Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/baf70881-8537-30ff-ae8e-1a2176221120.roa
File:                     baf70881-8537-30ff-ae8e-1a2176221120.roa (raw, json)
Hash identifier:          q62fUS6VPiyzNP5i+7ROP77QzkaWip2qSDAm+MZETgI=
Subject key identifier:   9E:E1:17:C2:49:0F:E9:D3:F7:74:82:F5:22:74:04:C5:6E:90:B6:8D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B83821046B1A4781834001040
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/baf70881-8537-30ff-ae8e-1a2176221120.roa
Signing time:             Tue 14 Oct 2025 01:00:30 +0000
ROA not before:           Tue 14 Oct 2025 01:00:30 +0000
ROA not after:            Mon 12 Jan 2026 02:00:30 +0000
asID:                     399073
IP address blocks:        172.121.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:83:82:10:46:b1:a4:78:18:34:00:10:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 14 01:00:30 2025 GMT
            Not After : Jan 12 02:00:30 2026 GMT
        Subject: CN=2d95c80c-2122-432d-885c-d2253e2a3a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ab:01:c9:d3:f4:79:33:fc:1b:bf:70:a1:e1:
                    09:38:2e:c0:ae:2c:9b:d7:0b:b7:a0:c7:47:0e:6d:
                    b1:e6:4b:ea:66:07:1a:c3:eb:29:ea:63:72:6a:f1:
                    be:4d:fe:40:4e:0c:0e:ad:ed:b3:6f:e3:90:c9:42:
                    e7:2a:27:77:6d:f4:db:47:8b:e9:3d:48:1c:b1:88:
                    73:25:6e:85:a7:42:91:06:a8:36:3a:ff:ae:40:5c:
                    e2:44:4b:74:93:0d:db:3b:dd:e6:5d:22:33:01:ea:
                    fd:7d:b6:0a:43:77:4f:29:bf:17:1a:16:8d:e6:93:
                    0b:56:b5:66:93:4f:af:0f:26:f4:b2:52:f3:89:87:
                    bd:26:f3:00:43:34:8b:36:be:bd:00:42:b1:e5:f9:
                    cf:9d:2e:2d:2a:be:76:be:a6:11:cf:f0:96:ef:36:
                    b4:a4:9f:9d:83:d3:57:4a:8c:fc:ce:a5:59:7d:9c:
                    13:1b:60:18:33:c6:67:9c:74:5a:24:36:d9:96:ca:
                    2c:31:97:27:07:64:a6:66:b9:e6:46:de:64:d0:67:
                    f0:92:5e:9a:d8:82:b9:7f:35:9d:91:1c:6b:be:ad:
                    00:f7:d7:af:d7:20:d2:7e:6d:6e:38:fb:92:48:f3:
                    74:a7:5e:79:aa:d7:c6:da:f1:da:29:02:95:db:9f:
                    8f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E1:17:C2:49:0F:E9:D3:F7:74:82:F5:22:74:04:C5:6E:90:B6:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/baf70881-8537-30ff-ae8e-1a2176221120.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:91:f5:94:3a:8d:4d:84:2a:46:7b:da:74:76:5c:68:2c:2c:
         36:ad:1a:82:4c:75:ef:27:09:87:22:99:b6:41:2c:cc:25:d9:
         96:3f:21:a9:c9:47:9e:bb:87:8b:8b:eb:42:b6:3d:8e:06:f1:
         74:db:6e:99:f0:9c:6d:bf:da:02:5e:94:ee:6e:b2:cf:a4:83:
         35:e6:79:05:c5:f8:83:3d:ba:a5:5d:a5:e9:f7:a7:14:78:28:
         16:37:04:5e:ae:fe:64:33:0b:95:c8:15:2c:f7:39:c9:25:36:
         7a:e9:9a:f0:bf:27:72:83:96:9b:e1:86:1f:b6:ba:8a:fd:82:
         01:2b:ae:73:b3:9d:e7:f3:2f:5a:a8:4d:09:d3:04:38:65:37:
         41:4b:9d:b5:76:c9:fe:45:6a:6f:f1:21:58:c0:36:85:a7:fd:
         16:d8:d8:ca:fc:cc:73:0a:61:c8:51:56:5d:86:26:d1:14:ba:
         8d:07:9e:23:b8:0d:e0:69:34:c8:e0:d7:20:a3:b9:8c:48:b5:
         a2:ab:df:e5:e0:9a:07:b4:ea:30:ad:34:e1:41:6a:1d:2e:4f:
         1d:f3:24:33:d7:23:c4:8a:ca:d9:b5:f2:33:86:41:52:ed:2e:
         41:2b:9e:12:f0:18:de:d3:63:b6:16:99:ef:d1:b8:9c:9d:77:
         a3:e6:63:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:20:40 2025 by rpki-client