Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b048b074-ad73-315c-9574-cc4227c0e7dd.roa
File:                     b048b074-ad73-315c-9574-cc4227c0e7dd.roa (raw, json)
Hash identifier:          heJjhPqvVH2tV0pA7mCtTq6F3/Q4OYMrtpaxbx/ufGA=
Subject key identifier:   59:2F:3D:CE:CB:05:16:AC:EF:C2:2E:C2:E5:23:CF:8F:73:18:F9:3C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B4A470F5629B573026D641830
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b048b074-ad73-315c-9574-cc4227c0e7dd.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     18779
IP address blocks:        172.120.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:0f:56:29:b5:73:02:6d:64:18:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=85fc0f19-d2ac-40db-aef9-f741e2934d3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:20:2b:05:27:da:8b:b3:0e:48:82:c0:17:c0:
                    ee:72:03:45:96:83:59:54:66:ff:9a:9e:43:6b:23:
                    20:14:8d:31:7c:cc:51:34:60:14:80:a6:ef:c9:53:
                    54:98:47:29:fc:65:62:dd:2d:77:22:89:6b:1a:2f:
                    13:de:37:74:39:f7:f4:7d:48:ee:71:ba:71:73:e2:
                    22:a9:34:b6:bc:be:07:be:e7:9a:7f:00:55:76:cd:
                    1e:d8:87:4a:cf:dd:ae:46:51:90:8b:fa:e9:b0:81:
                    d2:be:fe:e7:12:ce:4b:d8:0f:f9:81:19:b5:14:63:
                    83:d8:fc:21:4a:81:b6:b2:23:d8:99:52:46:c8:4d:
                    34:7c:b0:6e:97:b0:64:1b:c3:d2:b4:2a:7d:91:d9:
                    9f:74:f1:05:ae:df:10:0f:48:f2:b7:6d:01:61:a8:
                    3d:02:c9:aa:76:46:e1:41:f4:3f:0b:87:f5:cd:62:
                    2a:dc:db:9e:89:5f:4a:16:88:50:9a:ed:14:ce:ed:
                    71:bd:72:64:a1:01:7e:67:09:f9:63:e2:db:5c:e3:
                    84:b7:fe:77:cb:3c:ed:0a:01:4e:5a:11:15:75:5d:
                    41:2d:2f:3e:37:a2:92:c9:3d:96:33:a0:31:40:35:
                    d9:17:26:f3:7a:bf:5b:8d:8c:2a:dd:2a:72:6f:0b:
                    2e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:2F:3D:CE:CB:05:16:AC:EF:C2:2E:C2:E5:23:CF:8F:73:18:F9:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b048b074-ad73-315c-9574-cc4227c0e7dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:da:f5:70:52:96:e4:68:92:3b:dd:31:2a:97:64:72:94:af:
         bf:8c:ca:a2:ba:c0:fe:b9:0e:7f:f6:80:bc:22:17:a6:ef:6e:
         ab:98:e5:d2:3d:d8:83:92:ac:16:10:8d:3c:09:0a:8f:b8:07:
         ce:44:60:a8:72:f2:96:2a:1d:93:69:35:d8:b2:be:c1:75:dd:
         e3:01:71:f7:00:14:0f:fa:df:7b:3e:2c:5d:db:77:ff:50:ea:
         0b:4d:df:be:7d:12:f5:b5:82:1f:92:c3:8d:ca:6b:4d:c6:fc:
         fc:93:17:e7:11:fb:7b:b9:2c:8c:fe:79:0f:c8:de:b2:4e:eb:
         fc:7a:14:0d:fc:1f:c9:d6:83:e5:d7:be:30:59:80:8d:a6:81:
         63:02:f1:5e:d3:5f:47:4f:2a:e7:48:a4:a5:b3:eb:6a:28:86:
         b4:eb:7d:a4:95:39:ef:11:4e:22:ee:05:81:83:45:75:1d:36:
         e8:44:d9:8e:dd:5e:27:3e:73:2b:b4:97:70:f6:70:4b:8f:c9:
         0a:02:19:bc:8a:d9:51:c8:d3:7b:ff:11:11:cb:04:fa:c1:f9:
         b3:e7:df:44:f9:08:6c:22:09:85:35:6a:28:39:e1:c2:86:9b:
         7f:40:d5:0f:c2:d4:29:a7:0b:57:81:58:3e:3a:91:fc:27:85:
         77:22:0e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:47:42 2025 by rpki-client