Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8b52073c-f25c-3d10-a8ad-580d7302ba64.roa
File:                     8b52073c-f25c-3d10-a8ad-580d7302ba64.roa (raw, json)
Hash identifier:          idJDE88/Q7ZQo1JnFJqFurjO2iwMySxwrJ0IrVj3/AA=
Subject key identifier:   F7:43:F6:AF:8C:29:CC:B4:AF:21:FD:15:0F:DB:C3:94:1F:A4:8F:7E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B64CE6BBA00001F1AEF526780
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8b52073c-f25c-3d10-a8ad-580d7302ba64.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     44559
IP address blocks:        172.120.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:6b:ba:00:00:1f:1a:ef:52:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=50ab8115-966c-48ca-a48c-7f289316ebbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5b:25:70:54:88:d1:9b:26:3d:15:ac:fd:5a:
                    af:db:46:5d:31:e6:d4:e1:b6:dd:0c:eb:82:e3:a0:
                    83:ca:70:ec:bd:96:79:ad:21:60:31:99:87:48:ec:
                    96:36:46:0d:86:61:62:80:c9:be:4b:a7:a8:50:45:
                    bc:ab:e6:94:7c:05:a2:c1:75:72:50:6c:51:97:68:
                    f6:02:de:e9:c0:ce:22:7c:b8:ee:f0:d6:29:9f:f6:
                    08:b0:7e:23:51:5f:32:b3:97:5c:1c:d1:98:71:54:
                    3e:41:59:b3:f9:68:19:5b:bf:1c:a7:ba:d9:34:c0:
                    0d:98:bd:35:2a:69:9b:96:af:30:71:da:d6:0a:70:
                    d9:cc:61:e7:08:eb:3d:26:64:a9:8d:f3:61:6f:00:
                    b5:6e:4c:ff:90:01:23:f6:aa:d0:37:6e:1c:64:49:
                    a8:4a:b9:c7:9f:00:cd:9f:bc:fa:1b:24:e2:5b:a9:
                    73:95:d0:44:7d:99:9c:0a:05:98:60:7d:a0:50:05:
                    5e:32:d9:d5:10:67:c9:fd:57:ce:c2:e6:4b:de:85:
                    3b:a7:e9:cd:92:91:3a:2b:76:96:be:e1:b7:78:84:
                    b9:d9:47:af:f9:a6:09:74:ea:42:3b:31:3d:72:18:
                    b4:0e:91:85:b7:27:4f:dd:64:57:55:8b:db:25:b0:
                    3e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:43:F6:AF:8C:29:CC:B4:AF:21:FD:15:0F:DB:C3:94:1F:A4:8F:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8b52073c-f25c-3d10-a8ad-580d7302ba64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:d9:cd:4c:c5:42:d1:81:f4:fd:29:22:36:75:14:32:8b:49:
         ad:a9:db:3e:67:ac:83:b4:f6:33:27:05:70:33:71:89:7b:5d:
         21:a3:5a:ea:65:a3:1f:6f:aa:e9:20:e0:e1:3a:ad:32:3b:f5:
         13:12:93:3f:20:97:3a:7f:b5:12:5f:5b:92:b4:2e:27:91:5e:
         25:bb:de:d4:9b:13:20:df:70:35:9e:d6:da:d1:0d:bb:8b:30:
         da:b6:37:2d:22:a5:2b:93:a8:12:b1:ed:77:70:67:5e:ca:62:
         07:b4:2f:d3:72:cb:92:50:de:c6:96:5a:5b:c2:ce:37:38:1c:
         1e:4b:ab:5f:10:bc:76:f0:96:b5:0e:3f:0c:75:4f:76:ce:66:
         7f:23:fe:23:c1:89:d2:b6:f8:e0:78:fa:b1:7f:17:6e:51:36:
         9b:77:10:e7:70:f9:87:b3:05:98:74:e2:59:44:7e:db:62:f6:
         e1:9e:a0:f4:06:e6:e5:23:f4:b7:01:1d:07:a2:f3:33:ca:3b:
         dc:55:c4:6f:27:42:f1:a0:99:6d:90:a3:5b:86:ea:91:98:5d:
         e8:ab:6e:8b:60:ef:46:92:b3:72:50:17:c3:12:00:0d:08:ff:
         d2:77:43:7d:d2:72:ac:9a:cf:0b:04:82:2b:93:63:92:e6:43:
         7e:7a:03:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:18:47 2025 by rpki-client