Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6d90ee8e-a9a2-3936-b8c1-2c290237f19a.roa
File:                     6d90ee8e-a9a2-3936-b8c1-2c290237f19a.roa (raw, json)
Hash identifier:          wLnB0/csf3gri1lLxOCZ2/m70geoa911iizKeBDB7C8=
Subject key identifier:   CE:1A:D3:B0:32:75:C7:A4:1E:D5:E4:BC:9D:A8:E1:3C:B9:21:70:1D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AF0F12F69A511F70592091E80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6d90ee8e-a9a2-3936-b8c1-2c290237f19a.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     7018
IP address blocks:        172.120.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:2f:69:a5:11:f7:05:92:09:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=9e1346cd-f7c9-46b1-9d8c-4616c62c2827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:39:de:c3:34:d7:0a:6a:f1:0e:05:7e:6d:43:
                    51:3c:de:ae:f8:09:08:71:4c:b8:5c:c4:e2:19:34:
                    51:6f:bc:6c:ec:9d:47:c2:8a:53:ae:d4:1a:b4:45:
                    30:eb:21:1d:62:3f:4a:f5:07:94:07:05:26:b2:5e:
                    68:fb:3d:fe:44:67:69:49:0e:9a:1a:8f:a6:21:92:
                    b3:bf:72:72:f7:ac:b6:03:64:e1:a4:b2:67:41:fa:
                    db:3b:85:3f:71:f9:f7:11:8d:32:1b:6d:d4:d3:b7:
                    64:e1:d1:51:6c:13:0f:01:33:6c:cb:f3:0b:78:e8:
                    97:6a:88:ea:d2:86:c1:2b:e5:0e:bf:0b:9e:f0:cc:
                    2d:5d:37:41:8a:0f:e9:d0:e7:c8:04:28:1b:92:19:
                    c9:24:89:bc:8f:77:7c:3c:84:bc:3f:ff:44:4b:da:
                    ec:0d:ba:cf:19:f2:27:bc:15:27:70:56:29:32:24:
                    6d:15:32:18:e8:e4:e8:09:5e:f8:34:a3:bc:8c:f9:
                    84:1f:b5:c0:5a:51:c6:4d:a9:ae:0c:80:e7:4f:6c:
                    05:95:30:74:d1:ed:5c:e8:1d:7b:17:43:19:1a:fe:
                    d2:53:00:c4:e6:41:0d:47:19:e4:4f:75:93:01:e7:
                    b4:21:31:8e:60:66:4d:30:d3:65:4b:1b:9f:2c:aa:
                    e0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:1A:D3:B0:32:75:C7:A4:1E:D5:E4:BC:9D:A8:E1:3C:B9:21:70:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6d90ee8e-a9a2-3936-b8c1-2c290237f19a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:a2:4c:e4:a5:08:4c:3f:c7:c1:03:cb:4e:da:72:cf:56:1b:
         44:0d:c2:fa:d0:46:33:84:6d:3d:49:a3:f2:68:79:f2:2d:59:
         6d:bd:c3:80:35:67:11:74:1a:f0:cd:3a:bc:6d:e7:ac:45:ee:
         0f:13:e1:58:cf:db:eb:48:b7:7e:9b:e1:1c:c0:4a:e6:90:c8:
         db:63:6b:43:67:0d:84:7f:75:a6:4d:7f:b3:79:ab:26:1d:27:
         99:5f:a1:aa:cd:35:27:58:c7:ae:6c:b7:ba:d0:8e:0e:34:b0:
         39:f6:b9:94:ab:76:ac:bf:7b:53:a8:ee:6b:42:61:2c:0c:47:
         a8:91:ea:f1:a0:ba:86:16:2f:77:f5:32:66:d4:55:ca:d0:7b:
         bc:c0:ed:50:c7:fa:60:77:3b:a5:65:ce:ff:d4:b7:03:ec:a9:
         c8:92:a7:2d:aa:f1:6a:3b:95:7a:fb:15:b6:98:f5:94:30:8d:
         db:d4:70:b7:1f:13:88:d9:58:fa:3f:e2:14:1a:5f:f3:ef:d1:
         bf:5a:48:8e:5f:00:5f:ff:bd:94:65:2b:23:8a:76:72:0d:80:
         42:b3:9a:7b:d9:ce:29:d4:02:76:dd:3e:e0:90:1e:4b:f7:26:
         b0:37:2d:36:41:99:8e:2f:65:61:15:09:ff:9e:96:5d:4b:0b:
         ad:01:b4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:25:02 2025 by rpki-client