Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e9d3114a-5b31-3607-8329-ac991f69fd4f.roa
File:                     e9d3114a-5b31-3607-8329-ac991f69fd4f.roa (raw, json)
Hash identifier:          d+2Rh7rBWYhvg6bo8IPNoehgQiryKwsfCY0govs8l1Y=
Subject key identifier:   42:E3:94:0A:BE:9E:88:34:0F:74:20:9C:68:98:6D:88:2E:B8:E9:0C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AD7D155AA39D2B5063E3BA5A0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e9d3114a-5b31-3607-8329-ac991f69fd4f.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     214238
IP address blocks:        172.120.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:55:aa:39:d2:b5:06:3e:3b:a5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=bc5019b2-2c55-42e0-b3b1-9e110547692f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:42:47:f5:67:9b:4c:46:d4:fd:2b:91:b8:35:
                    31:0f:3b:c5:28:af:fe:c1:4f:84:cb:a2:f3:13:7e:
                    da:90:f0:4f:fb:d4:43:52:5b:b1:85:22:15:48:f5:
                    96:49:0a:fe:88:ba:88:ff:b2:d3:fc:ba:1f:bf:ef:
                    bb:3a:da:80:40:60:4a:94:87:5c:ba:45:ac:c4:e9:
                    0a:de:b5:0b:8a:37:62:73:c4:7e:04:37:ab:33:a9:
                    28:72:53:f9:a0:67:23:b3:c6:06:bd:a1:3e:82:8e:
                    24:b0:db:29:2d:e1:5f:0e:cb:f8:f9:47:b2:a0:08:
                    41:85:79:df:46:b0:80:78:2a:59:5f:5f:eb:64:2a:
                    11:e0:7a:55:11:e5:6c:c7:3b:3b:ec:20:6b:0e:e1:
                    ae:d3:5e:a4:a8:28:00:1d:39:17:79:a5:f9:ad:c3:
                    23:4c:8c:0f:4f:5e:a8:a2:4c:bd:b4:93:44:01:65:
                    9d:12:9f:c0:c3:75:0f:c9:e4:43:bf:54:dc:49:e4:
                    42:42:bb:0c:80:c0:d2:65:ae:31:08:20:4d:1e:59:
                    aa:2b:81:34:d6:60:ff:0b:d9:25:6a:64:02:99:8e:
                    ee:d4:2d:ef:20:bd:e5:c1:77:36:1c:2f:90:e4:be:
                    3d:91:85:2b:49:15:15:08:81:b3:40:14:2d:f6:67:
                    a4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E3:94:0A:BE:9E:88:34:0F:74:20:9C:68:98:6D:88:2E:B8:E9:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e9d3114a-5b31-3607-8329-ac991f69fd4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:ae:6b:08:ec:de:0e:e3:b4:aa:72:78:99:ad:87:2c:74:d1:
         62:50:c7:f5:3e:91:37:15:38:1a:43:f7:62:f2:51:a9:d6:1c:
         f6:5f:fe:54:47:d7:ab:c6:1b:b8:5c:f4:81:e4:69:16:e3:e2:
         30:43:94:74:df:5b:d3:a4:1d:bd:06:df:2b:25:56:7d:19:e9:
         ee:82:6d:cd:93:d6:94:23:2c:01:4d:be:9c:8c:da:46:6f:61:
         02:ca:7e:4a:a1:ff:89:4d:85:99:76:82:74:90:99:af:9f:b3:
         36:be:a2:42:a8:35:8d:5d:d5:f4:2a:83:da:4d:d8:8c:ee:23:
         e5:82:be:96:33:c2:bc:54:9d:21:06:54:e8:36:45:66:b0:1f:
         2e:98:51:8f:1b:9b:b0:ba:00:5c:eb:ca:54:ca:63:aa:37:3b:
         ce:d7:98:a2:fb:41:d2:f5:b8:66:78:37:f1:de:41:d1:5b:dd:
         db:0c:2d:82:37:57:13:c0:16:4d:0c:f2:c3:28:c9:34:18:6b:
         57:89:0f:a1:98:40:19:ef:9b:87:44:09:07:bf:39:9e:06:93:
         da:8e:7c:6b:bb:00:0c:a8:77:8f:e5:8d:52:fb:cb:e9:ba:15:
         1d:8c:d9:24:a3:38:41:2f:7b:8c:0f:64:85:ad:d2:e1:31:9a:
         9e:19:73:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:02:57 2025 by rpki-client