Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/954715ff-ac08-35cf-8dda-494d3c6c233d.roa
File:                     954715ff-ac08-35cf-8dda-494d3c6c233d.roa (raw, json)
Hash identifier:          4wZkjm+452BueWm3onvFMMTYaaUUaA5fTvwRLfgFADQ=
Subject key identifier:   DE:62:57:49:6F:67:AC:E7:F4:18:35:B4:B9:80:CB:25:EB:7C:11:86
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B64CE6B3A1638818C8B77BC00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/954715ff-ac08-35cf-8dda-494d3c6c233d.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     44559
IP address blocks:        172.120.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:6b:3a:16:38:81:8c:8b:77:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=67de8c3f-0bc0-4548-8dbe-460714f36c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c6:69:26:c3:5f:49:5c:eb:a1:80:fc:5c:e3:
                    c1:2b:2d:89:fa:42:1f:7f:91:81:a3:40:47:0b:b3:
                    75:88:99:fb:4e:04:67:55:5e:3d:ec:b9:28:bf:73:
                    26:e3:44:29:ca:ad:bf:1b:90:c1:bc:b4:b8:63:81:
                    69:5b:81:2b:32:4a:89:e8:3c:2f:48:e3:43:6c:32:
                    48:9a:6b:09:b7:5a:fd:cc:5c:30:8b:5f:b7:a3:d7:
                    5a:f8:3a:90:f8:8e:5c:22:30:c7:14:c3:e5:d4:94:
                    a7:de:32:cb:9c:a2:55:4d:64:ef:fd:30:b9:5b:ca:
                    7d:2c:b9:87:ca:12:bd:f1:29:09:ab:7d:51:f7:49:
                    ac:47:15:48:8b:f1:38:55:ec:8b:84:bb:f3:05:7b:
                    21:72:28:42:d3:55:92:91:5f:d3:13:df:bd:cf:d0:
                    34:40:d8:d4:7b:28:4a:f7:16:f7:ac:76:ee:e0:1a:
                    de:46:35:55:a3:87:ba:59:33:ae:30:dc:88:3e:47:
                    20:b2:64:dc:92:a7:3e:ff:27:49:a2:34:9e:c6:8b:
                    50:2b:ec:23:32:a5:7b:1d:7b:a3:d4:6f:b4:29:04:
                    80:11:b2:ee:6c:cd:b2:2b:71:33:99:91:2c:1a:26:
                    10:7a:6c:48:b1:10:ab:e1:7f:92:dc:d6:49:dc:c3:
                    14:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:62:57:49:6F:67:AC:E7:F4:18:35:B4:B9:80:CB:25:EB:7C:11:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/954715ff-ac08-35cf-8dda-494d3c6c233d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:14:41:ea:aa:d5:47:8f:19:14:30:65:aa:ec:66:14:82:73:
         0b:92:3f:2f:63:d8:25:44:4a:60:78:c6:cc:40:96:1e:00:7c:
         a6:1a:40:79:98:44:e8:f0:c5:ce:85:54:ae:6d:fe:e5:b2:b3:
         3d:3c:73:c1:18:a4:72:bf:94:45:8a:bd:df:87:de:c0:cb:d6:
         8f:1f:37:b4:56:96:8b:50:09:78:45:c6:d5:35:8b:ee:f3:bc:
         7d:e7:76:d6:a9:e2:d0:03:1f:54:fc:81:de:13:81:1f:44:df:
         be:c6:d5:ee:d2:9a:bf:4c:00:59:8e:d8:bf:b5:52:7f:2a:7a:
         6f:ff:61:ad:68:37:9e:b4:b0:2f:d3:77:d2:72:f8:67:27:b5:
         7b:6d:e6:d5:6c:0a:e2:e2:c3:5b:ef:68:cf:f8:8f:2f:47:a2:
         cf:5a:ac:8a:7f:4c:00:ec:e0:94:6a:90:25:2c:72:79:e3:d8:
         4e:98:fd:1e:06:ff:fb:ad:6d:4a:ee:f5:9e:54:f1:c8:79:99:
         b3:a4:b0:c0:a1:0c:94:04:1a:25:26:9d:f0:fc:06:ea:66:1c:
         49:ce:f1:11:a6:7b:e2:b1:7a:31:a0:99:a6:b4:0e:e3:a1:37:
         b8:ee:bc:37:a1:2d:61:86:18:37:c6:68:95:1b:99:04:88:58:
         ed:7b:48:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:18:58 2025 by rpki-client