Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7bff928f-4a02-35a3-866b-16238ad30f5a.roa
File:                     7bff928f-4a02-35a3-866b-16238ad30f5a.roa (raw, json)
Hash identifier:          jr9TotvZaff3y07TLoyodmQMBvGlEgDAa7aEe2H1pF0=
Subject key identifier:   1F:21:2F:8A:6B:EF:1C:47:8E:B5:A0:95:80:1E:B4:65:C7:F8:17:D9
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AD7D1547994AC88BEAFF18840
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7bff928f-4a02-35a3-866b-16238ad30f5a.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     214238
IP address blocks:        172.120.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:54:79:94:ac:88:be:af:f1:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=11ca4d57-aab7-41e3-9a8e-772371ecea56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:85:60:ba:62:25:13:a8:a9:01:3a:0e:36:c5:
                    f6:ff:db:91:bc:04:b3:6c:77:39:a6:83:f7:c9:2e:
                    61:e7:a9:00:45:1b:a3:81:91:3b:08:90:ae:bd:5a:
                    24:d1:e7:72:f1:0a:b2:2f:ac:7c:50:bb:20:0b:b5:
                    2a:87:c7:ee:ec:f0:c2:ff:2b:c3:db:32:5c:07:ae:
                    8b:82:64:2f:8b:e3:9a:cd:4d:4c:6d:87:67:bb:69:
                    dd:65:ea:4e:3d:72:33:0e:91:61:7e:fd:77:0e:f6:
                    29:83:21:bc:74:4a:9f:89:8b:8d:2c:a1:1d:97:1f:
                    5d:92:52:59:c3:f3:56:b5:ed:46:a8:f0:99:a6:58:
                    64:1c:19:a0:de:d3:01:29:3f:e4:17:95:68:19:a6:
                    61:9f:d2:a5:eb:20:80:83:7e:c0:b1:55:b6:89:24:
                    e1:75:63:c8:c3:3d:8e:ba:92:0d:7d:e6:24:ea:b7:
                    13:68:6c:16:ab:21:a3:58:7a:7e:5c:e0:f4:34:25:
                    a0:85:d1:da:ab:64:75:40:08:83:e8:66:37:5c:31:
                    f1:4e:66:e6:04:0a:f8:86:76:18:fa:8b:7f:09:f6:
                    f0:01:85:b6:fa:d8:83:98:f6:88:19:62:a6:5f:47:
                    7e:50:95:ca:cf:a5:21:f2:c9:39:60:82:5b:9c:fb:
                    b3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:21:2F:8A:6B:EF:1C:47:8E:B5:A0:95:80:1E:B4:65:C7:F8:17:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7bff928f-4a02-35a3-866b-16238ad30f5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:d9:a6:d3:8f:c8:4f:85:56:3f:72:09:78:98:16:75:ad:6b:
         0c:79:cb:a9:2a:bd:4f:d8:89:9e:77:79:ff:31:70:fb:89:5a:
         0b:31:b5:24:53:49:b5:94:95:9c:ee:66:87:c1:43:0d:03:07:
         0a:68:1c:c5:4e:82:87:6d:6c:d7:43:a5:fb:ff:23:8a:a8:89:
         11:32:1d:a8:3f:9d:68:a7:24:83:6e:a4:a6:bf:8b:35:c6:9e:
         92:4f:c7:87:bf:1f:df:62:bf:28:aa:49:a3:10:98:f8:f2:5f:
         cf:41:3d:60:b9:04:91:c6:18:ed:3c:90:a3:d1:fb:9a:08:97:
         7f:eb:ed:45:b9:e0:a3:90:c0:c0:3d:82:d6:4d:cc:b3:a8:1c:
         8d:61:d1:76:3b:de:a7:bb:9e:58:a0:37:40:97:b7:ae:9f:01:
         c5:5b:2e:3d:78:7b:d2:e3:59:ec:2a:20:05:f9:1b:82:28:57:
         48:5a:9b:cb:a2:30:16:07:45:44:3e:5b:60:d5:36:75:27:e0:
         db:08:1f:94:c7:25:1a:9e:70:77:2f:4a:56:42:d9:b4:f9:c3:
         73:12:dd:f2:ed:96:f0:46:f8:9b:e0:cc:d3:d6:fe:ab:57:72:
         f5:92:d9:e7:e2:28:e9:01:c7:0f:f6:a9:04:57:44:b9:28:c1:
         e6:e5:7b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:54:45 2025 by rpki-client