Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7b85a506-d1a8-3fdc-8b7c-2d60c8d0d664.roa
File:                     7b85a506-d1a8-3fdc-8b7c-2d60c8d0d664.roa (raw, json)
Hash identifier:          0rOkYj/MFztKXsGNdTXSoWk79hmGsmOjWyP5zpw3lJs=
Subject key identifier:   72:88:5A:C2:B3:77:90:6E:99:D4:A0:29:88:C0:63:3B:FB:8C:11:4A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A8DC1DA4F6FEC8010F9233A60
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7b85a506-d1a8-3fdc-8b7c-2d60c8d0d664.roa
Signing time:             Fri 18 Jul 2025 00:20:20 +0000
ROA not before:           Fri 18 Jul 2025 00:20:20 +0000
ROA not after:            Thu 16 Oct 2025 00:20:20 +0000
asID:                     6939
IP address blocks:        172.252.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:c1:da:4f:6f:ec:80:10:f9:23:3a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 18 00:20:20 2025 GMT
            Not After : Oct 16 00:20:20 2025 GMT
        Subject: CN=ca9c0361-4c5b-4749-bd3f-82d0c3924e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d4:de:1b:65:3c:f4:31:d6:ec:8e:38:82:8f:
                    00:18:8f:35:16:4e:8c:2d:e3:b8:40:ac:f6:c8:82:
                    33:7b:2c:08:b5:00:bb:b7:25:ab:93:a9:cf:97:47:
                    7f:dc:12:69:f9:4b:c9:e9:ca:f3:a8:0f:c3:c3:c4:
                    6f:6f:d7:80:59:4a:f0:42:db:da:80:b6:75:23:03:
                    31:7e:70:08:aa:d4:9f:e6:bf:3e:51:47:84:4c:14:
                    6e:ee:38:a8:b3:bf:82:df:db:5e:94:8c:6e:9d:a3:
                    e2:85:a1:f1:df:9b:f0:79:e6:71:6a:83:9c:3a:78:
                    7c:ff:d5:3f:20:64:23:23:13:13:d5:1f:32:b3:a0:
                    c8:25:46:bf:86:9d:69:db:28:dc:9e:2e:33:c4:6d:
                    b3:c4:a8:c7:be:83:26:22:16:6c:4d:bf:74:9b:c9:
                    10:f9:42:eb:73:ef:49:d0:5e:33:66:2b:37:37:33:
                    e3:6a:85:f7:a5:e2:df:c7:07:19:9e:fa:0b:75:13:
                    6d:92:8c:9e:2c:f9:74:98:74:0b:6f:4d:c7:7f:cd:
                    e1:87:e7:1a:f3:a7:a4:cc:20:30:54:f1:c7:b1:46:
                    7e:ea:ee:33:b6:b2:c9:30:6e:aa:16:1a:b7:21:23:
                    6c:aa:b6:46:85:18:3a:0a:78:df:27:de:25:ca:bc:
                    b3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:88:5A:C2:B3:77:90:6E:99:D4:A0:29:88:C0:63:3B:FB:8C:11:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7b85a506-d1a8-3fdc-8b7c-2d60c8d0d664.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:0f:a1:ff:72:41:50:00:d8:5e:b8:4e:f3:86:68:76:08:b8:
         57:0c:a2:b4:75:77:60:24:55:36:36:6f:1b:b4:bb:49:5a:24:
         b4:4e:66:22:8b:d8:36:44:08:ee:ab:76:83:df:d8:81:9d:9e:
         0e:4d:e8:e5:0f:53:19:44:fa:a5:f7:06:4a:99:ac:14:06:60:
         55:11:7a:df:59:2e:8b:96:67:0c:62:c7:99:1d:39:dc:18:8f:
         25:67:d4:cb:a6:94:01:c5:58:d3:a6:87:2f:f5:88:8b:2a:7f:
         10:31:e2:57:d1:ce:62:e6:e6:9e:51:0b:e3:3a:c9:ca:4d:fe:
         48:53:e6:56:e0:6a:a9:0d:76:95:3a:5b:ee:e1:bc:58:a5:96:
         b7:0b:bc:bc:69:f3:fd:19:40:33:58:e8:a1:30:8f:98:04:c8:
         ce:67:7f:b2:68:29:66:cc:99:06:7e:49:31:6f:a8:59:18:e2:
         12:a5:25:67:6b:bc:d1:b6:30:79:18:e5:1e:dc:b9:6a:0b:b8:
         22:03:94:25:12:77:b4:46:7e:20:25:60:40:7b:d9:2e:50:20:
         54:84:32:be:51:bb:3e:b1:9c:65:8e:9c:e1:a7:3d:1a:36:41:
         6c:56:80:0e:25:43:b0:7f:71:ac:17:60:a8:29:f0:fa:12:bf:
         43:40:ca:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:00 2025 by rpki-client