Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/898b8ada-915d-3f57-931b-73e11d8b075e.roa
File:                     898b8ada-915d-3f57-931b-73e11d8b075e.roa (raw, json)
Hash identifier:          aXFiR6fPsaAzHaj6TQURklku2rlaFIKptyi7YlSjtdk=
Subject key identifier:   53:CD:BA:ED:1E:FF:B3:1C:4C:22:2D:38:7D:C2:45:00:F8:BA:0E:35
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584BB1925899608D7ED5FE579900
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/898b8ada-915d-3f57-931b-73e11d8b075e.roa
Signing time:             Thu 30 Oct 2025 13:00:38 +0000
ROA not before:           Thu 30 Oct 2025 13:00:38 +0000
ROA not after:            Wed 28 Jan 2026 14:00:38 +0000
asID:                     25893
IP address blocks:        172.252.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b1:92:58:99:60:8d:7e:d5:fe:57:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 30 13:00:38 2025 GMT
            Not After : Jan 28 14:00:38 2026 GMT
        Subject: CN=157c9d84-1597-4bdc-a66a-3adcb0ea2ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e1:da:29:a4:d8:74:77:47:06:2b:3c:1b:d6:
                    76:5c:d8:a5:54:9a:d0:e6:aa:32:6a:ab:3c:d0:48:
                    fb:a7:ae:ed:be:bc:25:b5:08:d1:9e:5f:8b:d4:49:
                    61:cc:ed:85:23:e6:3b:fb:f2:ec:66:de:b5:fc:0c:
                    5b:f9:51:1f:77:24:b3:95:ab:4f:ee:cc:57:cd:8d:
                    20:bb:a0:e9:4c:88:60:b3:50:fc:c2:2a:55:62:7d:
                    76:a3:bf:6d:4c:95:cd:0d:02:ca:eb:8d:c1:f7:e4:
                    6e:b5:72:36:67:ba:e5:7f:a2:98:70:72:20:0a:09:
                    b6:f6:9b:2b:89:15:e6:3e:f0:55:54:12:29:c1:d2:
                    d4:9c:29:ea:f6:ae:f7:b4:09:f7:8f:0c:19:a8:7e:
                    a6:e7:c3:f1:c5:58:1e:17:d8:f1:b6:63:d6:ce:ea:
                    29:f1:6d:da:37:da:4f:a9:84:8f:86:e0:cb:86:9c:
                    c7:68:83:51:6d:8f:60:c4:8f:6e:3d:4b:53:5b:5e:
                    54:14:8f:ba:07:41:2c:b0:e5:e4:20:6a:65:73:23:
                    c7:6d:2c:17:38:a3:db:6c:a6:ca:74:a7:a0:d0:65:
                    0c:9f:44:f1:e8:28:b4:9f:a5:95:f7:d3:98:85:f8:
                    4f:b3:53:d9:30:38:54:93:a7:4b:a4:3e:97:56:ea:
                    7c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CD:BA:ED:1E:FF:B3:1C:4C:22:2D:38:7D:C2:45:00:F8:BA:0E:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/898b8ada-915d-3f57-931b-73e11d8b075e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:73:77:a0:95:8b:7f:4b:ab:60:bd:0e:d9:ed:83:39:25:99:
         06:6e:12:d6:1c:a4:1b:c7:f9:0a:df:3d:42:d7:f9:ff:33:31:
         2b:94:78:60:19:40:36:f4:6d:8e:f1:04:75:bb:6c:3e:ca:ae:
         1b:a6:55:c6:02:48:51:29:4c:2b:3f:46:06:44:c2:a2:04:bc:
         b9:21:4f:59:59:68:ca:cd:8d:7c:7d:ae:c9:4f:08:48:8a:c4:
         75:fc:d4:0d:48:f2:96:47:98:4f:04:bb:a6:57:dc:83:5e:89:
         18:c1:90:9e:d3:04:81:9a:03:cc:cd:44:34:49:05:9f:2f:b2:
         1c:85:08:44:2b:5e:72:f1:bf:db:af:19:4d:8c:41:40:4e:67:
         37:b2:da:ef:74:0e:4c:b9:75:f3:da:b2:14:2e:fa:d3:d1:23:
         71:b3:9d:89:94:23:f9:f4:ad:71:6e:db:7b:ec:7d:d7:2f:d2:
         13:58:cc:69:aa:c8:fa:ac:62:6c:1d:dc:86:ce:7e:c2:39:8d:
         1b:e0:05:12:45:2f:13:a8:b2:55:11:a8:9e:a7:b9:2f:52:26:
         6f:8f:0e:de:57:e2:51:77:d5:03:db:2f:71:46:30:ee:20:8e:
         87:31:6f:32:c3:df:df:37:47:af:9b:b9:5f:a9:e3:2a:df:e5:
         e4:67:72:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:28:19 2025 by rpki-client