Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b981ad8-c3de-339f-bf1a-84b91287eff3.roa
File:                     3b981ad8-c3de-339f-bf1a-84b91287eff3.roa (raw, json)
Hash identifier:          TozY7og04WEynNRuFem/Ur8RbYqjoKr/Myhv/45V7wE=
Subject key identifier:   47:0F:38:0F:57:B7:8B:77:B4:F2:E2:29:1B:FA:EC:EE:61:AF:E9:48
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B64CE6B98EE8C6F83FF5DC680
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b981ad8-c3de-339f-bf1a-84b91287eff3.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     44559
IP address blocks:        172.120.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:6b:98:ee:8c:6f:83:ff:5d:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=a7777b3a-0ec3-4e74-b717-cb28ef0b379b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5d:31:14:9a:78:81:d8:9c:78:3f:fd:d5:bd:
                    f0:32:a2:11:36:5e:6c:52:7c:66:57:c5:75:86:d0:
                    10:e0:c9:a0:33:7d:8a:fe:50:2b:0d:3b:39:0d:97:
                    ee:16:d1:27:da:b7:3d:8e:c8:c4:2e:ed:59:a1:3e:
                    2e:e0:c4:58:34:bb:c4:68:ef:69:db:b0:41:cd:65:
                    fc:76:f9:f2:f8:13:41:e2:c1:24:3b:58:4e:d7:18:
                    c1:cb:5a:67:9c:96:4e:88:42:47:5d:aa:2d:7b:73:
                    9f:99:d9:6b:6e:ce:48:ad:26:22:78:61:47:45:c2:
                    7b:4c:12:ff:eb:aa:e3:c6:cc:1f:8a:5e:f2:f0:ea:
                    36:65:50:6e:a0:21:19:27:d4:20:b2:c2:48:b8:a0:
                    09:13:e5:e3:cb:08:de:8b:d6:b4:aa:97:16:a0:24:
                    15:d7:87:98:2e:35:43:e3:54:f8:7a:11:78:bb:73:
                    19:8b:66:74:0b:b1:40:a4:44:e3:ca:21:13:4c:91:
                    59:c9:e4:f3:b5:06:26:77:8b:be:c0:f6:ad:d6:8c:
                    1e:3d:21:d8:e9:83:9d:36:3a:ae:37:b7:a2:79:04:
                    ba:f2:17:2b:90:27:5b:4b:d7:64:70:7f:b1:4e:1a:
                    e5:a6:96:6e:ac:5b:40:3d:f7:df:ed:b0:2d:b0:0d:
                    33:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0F:38:0F:57:B7:8B:77:B4:F2:E2:29:1B:FA:EC:EE:61:AF:E9:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b981ad8-c3de-339f-bf1a-84b91287eff3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:7a:c8:81:38:c3:c1:9f:22:c7:3f:b6:1b:06:31:26:c0:25:
         60:05:9f:43:7a:e6:51:53:18:af:03:56:e7:5e:83:d7:2a:70:
         b2:e0:25:72:37:1f:a0:33:6e:e7:db:d0:89:0b:aa:ff:7e:7a:
         84:88:1d:88:81:f9:fa:c5:b8:4a:2e:96:87:47:fa:f9:3b:fc:
         83:d3:25:01:16:36:9a:1f:e5:e8:92:d4:f0:88:f0:fb:09:2d:
         a1:e8:e5:3d:6c:1f:62:30:4b:e2:96:47:4a:61:3c:e2:93:91:
         b2:68:43:28:31:e5:f4:f4:47:39:d9:37:98:6a:84:c0:82:95:
         f5:1d:ee:40:ab:56:65:39:ab:e8:a4:fc:e3:aa:95:b2:26:52:
         a1:75:cc:25:aa:e5:cf:41:de:ff:e9:b2:4a:e8:bf:41:34:58:
         b7:3c:ae:1c:95:e5:b1:d9:9d:3e:20:07:9e:77:36:5b:c2:90:
         db:47:2c:86:09:e7:60:b9:bb:d4:22:c3:61:05:c1:95:c8:0c:
         a9:2d:48:72:94:18:6e:cf:c1:1b:c4:38:dd:18:7d:2c:4c:15:
         07:5b:47:3e:7f:4e:4a:78:64:78:de:16:0c:b4:6b:03:59:77:
         15:f7:7f:eb:64:7e:aa:cd:b3:c4:0b:4e:8f:8d:94:46:38:94:
         42:63:c2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:53:01 2025 by rpki-client