Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7689bd6a-2eee-3fed-b5d0-6f0f7db9d092.roa
File:                     7689bd6a-2eee-3fed-b5d0-6f0f7db9d092.roa (raw, json)
Hash identifier:          cHRpsC45cC33/BeEzkI8hmCfClqmZ4NKSL0zlUkK6js=
Subject key identifier:   6A:C3:9C:80:1F:23:6F:23:39:F8:4F:5B:CF:E4:57:31:5D:D0:58:24
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AF0D9BEB8E08740F6A7725100
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7689bd6a-2eee-3fed-b5d0-6f0f7db9d092.roa
Signing time:             Fri 22 Aug 2025 12:13:30 +0000
ROA not before:           Fri 22 Aug 2025 12:13:30 +0000
ROA not after:            Thu 20 Nov 2025 13:13:30 +0000
asID:                     54500
IP address blocks:        172.120.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:d9:be:b8:e0:87:40:f6:a7:72:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 22 12:13:30 2025 GMT
            Not After : Nov 20 13:13:30 2025 GMT
        Subject: CN=ad13acf6-38aa-45ec-a826-8b8d48bcf2c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:aa:66:45:67:12:f4:8b:94:f4:c3:49:1b:23:
                    d9:8f:e2:83:ff:4e:f6:7d:81:6f:8a:d5:c3:d5:c0:
                    f3:5e:e3:0c:02:ef:63:15:0a:c6:39:db:20:b8:8c:
                    be:fa:31:5c:60:cf:91:c5:a6:a9:78:32:d9:33:c8:
                    4a:e5:92:a2:a6:e2:a1:53:d3:b9:83:e6:5b:b4:9e:
                    ae:19:57:e7:a3:fc:5d:ff:fe:46:3b:a1:1b:9a:1d:
                    cd:2b:15:d4:69:8e:5a:85:3b:66:40:04:54:96:72:
                    e2:6b:46:6f:9a:79:58:a3:f0:33:07:3e:61:33:e1:
                    0e:5a:66:49:15:05:20:ad:71:6b:cc:5f:d3:d1:77:
                    8a:15:ad:f9:9c:df:6e:c5:28:ce:24:ec:2f:ca:38:
                    03:40:c8:5d:11:8e:07:2a:d8:46:90:69:e0:cc:2b:
                    ee:81:5c:f2:a2:a5:d7:b0:d1:e1:6b:d9:26:29:c8:
                    3f:48:b2:87:a4:8b:7b:48:85:ef:89:42:86:e5:bf:
                    8c:a1:30:d0:a2:19:9b:75:db:87:24:c5:5a:24:43:
                    8d:79:a9:90:74:c3:72:ef:94:af:0b:eb:96:66:08:
                    d3:ba:e4:78:5b:d1:d2:a3:9a:0d:5c:b2:18:a3:a2:
                    f4:9a:ae:a2:b9:01:48:99:3e:53:24:ac:e8:f0:1a:
                    da:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C3:9C:80:1F:23:6F:23:39:F8:4F:5B:CF:E4:57:31:5D:D0:58:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7689bd6a-2eee-3fed-b5d0-6f0f7db9d092.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:cd:cc:b2:35:95:3f:0d:c6:c0:b6:e2:10:d7:cd:8b:f9:59:
         01:2b:15:57:62:67:11:f3:02:11:29:76:68:23:86:e2:be:73:
         a7:06:03:9e:fd:de:1c:16:fb:43:ca:40:cb:5f:82:73:50:51:
         2c:65:a0:be:98:3e:24:02:86:b4:65:b1:31:67:d5:9f:ea:ec:
         29:3a:0f:73:cd:fc:69:a8:d1:64:f1:96:05:e4:79:71:fe:a4:
         b5:a8:10:b7:be:06:41:26:9e:48:81:f6:c4:33:8f:cc:36:82:
         00:18:3d:0b:ae:d3:2d:9c:de:db:36:07:1d:5e:3d:2e:db:28:
         08:d6:66:aa:53:57:76:09:4d:9c:a2:be:c2:50:fa:08:82:53:
         bb:85:ed:24:39:bb:67:e6:62:22:57:4f:1b:eb:a7:65:12:27:
         03:1e:5f:8e:c7:ad:be:41:0e:f9:f9:98:16:91:50:0b:70:a0:
         99:40:2e:fc:12:2f:3a:62:76:22:ee:d2:0c:08:a6:d1:65:1f:
         87:f5:24:17:ba:b0:b2:4a:69:15:9e:1a:a8:06:82:bb:0d:ba:
         3d:bd:da:c2:41:31:34:b2:61:96:f3:20:bd:53:eb:1a:02:19:
         71:f3:f2:c0:6d:55:d0:38:39:7e:92:d1:1d:37:46:81:b0:bc:
         45:79:4f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:22:10 2025 by rpki-client