Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/844222e5-0628-3318-b43c-b1c9b79197c6.roa
File:                     844222e5-0628-3318-b43c-b1c9b79197c6.roa (raw, json)
Hash identifier:          hdSK+yAqGU0xx6WUmbtUmsu9oYO8XLiylf9jA6pkgSM=
Subject key identifier:   90:6D:B7:DB:58:40:74:BA:A4:43:09:0E:7B:19:F8:49:84:E5:A8:FB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AF0F12D788B781BDCB8656F80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/844222e5-0628-3318-b43c-b1c9b79197c6.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     7018
IP address blocks:        172.120.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:2d:78:8b:78:1b:dc:b8:65:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=a470509d-30ad-4a4a-b0d0-e0025f616dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cf:6e:37:5f:1d:31:7a:aa:e9:25:7e:29:6a:
                    96:88:31:71:15:c2:6d:23:da:9d:df:2e:13:4b:fe:
                    8d:5f:11:17:de:e4:d0:1b:dd:d8:2d:6c:e5:56:7c:
                    fd:39:7f:51:a0:0c:b8:7b:ba:65:e8:27:83:10:e9:
                    d2:b2:6d:74:de:15:85:28:87:1b:03:dc:03:2b:57:
                    35:e5:2f:9b:cc:63:d2:9d:f6:4f:8f:bd:4e:1d:c7:
                    a1:ea:ad:a9:67:5f:b6:db:2f:ec:f7:f4:34:31:d2:
                    78:dc:e4:67:a6:85:8e:40:23:c1:5d:76:2c:7e:8f:
                    2e:f9:46:44:6c:4f:7d:8a:e7:8d:9c:45:41:53:54:
                    57:64:b1:b3:a5:98:86:4f:bc:b8:5c:20:b0:e1:3c:
                    c8:fa:b2:d5:a2:bd:e9:2c:92:d2:a3:d6:78:5b:5c:
                    63:b6:6e:e0:03:ba:b0:fc:09:6b:34:18:28:af:38:
                    3b:c4:0b:f5:2d:d3:dc:dd:42:72:cc:b8:ad:0f:6a:
                    5d:f0:37:33:ff:09:af:c2:6a:e1:5a:d8:e1:d6:14:
                    b4:62:07:c8:32:f6:ff:7d:8d:ba:70:f1:03:da:ff:
                    46:ea:68:a7:6a:95:a8:d9:1c:8e:aa:00:0c:45:88:
                    e6:0a:c7:26:db:4f:f7:28:11:c9:25:7b:fa:59:91:
                    85:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6D:B7:DB:58:40:74:BA:A4:43:09:0E:7B:19:F8:49:84:E5:A8:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/844222e5-0628-3318-b43c-b1c9b79197c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:40:30:6a:28:ef:6c:1d:46:2d:47:00:a9:da:5d:7a:05:78:
         9d:b9:0b:83:91:12:7a:9a:1f:2a:87:44:b5:2a:08:23:c2:60:
         8a:5f:6c:63:00:2a:56:30:d7:63:71:ef:16:c3:95:80:e6:fb:
         52:4a:21:26:e6:f8:82:46:50:8d:68:bc:75:bf:98:a2:9a:1b:
         9b:70:18:96:d4:1d:e1:ef:ac:0b:7d:6a:0f:9f:82:30:3b:1c:
         64:7d:0e:79:74:db:18:14:3b:08:f4:0f:98:3c:d1:44:d3:55:
         a7:ca:2d:4d:b9:43:bb:55:98:0a:b1:d5:e5:70:67:a5:14:26:
         f7:1f:5f:0d:24:92:c4:a4:d6:59:c8:d9:80:3a:d1:13:5b:9d:
         db:ef:5c:17:d9:79:cb:0d:d2:32:71:94:f6:eb:04:71:d4:d3:
         ef:4b:30:f9:7f:f1:07:9e:cf:bb:6f:48:c2:df:d2:62:f6:33:
         49:03:e1:6f:e0:9d:1e:37:57:2d:b7:d8:ec:4a:ef:ff:82:d3:
         d3:03:fe:31:53:dc:6d:bf:01:8c:31:7c:56:de:0c:97:00:2d:
         d7:a5:50:6f:3b:6c:27:0e:d7:ec:4f:a5:19:c9:fd:32:aa:24:
         77:d5:6c:cd:12:50:79:a3:19:b6:9d:f4:e4:d5:44:61:b0:61:
         ad:a6:0c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:56:27 2025 by rpki-client