Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c8a78d90-d490-3878-b27e-9fc81fe29bfa.roa
File:                     c8a78d90-d490-3878-b27e-9fc81fe29bfa.roa (raw, json)
Hash identifier:          oRLrT9CP5XTJOP7nxd+nvXzOJZzrWQyfzDJGxkFqpVk=
Subject key identifier:   23:93:47:91:42:D1:2C:7A:56:D7:6F:06:E6:D2:AE:74:34:B5:A3:1C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858498F11F1067EBD3B77125855E0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c8a78d90-d490-3878-b27e-9fc81fe29bfa.roa
Signing time:             Thu 17 Apr 2025 18:50:34 +0000
ROA not before:           Thu 17 Apr 2025 18:50:34 +0000
ROA not after:            Wed 16 Jul 2025 18:50:34 +0000
asID:                     215224
IP address blocks:        172.252.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8f:11:f1:06:7e:bd:3b:77:12:58:55:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 17 18:50:34 2025 GMT
            Not After : Jul 16 18:50:34 2025 GMT
        Subject: CN=9949bcd5-e35d-48d3-9de5-d5b18a8b535b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:28:9e:d3:cc:c9:31:4d:d8:a5:e2:d9:65:5b:
                    66:37:11:cb:20:0e:7f:18:b5:9e:df:80:e5:93:1e:
                    4d:00:ce:9f:ba:18:e7:d4:a0:e6:ac:97:f4:fb:c6:
                    af:9b:ee:83:dc:1f:a8:84:43:6b:28:a9:aa:8b:e1:
                    d6:f4:3b:7f:f4:6b:9f:d2:ab:8c:ee:9e:2b:27:be:
                    ef:db:93:53:37:7f:d1:10:c1:2a:a4:d4:6b:d4:d7:
                    ee:ab:72:e3:40:c4:68:98:e5:af:19:e9:52:ac:27:
                    db:d7:96:9b:d1:89:1d:db:0a:7f:87:78:c5:22:4c:
                    c4:08:3e:24:76:00:a0:a6:53:8a:12:05:23:42:27:
                    bd:20:5c:21:b2:e8:97:1a:43:db:13:e8:5c:6c:33:
                    b7:14:64:64:37:8a:76:16:6a:8f:5c:e6:f1:70:ac:
                    f0:07:b5:d6:4d:a9:fd:68:23:98:0e:9e:37:de:8e:
                    58:3f:c0:99:18:c9:43:8c:3c:1d:0a:2e:a5:c1:fb:
                    cd:0c:75:39:64:b1:d8:82:05:1e:5a:bf:79:c3:aa:
                    03:73:0d:48:b5:ef:88:58:9b:fa:fe:9e:6b:78:61:
                    a2:7b:51:cf:47:68:21:94:25:4c:64:ed:8b:50:1b:
                    13:b5:3e:bb:d7:1c:df:84:70:ca:10:a9:79:b2:c0:
                    60:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:93:47:91:42:D1:2C:7A:56:D7:6F:06:E6:D2:AE:74:34:B5:A3:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c8a78d90-d490-3878-b27e-9fc81fe29bfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:10:af:86:a6:06:1f:04:5a:ce:c9:5d:b4:c2:d2:9b:d9:28:
         dc:3a:b8:ed:5e:0e:be:74:13:c8:8f:bc:00:fb:63:4e:ca:04:
         90:28:21:7c:a5:c5:e1:79:7e:dc:86:85:de:f8:80:f2:b0:f2:
         a4:f4:ff:c4:25:b7:4b:05:6e:2d:ed:9d:77:22:f4:32:0a:b1:
         30:04:53:04:87:35:e3:21:2a:cb:97:65:c8:d2:7c:ce:09:0b:
         dc:d7:e6:b2:c6:57:f4:e8:00:08:b4:15:aa:aa:d9:6a:98:c2:
         8e:04:ea:4a:2c:69:bd:88:f8:e3:53:4f:74:b4:72:fb:ff:f2:
         0b:58:c9:31:fc:43:c0:5b:d9:21:3e:a2:55:f6:26:83:6f:92:
         95:8e:44:0a:02:2f:0a:5f:89:2b:bc:b6:c7:6b:64:2f:27:b0:
         6c:4e:c1:70:05:2b:42:35:fb:20:6c:44:2f:0d:e4:7a:62:58:
         17:77:1e:b5:25:55:12:1c:32:52:b4:8a:c6:a3:af:c6:15:a2:
         99:b3:fe:b0:fd:cf:87:71:18:39:4e:07:4d:94:66:a0:75:43:
         da:af:87:90:86:eb:c8:f7:eb:6b:47:31:6c:4f:8c:4f:61:21:
         d3:4b:d0:88:d4:da:74:4f:fb:af:45:7a:07:c1:07:f7:88:6d:
         da:74:fa:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:58:25 2025 by rpki-client