Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/babbb5cf-0833-3e48-8110-ee74a4258e4c.roa
File:                     babbb5cf-0833-3e48-8110-ee74a4258e4c.roa (raw, json)
Hash identifier:          bCaoVflLkh4PoUjMCa9jcIMUkTXTZ5u9UMWLXe/PIMc=
Subject key identifier:   E5:F5:D4:05:E4:D2:29:3A:09:36:A1:70:62:48:4A:27:0C:8B:06:0A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A8575EB40DF9D262A0AD6C280
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/babbb5cf-0833-3e48-8110-ee74a4258e4c.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     23511
IP address blocks:        50.118.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:eb:40:df:9d:26:2a:0a:d6:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=33d7eb56-b715-47b0-b7f6-cfd3a58d641a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:82:98:cc:d8:b5:65:68:4d:a7:0e:f6:1a:0d:
                    9b:d1:a0:d4:49:ca:35:e7:6d:e2:7a:15:e7:b6:b8:
                    54:9b:f1:b1:81:38:0d:11:da:81:14:11:0b:34:c2:
                    c7:2a:50:2a:43:36:a9:0b:0a:c4:3b:30:f9:ef:5d:
                    e3:c0:cb:e4:f0:9b:a1:ec:b2:73:da:d8:c2:52:66:
                    f8:c6:10:42:4b:f0:14:dc:f1:ab:1c:72:cf:bf:94:
                    0d:c1:a0:18:08:0b:76:eb:21:1d:29:49:7f:e5:e6:
                    b9:22:82:31:27:4b:1c:8c:35:48:80:64:25:fc:67:
                    ab:c1:21:14:70:5d:97:6c:31:14:81:89:22:a7:c1:
                    fb:08:0c:fa:c9:9e:42:7a:62:1a:fc:97:7f:1d:21:
                    70:18:08:59:37:aa:39:ba:21:36:01:53:c9:ac:99:
                    e7:e8:fa:bc:a5:c3:ba:54:9f:b2:c4:87:ab:7b:63:
                    49:ad:9d:48:af:79:84:3d:54:68:24:b2:e7:98:21:
                    3d:74:09:d5:7e:6b:d5:ba:15:09:73:d1:84:da:f9:
                    f8:0f:11:4f:11:54:b5:30:d5:74:6f:2e:0c:75:2f:
                    0d:89:48:35:3b:7b:fb:c0:58:68:3d:0d:24:29:26:
                    95:90:3b:9b:88:2a:85:54:c0:f4:94:d6:97:36:3d:
                    da:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F5:D4:05:E4:D2:29:3A:09:36:A1:70:62:48:4A:27:0C:8B:06:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/babbb5cf-0833-3e48-8110-ee74a4258e4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.118.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:5d:78:09:f6:95:06:1a:ac:41:98:20:a2:f5:c5:ff:a9:a5:
         1d:d3:48:b4:56:c6:f4:1c:ea:00:ec:d5:56:bb:99:e8:24:4c:
         83:4b:40:a8:ad:db:09:8b:a0:55:f0:2d:40:fc:9b:6d:b1:68:
         9f:18:2a:a0:e1:61:58:59:1d:80:41:bd:a2:c4:1b:bd:d3:31:
         85:0e:fe:f5:cb:8a:a5:27:b0:75:77:42:cd:ea:50:46:ae:9b:
         fd:43:8c:2d:60:ae:ad:96:f7:d6:7e:ac:8f:3e:3a:da:4b:b7:
         05:93:3d:ba:68:77:a2:64:5d:26:d9:09:ee:8b:84:a6:40:a3:
         11:00:02:74:31:0f:37:4a:62:6a:2b:c8:37:21:73:9f:70:a7:
         59:30:5d:79:c9:70:b0:7d:76:77:7b:fa:c6:f7:36:61:c8:d1:
         64:c4:bc:50:79:9c:07:19:d9:15:a2:3c:08:4e:c9:8f:40:cb:
         60:7d:7c:bb:bf:76:26:80:26:f2:d2:41:fa:e5:91:7c:3d:1a:
         53:8e:e0:0d:50:86:1b:4d:f3:86:32:48:55:af:83:36:2b:ec:
         89:45:45:14:1c:09:cf:93:29:ba:dc:28:1d:38:5e:e8:2a:99:
         2e:e4:75:0b:d7:85:f9:07:42:c1:05:0b:dc:a4:5c:00:d9:4c:
         ef:03:2c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:38:54 2025 by rpki-client