Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af46cda9-c153-3a3d-b98c-5675721bedc1.roa
File:                     af46cda9-c153-3a3d-b98c-5675721bedc1.roa (raw, json)
Hash identifier:          7BHGYV1D9clz+DB/pakk8HGAoPfvkvY97tqPSAOQGLk=
Subject key identifier:   50:1D:BF:36:0F:EB:40:D6:5B:36:DC:90:F1:72:98:1E:41:D3:56:38
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A8DC1F0E60A8492ACAD31F700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af46cda9-c153-3a3d-b98c-5675721bedc1.roa
Signing time:             Fri 18 Jul 2025 00:20:30 +0000
ROA not before:           Fri 18 Jul 2025 00:20:30 +0000
ROA not after:            Thu 16 Oct 2025 00:20:30 +0000
asID:                     6939
IP address blocks:        172.252.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:c1:f0:e6:0a:84:92:ac:ad:31:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 18 00:20:30 2025 GMT
            Not After : Oct 16 00:20:30 2025 GMT
        Subject: CN=7bd3d922-9038-4b65-b5d1-ff15ddf46150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c4:c3:6a:46:ab:66:cd:10:c0:25:58:58:5e:
                    06:32:ba:e8:c2:cc:06:b0:cc:fc:22:8a:dd:c0:40:
                    ea:6f:89:b7:1c:f2:78:83:bf:34:4a:ad:e1:5d:6f:
                    2a:f8:3f:14:53:87:93:3e:4a:9e:5e:57:87:b0:9e:
                    90:88:e6:bf:8d:99:41:80:bd:de:3d:80:8c:da:de:
                    ff:ab:e9:94:2f:bc:21:36:66:19:4f:ab:34:d8:60:
                    07:77:d2:f8:6e:20:f0:00:a4:b3:eb:a0:a2:d8:53:
                    32:4a:08:0c:c8:e5:41:17:7d:2a:71:7d:5c:ef:20:
                    58:0e:f4:e8:48:c8:96:b3:81:d7:01:d0:ce:97:52:
                    f6:09:26:7e:52:e2:9d:8e:54:ff:2b:36:0c:f0:51:
                    20:c8:12:8e:6b:9e:36:22:18:44:4c:05:b4:66:6d:
                    46:9d:3a:10:b2:fa:30:c8:90:a7:67:6e:24:73:e9:
                    ef:e7:a0:63:8b:f7:88:60:dd:86:1a:dd:d6:03:87:
                    42:c5:fc:4c:da:4a:92:22:6b:06:76:b9:cb:a3:02:
                    99:53:5b:cd:3e:b8:a7:b8:a0:3c:94:ae:21:56:ab:
                    7a:20:3f:72:bc:6c:80:f1:4f:8f:12:cb:0f:a3:40:
                    fe:2f:15:1a:67:12:6f:0a:c4:2a:cb:5e:17:9f:27:
                    81:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1D:BF:36:0F:EB:40:D6:5B:36:DC:90:F1:72:98:1E:41:D3:56:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af46cda9-c153-3a3d-b98c-5675721bedc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:f2:46:40:f8:c1:9d:01:58:1b:f1:aa:24:62:ff:d7:31:25:
         f6:13:e0:6d:de:7e:ff:23:cf:b0:05:84:87:34:0a:62:95:ec:
         8e:97:6d:c2:cf:85:d8:6d:a6:2f:ab:71:a5:db:66:3f:b7:b3:
         48:75:80:fe:e2:dd:23:82:ba:cb:35:6a:94:89:be:64:82:cf:
         8b:b4:e7:af:d2:27:9d:a8:51:1a:74:cb:d6:59:27:d5:53:cc:
         64:70:af:7c:3a:66:45:87:41:b8:ab:4d:61:57:56:98:4a:b5:
         9c:81:40:21:43:c0:65:8b:67:59:11:51:85:a1:f9:9a:fd:26:
         a3:aa:5f:ea:62:89:99:46:e0:fe:3e:48:fa:f2:bf:ff:72:36:
         73:9e:12:6d:49:5a:30:02:9d:45:68:df:e3:53:50:d0:df:75:
         4c:a2:cf:6e:9e:11:b5:28:33:71:b0:4a:d8:b6:d4:8e:96:a7:
         11:ae:30:5a:15:0c:df:01:a0:4f:75:df:28:41:3e:76:08:4b:
         e0:6c:c5:a6:5c:74:7a:67:f2:0f:53:87:44:12:6c:2b:a2:2e:
         f4:84:52:78:f1:59:6c:f4:9c:98:80:11:9b:6a:51:bb:60:3a:
         6d:83:e5:9e:c0:89:46:83:ec:ed:2d:28:ef:8b:1c:1c:02:d8:
         06:3e:70:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:08:34 2025 by rpki-client