Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4115c8c7-2c23-30b7-b5e8-b5b4a6557ce7.roa
File:                     4115c8c7-2c23-30b7-b5e8-b5b4a6557ce7.roa (raw, json)
Hash identifier:          /borUJ31fU5Ie51WT2i6gVsvLeuNF/BMOVEAeXyOJbY=
Subject key identifier:   43:6C:6C:3D:71:56:B7:AA:C2:D3:A4:75:6A:9D:2B:B8:55:00:2C:BB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B64CE6AC584A930E6F84A5500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4115c8c7-2c23-30b7-b5e8-b5b4a6557ce7.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     44559
IP address blocks:        172.120.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:6a:c5:84:a9:30:e6:f8:4a:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=9ebe1feb-c9f1-4966-869f-64b39a8bd7c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:83:93:9c:b9:d1:c8:97:92:bf:ff:39:e7:0d:
                    d5:18:22:83:28:ae:a5:12:43:d3:b8:5b:b3:85:bf:
                    2d:cb:9c:2f:9f:95:b1:d8:20:d2:48:33:a5:39:94:
                    1d:1f:2c:ee:f9:9e:fa:09:29:f9:58:de:03:84:fa:
                    24:1d:e5:fb:43:f5:bc:3b:29:fe:b0:00:0d:ab:ca:
                    32:a2:4a:1a:ec:f5:c0:07:c6:57:4c:fc:1d:eb:df:
                    2f:6d:88:0d:02:71:57:d9:53:27:00:1d:80:84:14:
                    f0:8d:15:f1:b5:ee:64:5f:87:6d:b3:45:ba:35:e2:
                    88:35:3e:d1:d3:3e:cc:0d:25:08:04:2f:af:fc:33:
                    b4:c3:8c:0a:cc:38:18:1d:1e:04:8c:98:0a:a2:b7:
                    09:4c:da:9d:33:90:30:20:ae:61:45:ae:64:c0:a8:
                    93:48:dc:ee:d6:df:ce:e2:22:46:d1:98:67:f2:a2:
                    16:3a:af:00:a8:d6:2c:8c:9e:0f:68:08:07:e4:cd:
                    73:03:a1:66:92:c0:9c:ba:8a:b3:bb:14:9f:3e:56:
                    a0:14:56:24:52:3a:32:b6:35:09:fe:a9:81:a5:7d:
                    da:29:d1:87:6b:b8:a3:4b:d1:53:5e:90:d0:db:1d:
                    87:fd:b6:a2:59:1b:11:5e:dd:5b:90:9f:2c:d1:41:
                    e3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6C:6C:3D:71:56:B7:AA:C2:D3:A4:75:6A:9D:2B:B8:55:00:2C:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4115c8c7-2c23-30b7-b5e8-b5b4a6557ce7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:13:9f:33:75:cb:c3:b1:ac:1c:7d:dc:f6:8e:76:b2:ab:d9:
         78:14:05:1c:4a:17:fc:4d:94:0f:fa:fe:f0:eb:08:f3:f6:64:
         a9:36:a8:a7:d0:9b:e3:c2:67:e4:58:c3:bf:32:da:e1:d0:81:
         2b:a9:12:32:b5:25:ac:4e:50:2d:02:bb:38:ed:32:ff:ed:d9:
         e3:16:d8:cb:ef:30:92:50:9c:d4:96:da:16:d2:b5:47:1c:b4:
         70:c3:6b:97:72:9a:7e:6f:21:a7:21:09:69:f5:8b:2a:fe:ac:
         c4:01:51:f4:2a:05:fe:48:b4:34:d4:ae:7e:03:2e:79:24:3c:
         de:11:66:ba:0c:ea:44:95:2b:69:05:fb:67:f9:d9:c4:8f:cd:
         4a:15:7f:94:6b:21:6e:41:d9:ee:88:e2:e7:10:92:76:c8:f4:
         db:12:7e:c8:df:80:14:45:62:d5:a0:43:cd:c9:42:bb:14:4e:
         e6:69:42:83:95:e5:cd:c8:58:32:e1:c6:c3:fb:78:1f:a1:bd:
         40:54:68:d2:54:18:e3:f0:42:8e:7f:71:13:d8:f2:60:91:f8:
         85:a3:5c:f6:d5:55:c1:37:71:1c:52:16:57:c2:02:d0:24:b0:
         3a:14:8b:ed:bb:50:cc:d3:f6:36:84:eb:34:97:39:dd:6e:73:
         58:ed:25:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:19:32 2025 by rpki-client