Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d29f46fe-80f5-31e6-9a78-305904959ccf.roa
File:                     d29f46fe-80f5-31e6-9a78-305904959ccf.roa (raw, json)
Hash identifier:          a0Dy1CNL39mytaqIbgHlHwAKfDzW9fU+ZRqqSQiJ/p4=
Subject key identifier:   0F:7B:EA:FD:A2:CC:23:C0:6B:CF:F5:EB:FD:CB:BB:FB:A2:9B:E5:8A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AD7D154F168D1BB311980D100
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d29f46fe-80f5-31e6-9a78-305904959ccf.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     214238
IP address blocks:        172.120.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:54:f1:68:d1:bb:31:19:80:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=7fa685f4-96fa-491f-9849-b077d16bb325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:16:3a:b3:af:00:bf:69:1e:c4:5b:38:67:4c:
                    29:1b:cf:35:4f:85:b8:c8:96:4b:c9:88:38:fe:ff:
                    ea:2f:41:6c:1f:8e:ea:e5:2e:5a:3c:70:82:a8:01:
                    9a:37:f1:70:e4:e4:f9:0d:2a:ef:49:a9:52:c1:35:
                    cf:43:72:bd:24:69:ee:e0:a7:d2:e5:b1:31:8f:27:
                    d9:76:e6:9b:b9:98:c5:28:ec:3a:c7:6b:b5:e3:79:
                    cb:8e:a8:7f:25:a5:a9:52:86:cd:f0:4d:7b:6f:7d:
                    ef:ea:82:40:60:13:fb:27:60:cf:d5:d2:3b:1e:c7:
                    24:60:6e:6c:5b:99:6a:ce:ed:b0:fa:82:3f:ce:f9:
                    ea:d6:79:83:6d:aa:90:81:be:9a:4f:91:0c:05:4e:
                    28:1f:11:df:18:5b:9d:ad:94:cb:8b:99:f1:fd:ba:
                    3a:b9:2e:df:53:bc:a5:89:5a:12:d0:8a:6b:ac:22:
                    2e:0f:a6:55:9b:91:5f:77:f8:98:d8:76:d0:3c:0f:
                    3b:91:41:0e:25:5f:b7:45:db:6c:9f:86:35:3d:0d:
                    25:17:03:54:df:61:85:18:d8:92:dd:ca:89:4e:f9:
                    10:15:00:2b:cc:d8:b9:ec:c4:95:47:ae:5c:3f:54:
                    82:ad:79:5c:c7:c1:99:4a:bd:83:49:5f:fb:80:33:
                    dd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:7B:EA:FD:A2:CC:23:C0:6B:CF:F5:EB:FD:CB:BB:FB:A2:9B:E5:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d29f46fe-80f5-31e6-9a78-305904959ccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:1e:de:07:28:e2:25:17:f3:bd:0b:91:66:05:30:64:85:ae:
         a2:3a:72:64:5e:db:6c:49:a6:5a:fd:1d:17:be:a8:c7:4c:90:
         d1:98:40:ad:2f:66:57:fe:a1:2c:a1:c0:ad:b3:be:65:9d:88:
         c8:54:c2:28:0b:ba:d2:bf:18:a8:85:95:83:b2:0e:42:c0:79:
         18:46:a5:ce:90:ec:b4:91:df:64:5d:1e:d5:fb:c2:04:c2:14:
         ed:ed:41:c3:f1:4a:e0:06:5d:10:86:fd:68:1f:60:b7:d2:db:
         13:fe:d2:55:cb:e0:0c:94:3f:68:71:82:61:a5:16:4c:3b:81:
         cf:20:ca:3d:36:ae:ea:65:bf:7e:a8:5a:79:7c:4f:dc:40:30:
         74:58:4f:33:84:88:e5:ba:6b:e7:ad:31:bf:85:37:c9:b9:34:
         82:2a:37:0e:4b:c0:1b:df:a7:fc:1a:6c:1e:f5:98:37:4e:f3:
         34:d7:9a:9e:4c:a3:aa:9a:fe:b0:9f:1b:c5:bc:58:a5:04:97:
         e9:aa:ac:99:35:49:b6:78:41:6d:b9:fb:51:b4:47:67:ca:2f:
         73:5e:05:34:e9:59:23:57:2a:cc:b8:5f:0e:2f:d6:84:c8:b6:
         99:2d:01:69:97:5e:70:57:dd:8f:dc:e3:76:b9:fb:f6:9a:38:
         84:80:e1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:00:26 2025 by rpki-client