Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6eecba36-15de-35b4-b636-d574681eb8a0.roa
File:                     6eecba36-15de-35b4-b636-d574681eb8a0.roa (raw, json)
Hash identifier:          U8DdsJ6SLNpZIyhyPiuQzpiAJdyRYnTdXgcxDZZEaZk=
Subject key identifier:   ED:D6:09:03:25:7C:DD:F3:90:8C:8E:A3:3F:3D:71:D0:25:85:D2:2F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B4A4736287FEE6208484A11C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6eecba36-15de-35b4-b636-d574681eb8a0.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     18779
IP address blocks:        172.120.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:36:28:7f:ee:62:08:48:4a:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=b61a42fd-128b-4739-a25e-1be417ab7371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4c:97:2c:f1:26:80:28:dd:5b:e0:f3:ad:18:
                    26:39:f2:6b:30:c2:39:e8:b3:f9:cb:c2:ae:d5:f1:
                    b5:37:31:54:a6:dc:6e:0c:8b:da:02:13:6a:20:c7:
                    91:e4:f3:d3:09:ce:67:e2:53:e3:d6:44:6d:db:96:
                    79:98:9b:8c:c3:17:50:7b:4c:38:d6:72:12:f1:86:
                    8d:fc:6f:2d:27:8d:74:00:4c:ab:0f:5a:94:eb:43:
                    28:cb:3a:3a:f6:79:aa:a7:91:7b:aa:d6:e8:91:e9:
                    04:c3:0f:97:55:28:07:48:bc:39:39:2f:31:f3:56:
                    c4:50:5e:4d:94:4d:08:9e:f3:6b:46:ca:3c:1d:74:
                    5c:97:d4:4e:2f:a3:61:cc:c2:54:5c:5b:cd:e6:45:
                    0f:e9:e8:4f:0a:e1:f7:32:b6:0e:ba:1a:85:80:40:
                    bb:c4:f3:50:63:20:d3:6e:ff:fc:05:1f:9b:b6:e2:
                    b2:c0:6b:18:dc:38:27:0b:a4:52:da:81:2f:8f:c8:
                    c4:d3:c7:9e:1d:46:26:7c:52:27:c4:bd:f1:d0:ea:
                    e5:89:13:01:d7:fd:a4:82:0e:a2:6b:04:50:64:ce:
                    b9:d6:10:3e:07:92:87:14:27:5a:2b:41:1a:f9:14:
                    ff:e7:44:f3:b4:fe:be:79:31:0b:fe:36:05:4f:71:
                    b9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D6:09:03:25:7C:DD:F3:90:8C:8E:A3:3F:3D:71:D0:25:85:D2:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6eecba36-15de-35b4-b636-d574681eb8a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:bd:d4:cc:16:30:1e:c2:e6:6f:89:41:a9:7d:58:ea:cb:de:
         96:94:dc:fe:ec:ab:f5:fd:c0:c7:69:73:bd:da:54:86:5b:58:
         d2:dc:64:7d:3e:7f:7c:23:2e:a0:9b:d4:71:87:34:d0:91:7e:
         6c:0f:7e:fd:77:57:fc:ad:5e:81:01:75:44:e6:0b:ec:1e:28:
         84:30:12:85:08:24:c1:2d:54:9e:4a:20:94:d0:ce:fb:d0:cf:
         b5:5f:89:97:4e:26:30:a3:33:b6:b9:27:a8:ee:45:d7:bc:95:
         1c:df:2d:76:25:3f:f2:ba:2c:42:01:e3:14:f5:7b:40:b9:40:
         52:65:49:1c:92:b2:99:85:3a:2b:61:7b:77:3c:d8:8b:e8:39:
         a7:54:5a:64:84:c1:a1:51:42:7b:ca:61:fb:84:de:0d:3a:84:
         2c:91:59:c7:6b:da:77:0a:93:5e:85:a7:a6:0c:d0:95:8f:85:
         ad:43:11:58:ba:60:4e:d0:65:54:8a:32:7b:0e:e2:6b:2e:52:
         7b:fa:29:22:e8:4e:1a:05:32:3b:b0:6d:b1:06:cf:3b:81:6f:
         4d:1e:10:64:46:3a:d6:0a:e8:a4:57:1a:49:ae:0c:76:7a:dd:
         52:86:7b:02:8e:c3:18:af:4e:ff:a6:21:fe:35:7e:c4:a7:b7:
         76:d7:b9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:12:01 2025 by rpki-client