Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7c082031-95e6-3d3d-84c2-e00423357cc9.roa
File:                     7c082031-95e6-3d3d-84c2-e00423357cc9.roa (raw, json)
Hash identifier:          yJJcDk2vFUwOsWaCNDVAvSpet3iDCPCTB+bmjCuzCrM=
Subject key identifier:   A9:55:A5:2A:81:3A:B2:E0:6E:4A:29:4C:3B:E9:73:A4:12:1A:38:39
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B9E07CFA123AFB081E81CA1B0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7c082031-95e6-3d3d-84c2-e00423357cc9.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     9009
IP address blocks:        172.252.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:cf:a1:23:af:b0:81:e8:1c:a1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=29b68f5d-7bb0-4475-8740-790e965e37b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e5:1d:2b:80:8c:39:b8:07:6f:b6:0a:9b:f2:
                    b7:4b:4c:bc:62:65:fc:bd:d4:39:36:c2:08:5f:f0:
                    0d:d1:6d:bd:6d:30:c6:b0:db:72:da:81:41:2c:8c:
                    52:60:c9:c0:5d:25:c5:a1:99:46:56:18:02:c1:8e:
                    48:e6:9a:b7:d6:53:0b:f0:c7:6c:a4:98:46:0b:d4:
                    34:d2:b1:40:0f:c0:83:b2:03:42:68:84:82:c6:f6:
                    18:55:bf:17:73:9a:72:f0:20:cd:32:f2:2e:75:4f:
                    00:bf:f9:54:23:0c:bd:f2:e8:9d:48:ff:43:bc:20:
                    97:a2:e4:a6:af:a2:22:75:94:97:5e:a7:f6:56:08:
                    0c:c8:1e:17:19:55:2e:c2:ac:bc:9b:b0:42:08:32:
                    5f:e7:6e:cd:0f:13:9c:a7:08:04:d3:99:1b:fd:65:
                    25:9f:e9:30:b8:b0:e3:9c:44:f5:80:ca:3b:0d:91:
                    54:bc:63:2c:6c:3b:c9:63:36:55:ee:9f:f9:70:a0:
                    61:a8:d0:7a:5c:30:71:3b:b9:fb:52:e3:00:df:f8:
                    d0:c0:08:c7:ac:5d:ad:e5:4a:3f:d3:5c:42:1f:3e:
                    63:1a:23:fa:b0:7c:ab:77:96:d3:a3:05:a0:d5:f8:
                    e0:fe:d1:5a:d9:8b:57:a3:4c:6a:bf:14:7c:b6:78:
                    5f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:55:A5:2A:81:3A:B2:E0:6E:4A:29:4C:3B:E9:73:A4:12:1A:38:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7c082031-95e6-3d3d-84c2-e00423357cc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:3e:d1:ac:cc:9b:1b:16:ac:1f:21:c1:e1:5e:f3:fc:ec:14:
         18:19:8f:d6:1c:93:11:7d:47:ab:fe:14:2d:21:63:86:cb:74:
         a2:cd:fe:f7:a2:19:57:04:88:44:6c:d8:80:b0:96:20:53:47:
         bc:10:3a:6f:f1:e7:5f:48:74:bd:ef:40:69:b1:de:12:f6:25:
         0d:73:0b:5c:15:55:f2:dd:19:17:70:2d:c5:47:5f:dd:86:49:
         8a:ee:93:d7:bf:67:2a:26:25:25:bf:18:52:a1:20:06:aa:d2:
         5c:21:e1:18:8e:e7:7a:8d:e2:8e:dd:e4:a0:e3:68:7a:7c:84:
         06:5f:fc:db:57:67:ae:4e:d4:2c:d5:54:36:a2:24:6a:50:ce:
         cf:da:21:28:c8:a7:6a:75:56:ce:55:74:66:fa:18:91:5b:a7:
         5d:28:90:d8:02:3e:1f:4b:a6:64:d7:58:a7:1c:bf:fa:32:e4:
         f6:2d:69:52:36:9c:46:34:a7:ab:52:03:e8:a3:5e:9c:f3:f4:
         30:1f:b9:5b:da:41:7a:64:af:cd:33:c4:63:ab:4a:30:f0:e3:
         63:21:c9:99:09:28:06:67:f8:bd:85:c0:79:47:55:47:ce:ad:
         0e:39:3a:87:bf:3d:9c:8f:5d:4e:25:5e:1c:c4:14:f9:67:39:
         d5:95:57:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:00:48 2025 by rpki-client