Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/50b814aa-a12c-3e93-baa4-22108d4611d8.roa
File:                     50b814aa-a12c-3e93-baa4-22108d4611d8.roa (raw, json)
Hash identifier:          0xuv4blWgIyn66pZW7mSZDV2iKtsB1kpERbchUI6UFg=
Subject key identifier:   D8:3F:5E:74:AB:28:F7:D4:69:FE:7F:7D:EC:02:07:0A:EE:33:1C:83
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A81465ADB1DC2A2614A141920
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/50b814aa-a12c-3e93-baa4-22108d4611d8.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     6939
IP address blocks:        172.252.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:5a:db:1d:c2:a2:61:4a:14:19:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=79ce5b4b-d098-4b78-ba44-d2fcd8b3f754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:34:16:b0:1e:00:bd:d1:8f:ee:7c:f2:f0:b6:
                    a0:4d:7e:fa:98:1e:cf:d0:8a:ad:b8:3e:a4:40:7a:
                    1d:62:40:16:a3:99:54:25:79:7e:e3:8e:bf:53:12:
                    7a:5b:74:c9:81:24:60:70:e7:bb:35:c3:e7:f4:65:
                    dd:ee:e5:d2:30:4a:e1:d6:eb:83:f1:7f:fa:6a:68:
                    64:b3:3d:24:75:9d:9f:e4:95:1e:bc:01:23:82:75:
                    5a:3f:23:d0:a2:29:b3:de:b1:8e:b1:4b:f2:83:9e:
                    a8:5e:68:10:28:8c:dc:0a:03:9c:89:f2:1c:73:bb:
                    d3:8e:11:41:f5:db:5c:3c:be:88:f2:7b:0a:72:d9:
                    22:11:86:e3:66:ef:ca:2a:50:e4:37:57:70:ef:40:
                    ff:3a:e9:47:28:a1:87:60:53:5d:13:2b:05:13:b0:
                    7b:5e:64:ba:3d:c6:d9:82:f4:20:bb:07:bb:2c:cc:
                    4e:e1:79:4b:1e:5d:48:f6:c5:28:c5:73:71:9d:cc:
                    fb:0e:22:e8:85:02:03:65:8b:21:d5:ed:fb:d2:44:
                    4c:5a:ae:bf:32:65:7d:88:5c:ac:ba:16:fc:27:e7:
                    ce:54:6a:11:7b:b9:30:39:45:e1:f7:fe:ce:7b:4a:
                    84:1b:8a:0a:d3:42:9f:cc:40:18:ba:67:d0:62:c8:
                    d2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:3F:5E:74:AB:28:F7:D4:69:FE:7F:7D:EC:02:07:0A:EE:33:1C:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/50b814aa-a12c-3e93-baa4-22108d4611d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:34:df:34:98:6b:3f:8a:69:55:8d:0b:3e:a5:32:ca:ba:2c:
         89:4a:37:c1:b2:7b:1b:c2:65:bf:71:24:b1:28:7e:06:f8:2c:
         6a:70:bc:a1:41:62:e0:91:eb:9a:fe:69:8f:48:76:22:f1:fa:
         9f:0e:16:18:70:2e:a1:87:25:5e:e3:85:f5:9c:76:aa:90:65:
         97:ec:8d:e4:ff:dd:3a:51:7b:8d:fd:c4:df:e4:0a:a9:2f:b2:
         88:8a:e4:94:0e:8f:3b:db:4b:eb:5c:d9:4b:f2:f2:00:b3:c5:
         12:1c:51:b7:4f:1d:93:2e:d3:84:c1:20:e4:9e:9d:08:28:4e:
         9a:ba:0e:30:4f:f2:17:2f:97:59:5a:f0:7b:df:54:34:b5:b9:
         6b:37:a0:02:9f:be:83:55:20:e4:eb:c7:e3:2c:bb:5c:af:f5:
         a3:44:d3:2e:c6:fd:eb:81:7c:5f:60:83:b8:57:90:23:3d:7f:
         0d:b7:52:57:c8:92:be:c4:49:94:66:e4:68:a2:1f:7f:66:60:
         d2:61:f2:a9:01:3b:70:17:64:55:ae:57:aa:e6:94:b8:ff:68:
         f5:79:59:b6:71:3e:28:37:66:6f:69:0e:41:8c:85:79:6a:38:
         5b:3a:47:7a:f9:a8:05:6a:bd:2d:7c:40:2a:76:eb:9d:e5:71:
         e5:e5:71:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:14:41 2025 by rpki-client