Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e7f6b8d9-0ae8-3cca-9e01-b79fe90db49a.roa
File:                     e7f6b8d9-0ae8-3cca-9e01-b79fe90db49a.roa (raw, json)
Hash identifier:          sgGY9iD964jAzgsxMrXiGa6Vzjd5tV5Ai7GzOt4JLoc=
Subject key identifier:   D5:D3:20:B6:CC:DF:5B:D4:1D:81:69:35:27:B2:07:1A:15:60:BA:F6
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AB22174CF5BCC22DEAF8B8E00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e7f6b8d9-0ae8-3cca-9e01-b79fe90db49a.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     18779
IP address blocks:        172.252.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:74:cf:5b:cc:22:de:af:8b:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=4f788e3f-b455-4c3b-b4e9-32f212c8d5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:07:22:a8:cc:6b:fc:59:92:d6:02:d6:86:f2:
                    31:f1:59:90:e7:8d:52:bf:0e:cb:12:c5:93:2f:1a:
                    5d:ee:2c:78:f6:79:f7:bc:52:26:c2:15:30:e1:35:
                    30:d7:08:28:79:fa:35:1c:dc:7c:b6:4c:e0:c3:ae:
                    6a:3d:ba:13:f5:dd:bb:3b:11:f0:12:2d:a8:72:33:
                    22:8b:63:fa:78:cf:da:0f:4c:0a:66:8b:39:65:6e:
                    60:7e:c1:10:5b:b3:c6:d6:4b:2b:16:7a:c3:6c:d8:
                    3f:87:20:70:59:3f:36:2b:24:61:2a:64:96:61:b4:
                    5f:ae:7d:0a:ba:65:b5:59:94:39:a5:ec:b9:47:e5:
                    ad:e0:ae:3d:c5:cb:9e:fa:50:d4:0a:03:69:8c:ed:
                    90:56:2c:61:13:f5:7d:9e:44:60:24:16:ba:ba:85:
                    28:be:8f:e1:1d:60:6a:c6:22:72:8c:16:a4:8f:ae:
                    74:b2:da:e2:d9:c5:a2:2c:40:f4:6d:6a:c0:67:ea:
                    1d:24:a4:34:ce:73:b7:5a:f7:03:63:d2:d0:a9:94:
                    98:d1:51:a9:b3:5a:40:55:03:e0:0b:c4:5e:97:8e:
                    0b:73:d4:d1:2a:ec:20:8d:92:a7:61:9e:2e:93:90:
                    89:0b:68:23:d3:3d:4e:5b:a7:a7:80:b7:83:d5:3b:
                    b5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D3:20:B6:CC:DF:5B:D4:1D:81:69:35:27:B2:07:1A:15:60:BA:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e7f6b8d9-0ae8-3cca-9e01-b79fe90db49a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:a8:ae:a7:85:d7:3f:af:24:19:fc:c6:33:d4:c5:ca:31:7c:
         27:62:87:8a:74:88:6e:5c:97:e4:60:d1:28:48:04:01:76:7f:
         33:c2:79:cb:ad:7b:8a:20:f6:fb:78:a4:de:30:e8:b7:98:d6:
         56:f5:5f:e9:0d:6e:17:96:0a:0c:6e:f4:28:7a:98:2a:34:8c:
         47:51:09:43:70:61:db:6d:b9:3c:cf:22:05:e5:84:b6:67:f0:
         c6:4b:43:19:08:c3:89:e9:9a:74:2e:8e:96:31:ba:0b:28:82:
         6d:a7:07:8c:1e:3b:8e:a0:b8:0d:29:f5:28:66:f7:a0:07:df:
         91:e8:92:28:ac:46:4c:eb:d0:4b:38:98:74:95:f4:01:a3:34:
         5b:7a:39:12:98:19:ff:b4:52:c7:52:ea:7a:b3:c6:65:c3:e5:
         84:2f:3a:79:46:7a:f3:72:03:58:0d:7c:09:4c:82:70:7e:f7:
         ab:13:27:40:31:ac:f9:ae:63:c2:48:f1:66:0c:00:70:d5:4b:
         11:1c:82:f8:79:52:dc:f8:07:f7:5c:8d:23:2d:c5:f8:f0:7d:
         22:eb:d9:28:4e:60:e6:c1:2d:8b:37:ba:76:2c:15:17:a5:2e:
         01:b3:dd:20:2c:af:4a:94:d9:9b:3a:ea:4a:59:86:3b:7b:87:
         15:98:5d:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIXTPW8wi3q+LjgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk
NGY3ODhlM2YtYjQ1NS00YzNiLWI0ZTktMzJmMjEyYzhkNWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowciqMxr/FmS1gLWhvIx8VmQ541Svw7LEsWT
Lxpd7ix49nn3vFImwhUw4TUw1wgoefo1HNx8tkzgw65qPboT9d27OxHwEi2ocjMi
i2P6eM/aD0wKZos5ZW5gfsEQW7PG1ksrFnrDbNg/hyBwWT82KyRhKmSWYbRfrn0K
umW1WZQ5pey5R+Wt4K49xcue+lDUCgNpjO2QVixhE/V9nkRgJBa6uoUovo/hHWBq
xiJyjBakj650stri2cWiLED0bWrAZ+odJKQ0znO3WvcDY9LQqZSY0VGps1pAVQPg
C8Rel44Lc9TRKuwgjZKnYZ4uk5CJC2gj0z1OW6engLeD1Tu16wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNXTILbM31vUHYFpNSeyBxoVYLr2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZTdmNmI4ZDktMGFlOC0z
Y2NhLTllMDEtYjc5ZmU5MGRiNDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPwRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA+orqeF1z+vJBn8xjPUxcoxfCdih4p0iG5cl+Rg0ShIBAF2fzPCecut
e4og9vt4pN4w6LeY1lb1X+kNbheWCgxu9Ch6mCo0jEdRCUNwYdttuTzPIgXlhLZn
8MZLQxkIw4npmnQujpYxugsogm2nB4weO46guA0p9Shm96AH35HokiisRkzr0Es4
mHSV9AGjNFt6ORKYGf+0UsdS6nqzxmXD5YQvOnlGevNyA1gNfAlMgnB+96sTJ0Ax
rPmuY8JI8WYMAHDVSxEcgvh5Utz4B/dcjSMtxfjwfSLr2ShOYObBLYs3unYsFRel
LgGz3SAsr0qU2Zs66kpZhjt7hxWYXYw=
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:06:53 2025 by rpki-client