Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6dbbae57-15e7-3ac4-ada8-6a3e02486491.roa
File:                     6dbbae57-15e7-3ac4-ada8-6a3e02486491.roa (raw, json)
Hash identifier:          PJOBAqvlG9Hv6HtmFT5znj4BeAg/wmX9GChGzt36aE4=
Subject key identifier:   AE:20:6C:DF:B0:37:98:A4:24:02:45:B4:F3:86:C7:C1:40:6C:6B:EB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B4A4734A4E78533ADDBD4D620
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6dbbae57-15e7-3ac4-ada8-6a3e02486491.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     18779
IP address blocks:        172.120.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:34:a4:e7:85:33:ad:db:d4:d6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=305104f9-a654-4713-baf9-5529fdad05d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d9:32:50:b5:6b:09:c2:09:65:2d:0b:43:59:
                    fb:19:37:d8:9b:1d:75:d4:06:cb:9b:19:1a:ce:66:
                    e7:3c:5e:fd:78:6f:7d:7d:39:e4:b4:3c:ad:66:af:
                    8f:20:d4:0e:52:2d:0b:af:e2:50:7c:b2:02:98:04:
                    2c:b0:0d:61:dd:dd:bd:05:4d:93:a0:81:b5:01:7b:
                    ff:e0:62:65:a4:2a:20:66:b6:ed:64:bd:50:72:72:
                    95:67:75:63:3c:84:ea:5b:23:de:a2:13:77:50:84:
                    14:4d:4d:9f:17:0b:ca:8c:b7:9a:f0:39:af:fe:3e:
                    e1:e7:c9:27:f9:2d:f6:56:aa:24:77:c2:8e:a1:31:
                    98:63:7c:e6:3c:8c:2a:a9:4d:57:12:fc:09:56:4a:
                    b2:6d:43:c7:77:e0:9f:d9:72:33:86:6b:b2:64:56:
                    47:e1:14:c4:9b:19:9c:76:e3:32:ee:f5:9f:ce:52:
                    49:48:7f:7d:c8:16:6e:53:85:7d:0d:9b:fd:42:1c:
                    60:4e:63:81:4d:f4:97:7f:0d:d5:23:e2:1d:85:9c:
                    92:a8:54:48:39:67:0a:46:a9:50:20:0a:28:81:d5:
                    bd:2e:19:01:68:c0:27:dc:a2:bd:00:6f:e6:f3:5c:
                    1c:d7:4b:36:e3:4f:e9:d0:74:9d:b9:22:64:80:4f:
                    5b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:20:6C:DF:B0:37:98:A4:24:02:45:B4:F3:86:C7:C1:40:6C:6B:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6dbbae57-15e7-3ac4-ada8-6a3e02486491.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:99:4c:5e:ce:a0:2e:fc:f7:44:ab:33:8c:72:d8:cf:4f:77:
         47:93:64:26:b2:87:61:83:aa:9d:fa:b3:b0:08:6b:82:b6:e2:
         e9:4e:96:f9:6e:60:27:85:aa:1a:5f:cf:95:40:61:a6:21:20:
         83:6e:a6:a2:1d:b1:e0:b5:b3:25:4d:d2:2b:c2:b8:7f:88:59:
         9f:40:76:46:21:88:e9:72:b8:dd:e6:1e:7a:6d:79:d4:60:d3:
         72:52:26:af:3b:0d:d2:b1:ad:e3:67:e6:36:91:2a:48:dc:a8:
         0b:b7:c5:fb:2e:17:15:c7:40:91:52:c0:1d:49:98:41:1c:af:
         74:5e:f4:3d:1e:35:93:40:3d:a1:fb:dd:73:76:41:d0:94:5e:
         d0:7a:e1:f1:57:39:cc:0c:6f:0e:07:40:c4:59:3d:ae:b6:a8:
         8b:3b:0e:5b:a9:bb:f7:43:fd:b8:f5:6f:9a:53:ee:c4:dc:88:
         8f:75:6e:c4:f0:56:83:74:ad:df:24:c2:e1:2d:47:5f:bd:70:
         37:9d:fb:72:08:88:a6:8d:a8:70:32:5e:33:23:4c:65:15:fc:
         da:61:56:29:72:db:8e:e2:b7:6f:76:28:8e:97:09:52:d2:fb:
         37:10:9f:ba:26:a6:32:39:98:a4:2d:77:91:76:7f:13:bd:4c:
         2e:3b:4a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:48:23 2025 by rpki-client