Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b4dae3d2-6288-3696-a906-6f7e1e4116f7.roa
File:                     b4dae3d2-6288-3696-a906-6f7e1e4116f7.roa (raw, json)
Hash identifier:          5mJXPECY2n81I+j4vEffvzADJW12CFK71v2jVFjVQLY=
Subject key identifier:   CD:E4:4A:7E:D9:75:81:03:8B:4F:39:96:75:9C:C6:23:A5:5C:DE:A0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849A1EF7BCAC29D6F183D15EF20
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b4dae3d2-6288-3696-a906-6f7e1e4116f7.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     6939
IP address blocks:        172.252.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:7b:ca:c2:9d:6f:18:3d:15:ef:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=b4188bfb-7552-4407-928a-1908ba9317b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a7:62:5b:96:91:3d:3c:31:a1:25:9d:7b:c7:
                    31:7d:1b:69:cb:ba:bf:d4:a9:92:7c:ba:fc:6c:60:
                    bf:7c:62:4d:f3:5c:e0:44:56:53:06:70:72:35:d3:
                    2a:ab:6c:6a:ba:ff:ac:92:9f:33:c3:fb:d6:e9:3a:
                    ca:65:33:2a:96:5c:49:69:77:7d:be:1e:ef:20:93:
                    44:87:68:89:c5:44:2b:45:4f:e4:fd:d8:c2:97:65:
                    b6:b0:56:68:d8:e9:88:1f:56:9c:43:59:ec:36:41:
                    97:81:f4:71:16:d5:91:10:35:d1:f1:4c:ed:e2:22:
                    e2:64:3b:be:c2:48:89:49:55:1d:59:1e:73:08:b9:
                    e5:42:84:c4:fc:5b:29:4d:8e:78:1e:7e:c5:b0:ed:
                    36:dd:19:32:38:da:d3:4e:50:db:f7:9e:0b:15:1d:
                    ff:a4:60:a6:f6:ea:8f:50:93:41:bf:79:1e:45:35:
                    72:0c:81:62:51:ee:09:8b:d0:eb:9e:99:9e:83:32:
                    7b:ad:73:dd:24:5e:25:3a:40:76:14:d3:f2:fe:20:
                    30:56:ce:3b:d4:f3:ce:b4:b0:78:e1:72:4f:ad:2f:
                    16:77:ae:0e:e3:0f:1b:29:8e:03:d2:11:e0:34:f9:
                    2f:c8:b2:12:43:25:9d:bd:0b:fc:a0:1a:61:f6:71:
                    88:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E4:4A:7E:D9:75:81:03:8B:4F:39:96:75:9C:C6:23:A5:5C:DE:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b4dae3d2-6288-3696-a906-6f7e1e4116f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:7c:50:f6:f4:13:a0:ca:c7:71:0a:8e:d5:e1:a2:f4:e6:f1:
         78:3b:7d:cd:88:e2:36:b9:77:fe:5c:42:62:32:79:b8:7c:21:
         4c:04:50:dd:7a:68:dd:7f:3a:e0:e1:af:70:e8:15:50:45:87:
         b6:1f:c0:59:fc:19:d1:a3:35:c4:2a:dd:6d:b3:c5:3a:34:27:
         b7:d6:46:e0:4f:02:09:95:91:ca:22:95:a5:b3:b1:54:dc:51:
         ce:2a:e9:fd:07:d6:e6:fe:61:ec:b8:ce:ac:b5:e3:36:0b:a4:
         41:9e:6e:3b:8c:79:0a:21:65:4b:b4:1c:ff:89:c3:ee:35:05:
         a9:c9:70:73:3a:18:16:e2:23:f8:9b:57:3b:1a:c7:95:76:49:
         83:5a:39:0f:34:46:68:09:c5:6a:5b:62:37:45:7d:fa:40:bc:
         f8:b9:8e:ae:78:dd:ec:b3:c7:5e:ce:a0:29:b9:c4:4c:07:6d:
         1d:88:54:dc:ac:0c:94:57:63:36:91:f5:85:f9:c9:e7:12:4f:
         ce:fa:0c:7d:d9:f0:85:f1:96:e3:9b:86:56:47:3b:56:78:60:
         e2:3f:ed:ba:86:49:29:b8:74:ac:44:6d:9b:18:64:4f:b0:3d:
         c2:b0:a1:9c:18:c7:30:b6:04:16:de:39:5d:68:79:b2:18:20:
         14:c1:8d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:47:12 2025 by rpki-client