Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/31f45d76-a2b8-33c3-b43b-e6da05de731b.roa
File:                     31f45d76-a2b8-33c3-b43b-e6da05de731b.roa (raw, json)
Hash identifier:          NyaXRlqflwUd+uBhQtlbgjuoUSyWU/g3LClU1d93TQw=
Subject key identifier:   91:4D:BF:16:E2:00:F7:CB:56:D9:11:E6:78:8E:13:4B:25:76:08:ED
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B64CE6A8470437C167B50F790
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/31f45d76-a2b8-33c3-b43b-e6da05de731b.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     44559
IP address blocks:        172.120.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:6a:84:70:43:7c:16:7b:50:f7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=8b65b41b-1703-4a2b-a41e-c56a487f356b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:83:a3:2c:b5:11:bc:be:5f:1a:be:73:84:95:
                    40:96:1a:2b:ea:3f:38:37:a9:27:52:3f:92:70:c3:
                    d3:1a:39:ee:85:78:a7:50:80:8f:49:3a:9e:9e:ec:
                    b7:71:80:75:32:f5:c9:64:f0:fb:70:cb:4a:82:43:
                    8f:b5:58:3c:23:d2:2e:81:83:16:c1:ca:7f:af:85:
                    0a:a2:2b:4e:94:42:70:2d:37:96:7a:94:34:0c:db:
                    1b:a4:f7:3d:e1:be:30:3f:3e:b3:b1:c7:9c:25:5b:
                    74:15:b0:6b:29:96:ea:ab:32:cb:11:6e:e5:6e:b5:
                    35:4d:65:41:fe:9c:cc:7a:77:82:fa:2f:8e:a6:18:
                    7e:0e:49:ec:0e:67:70:a4:b3:d9:c8:47:85:c0:5d:
                    73:21:a1:55:fe:54:f0:d1:dc:01:52:32:f4:a1:61:
                    26:24:d0:c7:b5:da:49:16:5c:36:18:aa:53:f1:be:
                    2b:64:79:e7:72:c1:e2:02:c1:3e:b1:7e:8b:50:e2:
                    88:78:ad:1b:1c:1c:03:59:57:ba:e5:de:c4:cd:a9:
                    ec:16:8d:93:ed:69:d8:72:98:1a:27:14:87:e2:d4:
                    5b:d2:2e:2e:80:9a:3c:b3:03:29:90:cf:61:41:43:
                    5d:d3:83:6a:b8:c9:94:6c:77:b6:63:01:53:09:8c:
                    9e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:4D:BF:16:E2:00:F7:CB:56:D9:11:E6:78:8E:13:4B:25:76:08:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/31f45d76-a2b8-33c3-b43b-e6da05de731b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:c0:0f:e1:ca:4b:a4:1f:d2:f6:27:d3:0b:5e:fe:82:54:39:
         24:2d:e1:08:8a:a7:78:e2:4f:61:60:af:14:d8:c7:76:1c:3c:
         2e:07:4a:96:30:e3:0c:08:ee:b4:f8:b4:56:4e:71:48:09:3f:
         bf:84:56:db:e5:9c:3a:4d:96:82:46:5a:41:38:5d:ff:54:cd:
         8e:7a:4c:4d:ba:7b:57:60:cf:93:1d:72:70:e7:70:33:97:bc:
         6e:76:81:9e:7f:76:10:10:2e:aa:2c:49:1c:86:7b:4e:d1:1f:
         52:8a:6e:40:10:2e:e2:92:6e:02:e1:34:92:9f:7b:8d:ed:53:
         f4:40:0c:07:39:07:fa:cb:7f:12:5a:fc:80:d9:93:9b:12:2b:
         e4:e0:0d:97:5e:0c:18:e7:1f:d9:d2:02:6d:2a:fb:a6:25:57:
         d2:2a:b8:10:5d:d0:52:2a:aa:04:62:a2:99:51:6c:88:d8:0b:
         f2:44:f4:9b:06:11:08:ba:dd:b9:14:16:29:fb:23:78:e1:2e:
         8e:44:a5:04:90:0e:7c:94:c7:51:e9:ac:ac:7d:05:e9:da:47:
         57:e7:f3:6e:08:4f:13:58:af:c2:a5:cc:88:93:cf:e6:0f:0f:
         20:9d:0a:5a:6e:48:e8:52:6c:fe:3c:8e:a0:e7:af:96:0d:90:
         04:4f:6c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:37:15 2025 by rpki-client