Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e4d16d15-2c49-3c1c-a00a-a2b03481d820.roa
File:                     e4d16d15-2c49-3c1c-a00a-a2b03481d820.roa (raw, json)
Hash identifier:          iid7C+UeXDoIV6iS8qVPs3sjnppL9CmWvDuw7Pfos8M=
Subject key identifier:   76:49:96:22:85:4C:93:E3:D4:13:41:83:4E:E0:17:18:6C:0D:65:61
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B83820F9EA1D022ABFA6848B0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e4d16d15-2c49-3c1c-a00a-a2b03481d820.roa
Signing time:             Tue 14 Oct 2025 01:00:30 +0000
ROA not before:           Tue 14 Oct 2025 01:00:30 +0000
ROA not after:            Mon 12 Jan 2026 02:00:30 +0000
asID:                     7029
IP address blocks:        192.177.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:83:82:0f:9e:a1:d0:22:ab:fa:68:48:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 14 01:00:30 2025 GMT
            Not After : Jan 12 02:00:30 2026 GMT
        Subject: CN=5fcd321e-e632-4bfa-969a-f2bf3b18db48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:90:e0:c4:33:bd:89:69:4f:d9:43:9f:a7:07:
                    2d:24:f1:aa:8c:1d:2c:f4:d8:1b:a4:69:de:1a:66:
                    b2:c1:a5:e2:93:a8:de:39:2c:6f:2c:ad:0b:3c:94:
                    c3:93:46:a7:75:7a:5f:39:bf:49:05:f4:d4:9c:93:
                    fe:a7:66:7a:df:d1:40:ed:4a:2a:ce:cc:76:20:3b:
                    60:8d:5a:34:4f:f6:6d:28:02:cf:31:2a:48:d6:82:
                    a3:15:ca:dc:c9:67:da:af:d0:92:ee:73:bf:9e:7e:
                    a7:f0:51:38:ba:6a:73:1a:8a:61:d1:91:7d:44:6c:
                    f4:22:8c:3c:26:3e:0e:23:d4:d9:04:36:9b:a0:4f:
                    87:82:38:95:73:de:c9:aa:b7:ff:ac:9d:eb:8c:1e:
                    09:51:b5:ef:80:4e:53:98:2a:12:35:dc:f8:5d:3c:
                    32:a1:59:67:f9:5b:7c:04:f2:05:c6:1b:88:8b:2a:
                    77:20:4f:47:c4:4d:29:07:f7:69:b0:fa:c7:89:8c:
                    b4:3c:3f:3f:68:a1:2c:10:68:71:7d:2a:d9:3a:a1:
                    81:ae:7c:b3:ff:93:0a:c5:c0:92:98:e0:2c:a2:9f:
                    26:41:9f:62:8e:c3:d8:74:c4:60:c2:28:37:05:1b:
                    09:74:ba:08:30:11:7d:3c:5e:c4:6e:82:54:18:ba:
                    82:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:49:96:22:85:4C:93:E3:D4:13:41:83:4E:E0:17:18:6C:0D:65:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e4d16d15-2c49-3c1c-a00a-a2b03481d820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:f9:cf:7d:a5:5e:0a:0b:f1:99:5f:7e:9a:46:1b:cf:f1:7b:
         60:bd:51:c9:29:a3:d7:dd:f7:61:3e:5a:82:41:e1:b6:33:09:
         82:7d:7d:62:37:64:37:23:b0:cc:85:81:73:32:7b:9f:da:b0:
         8c:a6:72:d2:07:76:ac:c8:fd:41:31:74:13:31:e4:6e:10:fa:
         b1:8d:82:39:70:9c:a3:f2:1f:f4:be:4f:47:3a:c1:f4:73:55:
         e5:fd:d2:77:6d:15:d0:3d:1d:39:b3:c4:83:0e:3d:86:b9:e2:
         48:ba:ce:24:05:7a:ef:b3:72:f5:40:26:44:93:c6:69:9c:44:
         4c:fa:57:ce:15:e7:4d:da:d3:d1:dd:ca:ed:bc:3e:29:ec:6a:
         c7:da:30:fb:6e:80:3d:ee:58:52:c2:b8:72:3a:17:8e:89:33:
         4d:72:97:a6:af:2f:21:cc:bb:7a:04:46:c4:14:a9:04:db:db:
         c7:05:30:b1:1f:e1:2e:0f:ae:49:1d:e8:f7:b7:e6:ed:47:20:
         ae:cb:d9:07:38:e7:a7:c9:87:ab:80:3b:ce:e8:00:e2:6a:0c:
         a0:97:2b:4d:04:be:c2:07:a7:58:31:1f:9b:6d:94:9e:d8:a7:
         1f:eb:12:80:bb:da:aa:3b:a3:f4:aa:a1:0b:66:bf:e5:d3:0d:
         c7:6d:c7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:48:46 2025 by rpki-client