Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6d838c0d-9882-35ef-b3ee-568246e47528.roa
File:                     6d838c0d-9882-35ef-b3ee-568246e47528.roa (raw, json)
Hash identifier:          hLt+Kul9BEwCBQQ7tb8TRsjkMhENk0vqKRZr/M3Fkc0=
Subject key identifier:   C4:10:89:7C:13:20:CA:49:9C:F8:74:D4:63:41:61:0A:70:AA:27:88
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AAB266C48D4E8B284ACE20D80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6d838c0d-9882-35ef-b3ee-568246e47528.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     7029
IP address blocks:        172.252.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:6c:48:d4:e8:b2:84:ac:e2:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=2cf4ebbd-ec60-4b6d-8899-e960e0e7101d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:73:ea:73:3b:88:84:75:96:aa:99:83:2c:f2:
                    60:85:ac:18:93:94:8c:13:58:48:38:8f:ec:cd:48:
                    db:a6:be:66:66:68:3c:74:b7:8d:1a:cc:3f:99:33:
                    24:01:ac:ec:46:ef:91:79:48:30:5c:e4:38:3d:ba:
                    57:c9:5e:a5:72:7a:d7:d0:9a:ee:e2:9d:8c:83:9e:
                    fb:f9:24:0b:1f:79:91:ab:ad:e3:15:6f:2e:9c:45:
                    eb:37:fb:ed:a2:c0:a4:1b:6d:e7:d3:da:d5:49:3e:
                    d6:38:6e:fb:02:b6:4b:02:72:39:ce:c1:26:f0:31:
                    f2:6b:dc:85:a7:09:17:47:ff:ee:79:d5:a8:fc:ea:
                    8f:f3:19:24:0e:9f:dd:8b:da:3d:04:76:09:98:5b:
                    4f:09:9d:45:fd:db:dd:74:b2:13:eb:8c:14:16:51:
                    ef:96:93:03:b5:5d:bb:6f:7d:c5:28:eb:b1:6b:39:
                    8c:4e:91:0d:dc:55:ca:f1:82:25:ee:b8:70:61:d7:
                    8b:2f:3e:a9:d7:ec:18:01:ef:31:64:10:f7:8c:30:
                    4e:ff:02:37:bd:f8:3f:d0:6c:ec:79:94:e4:c1:a4:
                    a7:0a:05:8f:2a:90:f1:db:36:4f:ce:a4:66:c2:3c:
                    9a:ff:96:93:1b:36:b1:88:70:19:e4:c3:48:ed:d9:
                    05:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:10:89:7C:13:20:CA:49:9C:F8:74:D4:63:41:61:0A:70:AA:27:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6d838c0d-9882-35ef-b3ee-568246e47528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:57:d3:e0:41:f9:3f:8e:60:6e:60:f7:12:ce:13:13:17:32:
         49:00:07:59:11:3f:6e:69:58:0e:8f:75:f2:c1:d7:48:0e:0d:
         d8:28:95:a4:34:5f:de:b1:b7:9b:5a:09:92:ae:3d:e0:d8:16:
         d4:c9:6b:e8:62:e4:68:86:63:a0:34:ec:ad:ee:f5:5f:5a:3b:
         ea:3a:dc:39:f9:57:7d:6f:71:39:7f:64:88:e5:cc:25:55:e6:
         86:dc:2a:bd:b2:1c:f7:6c:fc:be:4e:79:27:a6:11:d9:43:0b:
         ed:39:54:0a:70:0a:a8:14:a2:60:38:f6:d5:a0:62:4e:b7:b1:
         e8:c5:94:0d:cc:b3:59:b5:3e:c5:4f:44:4e:13:73:2e:53:13:
         f2:f8:3d:2e:f8:d2:29:b8:b5:2d:91:c1:a7:26:91:ae:0d:29:
         63:1f:33:44:89:5d:6f:9e:b8:4f:0a:e8:74:1d:e9:9f:b5:30:
         94:88:23:d0:14:7f:5b:82:6a:05:46:b2:72:5c:db:8e:3b:4b:
         dc:b9:b5:36:1f:d0:a2:28:77:02:33:e0:8f:05:39:e9:96:4a:
         70:2a:31:be:29:d4:0f:5f:31:17:8f:04:82:c2:3e:9a:80:b7:
         17:0c:c5:5a:ed:de:d9:20:17:77:fe:be:12:a1:f6:6b:8d:e9:
         9b:b2:97:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:25:48 2025 by rpki-client