Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c7032ab9-f810-3bc4-8e61-9d2ff3d62a14.roa
File:                     c7032ab9-f810-3bc4-8e61-9d2ff3d62a14.roa (raw, json)
Hash identifier:          AZ5b0P+ijQ3QTQKJMFGOsu53t3WedrZP6J6k81C/QBk=
Subject key identifier:   0E:8C:CD:28:25:A5:70:A6:FF:B5:1E:8C:C5:16:61:C5:EC:28:B0:2A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B7F5261ABE2FFC17189B6D668
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c7032ab9-f810-3bc4-8e61-9d2ff3d62a14.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     18779
IP address blocks:        172.120.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:61:ab:e2:ff:c1:71:89:b6:d6:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=89fb0356-f4e6-4384-a699-f98f944b8c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:df:3d:fb:e9:8c:c4:28:9f:a5:8e:5f:28:9a:
                    03:35:d7:47:83:63:79:b4:2a:e8:f5:58:06:73:8e:
                    82:3d:69:bb:b4:b2:dd:6c:d7:c8:3e:eb:83:55:74:
                    ba:90:58:db:aa:e6:56:7a:6e:7b:37:45:a8:a0:37:
                    80:c6:06:be:b4:6c:d7:f2:86:6e:0c:81:ac:8a:bf:
                    7c:ec:85:65:2a:dd:d7:6b:4b:71:ad:3d:d1:45:3a:
                    02:4f:7e:cf:c4:83:09:1b:1e:8f:26:d6:de:fe:44:
                    a2:5c:20:b2:03:d0:f5:bb:77:de:b0:e4:57:7d:f9:
                    90:26:60:7e:a3:00:f7:7a:33:ba:3c:cb:2a:dc:25:
                    85:05:a8:66:0f:54:e1:0f:dc:34:33:48:24:d9:db:
                    48:de:25:f5:1b:b8:06:50:5b:c3:f3:54:70:92:ed:
                    0d:ea:9b:91:38:91:1b:bd:74:7c:4b:6a:dd:f0:da:
                    a0:00:dd:1f:62:ea:ec:90:38:e0:fe:7c:f4:a9:c0:
                    29:d9:8c:6a:df:03:7f:9b:ac:45:20:bb:1d:a8:70:
                    81:12:ca:98:65:e1:17:7a:bd:bf:68:3d:e5:c9:1e:
                    c4:08:70:83:33:61:f3:60:9b:e0:96:65:d9:dc:b7:
                    77:92:9c:c3:05:6b:17:ac:cd:6f:37:aa:a8:30:e3:
                    52:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8C:CD:28:25:A5:70:A6:FF:B5:1E:8C:C5:16:61:C5:EC:28:B0:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c7032ab9-f810-3bc4-8e61-9d2ff3d62a14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:5f:71:0f:ec:9c:b3:a5:a3:71:67:f4:8a:ff:65:ab:66:1f:
         db:ae:a5:d8:29:ff:77:5e:db:1c:9d:ca:8d:96:94:1a:c2:7a:
         97:c0:6a:3a:4c:d5:07:09:f9:68:ec:fb:11:d7:02:96:13:db:
         3c:2e:f8:77:db:87:9e:05:7b:1a:ea:51:a9:24:16:e0:cb:11:
         90:50:39:15:4f:4e:cb:0a:8a:2e:ed:3e:02:3d:99:d7:67:6c:
         2a:9c:0c:78:a2:4d:10:d0:4a:ba:d6:87:40:2a:05:7b:d1:c8:
         a0:9c:d8:6c:32:26:7d:b6:c8:e3:24:f4:e6:bb:db:f9:ea:5c:
         a9:70:47:98:19:66:22:a9:22:f3:c3:9f:c0:23:0e:23:26:57:
         7f:6c:ef:d8:18:a2:95:96:1e:3c:4d:91:28:bc:ff:d1:ee:07:
         90:30:b9:31:c7:c7:94:30:f2:6f:7a:24:e3:9b:c0:be:48:de:
         86:89:ed:88:07:4a:cd:fe:4f:5e:fd:2e:b6:2e:22:96:1e:f9:
         dd:45:a8:33:5b:16:4f:a5:40:ef:0e:a3:89:19:3f:f3:cb:6a:
         66:2b:b4:32:d4:f0:a9:09:50:43:17:12:50:5b:54:d6:a5:f9:
         9e:e9:78:92:a8:3b:6b:28:dd:9d:2d:ca:41:ba:eb:73:a3:e9:
         4c:36:19:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:48:10 2025 by rpki-client