Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8eb166e4-2607-3c24-9b69-b0cc86125eb6.roa
File:                     8eb166e4-2607-3c24-9b69-b0cc86125eb6.roa (raw, json)
Hash identifier:          DJs+XvMgc+GI5n3rtrh+7hmvS5t87uTjBQsB+aGXyjs=
Subject key identifier:   7E:B8:D5:5C:B5:FB:68:EA:6D:09:EB:1D:AB:2F:44:E3:0A:63:70:C7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A10354456E9B6B9733FAC9F00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8eb166e4-2607-3c24-9b69-b0cc86125eb6.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     149440
IP address blocks:        172.252.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:44:56:e9:b6:b9:73:3f:ac:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=a8bc6a84-982d-41d1-b5af-2b7dee93d5f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:77:0b:2c:d7:c5:fc:78:f1:35:41:7f:55:90:
                    d5:18:3b:ad:41:2a:bc:bc:61:5b:20:9f:f4:4f:9f:
                    08:a2:f0:3f:24:b7:5b:55:6a:0f:54:f3:89:e2:47:
                    2c:81:4b:fc:a2:5f:9c:dc:e8:fb:02:bf:9f:90:88:
                    0e:c8:87:fc:8d:56:2b:e9:1e:ad:73:46:72:ac:e0:
                    65:a7:bb:78:24:e1:0e:50:59:c5:9c:1e:9b:a5:40:
                    4c:0b:9d:5b:ec:c9:6d:13:22:5a:67:92:82:6d:65:
                    3b:1a:57:48:65:2d:cd:21:98:a2:58:84:9b:98:05:
                    a9:13:f2:53:15:4c:f0:d5:f2:22:c9:0a:90:fc:37:
                    a9:37:78:ea:0c:7f:d9:8b:6d:b3:d4:d7:4a:3e:8d:
                    55:f7:54:48:65:53:78:5d:82:5b:00:bd:d7:91:43:
                    96:b2:81:8c:8e:6c:12:87:fd:3c:30:3d:6a:23:6b:
                    0f:2a:f6:40:59:9b:14:43:07:02:7e:74:be:85:32:
                    e0:8b:32:bc:ad:11:40:33:e7:b5:10:21:a2:94:4f:
                    7a:65:92:92:a4:8d:9a:74:c5:b2:5d:83:e9:67:89:
                    50:4f:d2:02:49:85:c2:92:a6:2b:1e:07:27:b9:7c:
                    01:ac:a7:42:22:f2:15:ab:ed:f2:dc:4d:3a:1b:5a:
                    c8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B8:D5:5C:B5:FB:68:EA:6D:09:EB:1D:AB:2F:44:E3:0A:63:70:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8eb166e4-2607-3c24-9b69-b0cc86125eb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:b3:6e:28:ce:63:14:89:db:fa:bc:38:f3:bf:ba:17:eb:93:
         14:f0:e7:42:52:f9:42:f5:11:ad:dd:db:a5:d0:47:dd:56:4b:
         34:4c:ae:5d:f1:31:91:5f:46:cc:5f:a5:3c:8a:ec:59:bb:80:
         8e:df:7a:f7:3b:a6:87:3c:ae:14:f6:79:cb:e5:61:3d:16:d9:
         74:08:11:ee:23:01:5d:82:94:da:9e:f8:bf:91:ff:34:e5:05:
         b8:84:45:33:3e:5d:9c:f7:69:a6:72:9b:f1:e7:99:0a:00:b7:
         5b:17:a6:d6:1a:6a:42:20:25:3b:44:f8:b4:a4:fd:46:dd:2c:
         4b:26:10:16:0f:99:1b:74:ba:e1:97:2e:21:4d:20:6a:9d:75:
         1d:37:92:40:a0:f8:92:7e:1d:a0:a4:56:87:f9:f9:71:ea:ee:
         fe:ca:12:c4:a2:d1:19:1f:f4:d3:f1:5a:c1:49:68:13:57:cc:
         d2:25:6c:e4:eb:20:a6:9e:74:6d:b2:81:13:0d:4b:26:7e:6e:
         67:66:14:1b:b0:f8:18:1a:22:2d:26:2a:5d:bf:7f:66:35:b2:
         b8:d8:c5:d7:65:0c:76:0f:8f:19:5e:58:b1:c2:b8:3b:e9:12:
         41:a7:05:6b:c8:e4:ef:7a:ed:9d:37:16:ff:4b:e8:57:8b:33:
         cf:c6:8b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:52:02 2025 by rpki-client