Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e16764a8-5245-390e-85c8-3a9a59af7d4b.roa
File:                     e16764a8-5245-390e-85c8-3a9a59af7d4b.roa (raw, json)
Hash identifier:          KxTjD805BfG7SdkEAIssDmAJ37lq0CnvP/8lW57X3Wk=
Subject key identifier:   2E:A2:1C:79:EB:FF:EC:E5:56:ED:C2:BC:6C:BA:BD:BF:54:DF:BD:F8
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B4A47345AA5ABDAD6FF866FC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e16764a8-5245-390e-85c8-3a9a59af7d4b.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     18779
IP address blocks:        172.120.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:34:5a:a5:ab:da:d6:ff:86:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=38cc1cdd-c236-4615-ad2f-9dccf3441559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ce:dd:f3:81:30:1d:ef:ee:b8:28:3b:4b:43:
                    02:25:83:a3:06:c1:b1:83:bb:0d:a2:75:c1:03:97:
                    6a:72:39:4b:76:81:25:f5:fe:46:10:42:0d:e2:88:
                    cb:72:3b:cc:2f:ff:8d:e5:a1:9d:b4:82:8e:e8:0d:
                    0c:b6:3d:a9:20:a4:00:68:6d:45:f0:73:a1:8a:4d:
                    7a:72:d1:d7:8a:d7:bf:1c:e1:10:c6:9b:16:7d:d3:
                    96:0f:04:5b:63:19:15:7a:8f:bc:33:d9:3c:70:c9:
                    17:7b:b7:29:1c:db:6a:7d:c9:79:73:63:8f:30:c5:
                    fe:20:f9:99:64:6a:e3:22:59:c4:45:b0:cf:73:0d:
                    8c:70:40:dc:30:a1:83:0c:5d:2d:e5:f6:43:50:b1:
                    57:bb:1a:23:fd:b3:a1:04:5b:62:77:b0:3b:12:60:
                    91:e9:93:e7:b0:2a:23:5d:a4:ae:c9:b0:db:12:15:
                    15:85:78:64:5d:d9:f2:64:3d:13:c8:33:31:29:0c:
                    da:c6:73:69:7d:03:c6:22:2b:05:45:4b:de:bc:63:
                    ba:6b:69:ad:f2:24:ae:44:5e:f5:c1:a1:72:85:c1:
                    ca:5b:c9:bb:7d:c8:3d:72:1a:22:0b:ea:d4:5e:20:
                    14:a9:3b:ce:39:90:cf:aa:1c:2c:1b:0e:e5:6e:8c:
                    77:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A2:1C:79:EB:FF:EC:E5:56:ED:C2:BC:6C:BA:BD:BF:54:DF:BD:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e16764a8-5245-390e-85c8-3a9a59af7d4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:1b:81:fe:d6:99:72:53:f4:6d:f0:60:f6:dd:b0:e8:7d:54:
         36:c2:a8:ed:b0:17:47:5d:b0:d8:a0:3c:2d:d8:9a:1d:d6:f1:
         b6:2e:5f:29:80:28:a9:96:f2:28:fd:21:23:e5:9a:7f:1e:a8:
         88:6c:e0:3d:3a:cd:f2:b5:32:d8:27:47:f4:77:3d:4f:44:22:
         8f:95:0c:bb:26:3e:85:86:4d:44:ee:9e:1b:7c:d5:e0:91:3b:
         94:0b:f3:66:20:46:16:9a:1a:33:71:f8:27:89:ff:97:a8:d9:
         5b:9c:35:72:0f:0c:87:6d:95:39:d8:50:1f:66:03:63:ea:8d:
         df:c0:84:c3:e6:d5:cd:d3:81:f9:27:3e:27:fb:ec:7a:47:59:
         fa:2f:03:78:50:65:89:d1:75:2e:3f:30:02:ac:b2:a1:b0:97:
         dd:bb:d6:26:bf:a9:f0:69:43:af:08:63:18:fd:ae:f0:af:8c:
         72:f8:bb:50:27:8f:c1:9b:b0:ef:1c:df:1b:53:4d:2a:7e:84:
         07:50:41:eb:70:45:95:7c:f3:f4:3e:28:57:51:fd:44:d9:22:
         f9:0e:79:b0:2f:40:0f:df:5b:34:f4:2c:fd:ed:4d:71:34:3b:
         d4:94:12:b4:61:4e:c4:9f:63:ee:9a:14:d6:3e:97:cf:a1:d1:
         37:fb:9b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:47:43 2025 by rpki-client