Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1521d36a-6d50-3fe0-80a8-7a09af32e0c6.roa
File:                     1521d36a-6d50-3fe0-80a8-7a09af32e0c6.roa (raw, json)
Hash identifier:          iK22i2ifAny9YsMai0Vd5km0NMVkFBpuR6fFSPelExk=
Subject key identifier:   E5:34:7C:3A:52:59:BB:52:61:18:41:26:38:EA:1A:08:88:DC:DE:D9
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AC866988EA8113547BEC66D50
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1521d36a-6d50-3fe0-80a8-7a09af32e0c6.roa
Signing time:             Fri 08 Aug 2025 00:29:09 +0000
ROA not before:           Fri 08 Aug 2025 00:29:09 +0000
ROA not after:            Thu 06 Nov 2025 01:29:09 +0000
asID:                     834
IP address blocks:        172.121.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:66:98:8e:a8:11:35:47:be:c6:6d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug  8 00:29:09 2025 GMT
            Not After : Nov  6 01:29:09 2025 GMT
        Subject: CN=fb8fadd5-b175-4e58-9187-23ad32f56149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9d:ec:fe:b3:58:23:ab:1e:cf:10:d8:0f:ec:
                    67:9c:40:a2:62:5e:a1:d1:d1:4b:ae:d1:6a:6e:f9:
                    24:cd:5e:9d:e6:0e:81:fc:62:79:01:ee:f4:22:08:
                    b3:0e:f0:13:c0:e8:21:b8:0b:e7:55:76:10:7e:18:
                    73:c8:be:b8:a1:ee:dd:16:05:ed:1b:24:bb:90:ef:
                    cd:5e:46:d8:75:42:62:a4:31:d3:42:ba:c8:6a:f7:
                    58:a4:4e:03:91:66:18:7d:d2:f9:a9:c4:01:32:ae:
                    a5:d6:5a:8a:e4:7a:37:ae:ce:8c:42:ff:04:96:79:
                    cb:9d:49:c1:70:17:ec:30:37:a9:0e:07:47:a2:62:
                    31:b4:82:9e:8d:82:5e:8e:31:80:9d:0c:94:6b:68:
                    e0:c5:6d:02:0a:5e:fa:fc:98:01:19:bb:02:b5:c9:
                    8a:18:bf:3b:0b:10:c3:61:4d:06:91:87:07:f1:a8:
                    14:8f:a7:c6:f5:75:df:7a:89:2a:e2:76:f3:6c:a7:
                    a2:95:72:d6:e2:a6:03:7f:ee:9f:b3:c1:b3:7c:6f:
                    14:17:ea:0f:5b:ec:48:04:f2:66:eb:8c:d2:ed:ca:
                    d4:12:65:82:f7:0a:fd:99:df:c8:0a:8c:35:94:4a:
                    69:72:78:26:e2:a7:7b:4e:b0:46:8c:17:06:b3:85:
                    10:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:34:7C:3A:52:59:BB:52:61:18:41:26:38:EA:1A:08:88:DC:DE:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1521d36a-6d50-3fe0-80a8-7a09af32e0c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:2b:51:40:da:7a:11:9e:7b:19:e5:b4:5d:55:e4:b3:fd:65:
         8d:6e:66:7c:62:5a:98:1e:f2:34:e7:3f:0f:18:47:b3:5d:39:
         c8:ae:31:68:3c:c9:8b:a8:ef:7c:58:94:32:eb:45:53:73:4c:
         a6:53:94:aa:fe:b6:83:9e:c8:37:ea:6d:81:67:80:6f:87:62:
         52:5d:8e:75:ab:74:59:00:8e:e5:ef:ee:ae:6d:dd:02:d7:aa:
         f0:e3:d9:12:7d:18:40:0a:6f:8e:a5:8b:b8:58:cb:f9:06:1d:
         dc:bd:67:d0:6b:2f:c5:a6:12:f5:2c:70:f4:f9:da:ca:bb:58:
         be:88:05:b6:c7:b7:de:05:2c:7b:28:63:4e:f9:ba:e9:c5:e0:
         4f:c0:6a:76:17:17:a3:81:de:c2:90:ab:d0:71:a1:46:eb:27:
         20:6d:68:5f:3c:48:3d:d6:48:31:72:75:9a:c2:17:c8:20:e6:
         3c:ec:c5:14:62:a5:89:03:ce:45:f1:44:ec:a6:fd:b3:fe:6a:
         51:40:41:54:ae:16:6e:9b:bd:89:d0:f2:04:74:5f:ce:c1:31:
         a7:f8:13:3f:19:ba:b9:6d:20:b0:6f:9b:b7:6a:86:5a:6c:04:
         4c:8c:1d:a8:9b:b0:dc:46:bb:d0:fa:8c:b3:ed:41:0b:85:8b:
         5a:bd:ab:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:22:00 2025 by rpki-client