:b0:f3:ce:a6:7f:cf:40:ea:5c:33:2e:a6:
                    d8:b3:70:89:ba:47:cc:79:e4:4c:68:7a:05:21:b3:
                    5c:da:67:b8:4c:de:d9:d6:fe:6e:f1:2c:65:04:96:
                    e9:df:f7:36:03:2f:e7:7f:76:d4:58:19:88:5f:5c:
                    33:c1:b4:1d:da:c8:d9:fa:04:da:4c:0c:5a:3f:7f:
                    48:f7:fa:0d:12:9f:05:62:a4:b1:73:fd:c1:5e:ed:
                    c1:7e:e8:72:0c:37:a8:ea:37:fe:bd:4e:b7:d6:ba:
                    f9:1c:24:0c:e9:4f:dd:88:df:0e:95:6d:b0:31:13:
                    5b:da:74:db:6e:1f:94:c1:63:06:d4:69:91:e7:41:
                    88:40:54:87:49:3e:a9:43:36:03:81:86:f8:74:00:
                    1c:66:57:67:ba:35:81:c3:a4:53:45:e9:45:e5:d8:
                    1b:39:70:c6:6e:d0:ef:bf:23:e0:61:60:1e:76:2f:
                    d2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6B:3F:D8:C3:38:5E:6D:20:99:83:CC:C9:B8:EE:70:EA:90:C2:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/47570fff-667d-37af-8794-199c4232999d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:c8:6a:c6:b8:00:12:fa:0b:61:a5:d5:31:98:88:62:1e:ed:
         16:f1:e0:2d:c9:cd:18:85:d3:b2:c0:9f:60:76:eb:a7:21:d4:
         fd:92:68:b4:3a:77:9a:64:22:3d:26:1d:eb:54:ec:dd:1a:0b:
         06:64:d2:af:6f:ed:e4:01:7d:a6:b8:da:51:19:37:72:5b:a4:
         6b:95:5a:53:b8:99:72:a8:01:99:eb:20:de:a2:72:41:18:eb:
         0b:76:56:9e:6f:fc:e9:15:1c:51:45:bd:de:d9:64:f4:22:33:
         8a:bb:07:b3:2e:c9:1e:ec:e3:47:ce:f0:de:58:79:a7:fe:d7:
         16:91:02:01:fc:01:ff:32:29:0e:21:e3:9b:a6:40:1f:eb:3c:
         7b:0f:e2:33:af:96:96:51:48:00:3e:df:35:af:dd:2f:65:ce:
         12:c5:85:40:67:69:79:5b:6c:4d:3e:fc:e8:9d:a4:05:35:d6:
         b5:2b:ef:7e:58:1f:c4:d3:b5:cc:af:c1:06:8a:14:ab:5f:41:
         4a:e9:ff:b8:4c:6e:1e:1d:cd:4a:80:c7:5b:80:61:7e:bd:68:
         de:cb:ce:9a:8f:40:ce:cb:cd:8f:98:a4:c9:3f:91:a0:0c:2e:
         8d:46:c5:5d:20:78:61:4e:3e:b4:d6:bb:16:86:f9:0f:fa:bc:
         09:f7:bb:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqNweVqxWJyF8RdkMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDcxODAwMjAyNVoXDTI1MTAxNjAwMjAyNVowLzEtMCsGA1UEAxMk
ZmE3NDU5YWEtMzVhYS00ODllLWI3ZDktNjc4NmZlN2RmMDhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNXLqW5u6rsv38GAimBuOJ0DGR1rXr/1UHbV
Wpcso5Y/Cbywh8qBGE51MWExGLYchlNu9Cp5xgG6ShBbdWx2canEg1PPXO7YMK6Z
Ujew886mf89A6lwzLqbYs3CJukfMeeRMaHoFIbNc2me4TN7Z1v5u8SxlBJbp3/c2
Ay/nf3bUWBmIX1wzwbQd2sjZ+gTaTAxaP39I9/oNEp8FYqSxc/3BXu3BfuhyDDeo
6jf+vU631rr5HCQM6U/diN8OlW2wMRNb2nTbbh+UwWMG1GmR50GIQFSHST6pQzYD
gYb4dAAcZldnujWBw6RTRelF5dgbOXDGbtDvvyPgYWAedi/SlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE1rP9jDOF5tIJmDzMm47nDqkMK3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDc1NzBmZmYtNjY3ZC0z
N2FmLTg3OTQtMTk5YzQyMzI5OTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPwpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJLIasa4ABL6C2Gl1TGYiGIe7Rbx4C3JzRiF07LAn2B266ch1P2SaLQ6
d5pkIj0mHetU7N0aCwZk0q9v7eQBfaa42lEZN3JbpGuVWlO4mXKoAZnrIN6ickEY
6wt2Vp5v/OkVHFFFvd7ZZPQiM4q7B7MuyR7s40fO8N5Yeaf+1xaRAgH8Af8yKQ4h
45umQB/rPHsP4jOvlpZRSAA+3zWv3S9lzhLFhUBnaXlbbE0+/OidpAU11rUr735Y
H8TTtcyvwQaKFKtfQUrp/7hMbh4dzUqAx1uAYX69aN7LzpqPQM7LzY+YpMk/kaAM
Lo1GxV0geGFOPrTWuxaG+Q/6vAn3u4g=
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:58:10 2025 by rpki-client