Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2c159712-c770-3caa-aa1e-935b219e36f7.roa
File:                     2c159712-c770-3caa-aa1e-935b219e36f7.roa (raw, json)
Hash identifier:          FQqwY72dnCQKm075zJZk33HnnSM+4J1pLsW0ujdssxc=
Subject key identifier:   9F:46:97:99:63:B1:F7:1C:6D:64:B9:46:59:D1:0E:D9:0E:E8:57:B9
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A7E7B7E2AB2E57399AE73DED0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2c159712-c770-3caa-aa1e-935b219e36f7.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     3257
IP address blocks:        172.121.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:7e:2a:b2:e5:73:99:ae:73:de:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=b2157c1d-6c2a-4360-8c48-05b2daa0a4b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:92:6f:e2:fc:9d:c8:03:bd:15:5c:c0:15:74:
                    82:62:a6:d7:12:db:7b:74:b1:4d:f9:eb:08:6e:fb:
                    16:ec:46:c6:6d:75:17:70:9c:58:83:d7:26:45:f9:
                    34:c2:65:72:ad:3c:76:f6:fc:53:d0:43:34:14:ee:
                    8e:69:dc:87:74:8d:9c:63:b7:35:3e:21:75:3e:78:
                    d8:f3:a1:e4:c7:f1:29:93:62:c0:98:70:3c:32:69:
                    a5:f8:cc:5e:5b:f2:cc:2c:42:bf:48:f1:11:d9:8a:
                    1f:11:73:a1:92:de:f1:ad:b9:3f:5c:48:46:de:cc:
                    c0:f1:af:09:bd:23:e1:cb:3c:3e:1f:6e:c8:27:2d:
                    e7:8a:9a:eb:06:ce:d1:05:ad:9e:90:e0:d1:49:ca:
                    20:53:2c:b2:4f:76:8f:ca:3b:bb:43:d1:76:2f:30:
                    e8:39:f9:38:26:70:37:aa:3f:a7:cb:9f:7c:5d:46:
                    51:bc:ad:0c:3e:37:3e:4b:b7:d4:42:67:2a:61:03:
                    4f:5a:ef:c7:11:db:15:e0:b9:e7:b3:9d:d1:6d:4f:
                    66:22:27:c6:17:7e:1a:0a:f3:05:13:25:a5:2c:3d:
                    f2:c8:05:fc:ac:15:2d:3c:95:2b:83:23:88:6a:3a:
                    40:a6:8b:63:a0:69:cc:c1:78:0b:43:87:ac:2d:3d:
                    9b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:46:97:99:63:B1:F7:1C:6D:64:B9:46:59:D1:0E:D9:0E:E8:57:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2c159712-c770-3caa-aa1e-935b219e36f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:be:1c:a2:a9:06:09:c2:73:8c:b2:21:52:af:00:3b:f8:7a:
         c8:ad:26:42:d5:a8:46:35:77:aa:0c:2e:bd:48:96:15:8c:72:
         b8:dc:fd:7d:64:e4:44:1e:ff:4d:a3:a3:65:6e:cc:61:41:9e:
         24:61:33:a4:59:e8:28:3c:eb:18:c9:e0:fb:b6:5d:68:57:c1:
         d7:60:cd:39:e2:1a:a3:de:ee:a8:9a:42:a5:c5:c3:10:2c:47:
         c8:4b:eb:d3:c0:ef:e7:c7:40:e1:7f:8d:fa:81:4a:3d:10:f0:
         fd:0d:86:1d:39:1c:08:c2:99:f3:7c:00:83:c3:8b:b5:28:04:
         2a:df:f5:ea:d3:08:19:81:1a:90:ca:59:24:1a:d9:f4:de:85:
         f3:6d:e3:8b:e7:95:6a:48:79:d2:97:e6:be:43:e7:54:f9:67:
         bd:d4:56:f5:7d:99:6a:0f:a6:2b:36:90:98:e1:b2:3d:b7:63:
         39:be:3e:77:e1:9e:3d:29:94:98:ef:cd:8a:f7:e1:72:73:14:
         6b:68:01:33:4a:14:a4:b4:01:f5:ad:78:93:00:92:00:f5:fb:
         ee:72:a0:26:0c:9a:df:db:d7:20:9a:04:58:55:c0:6b:46:70:
         e0:7c:98:24:30:1e:29:be:c2:73:03:4f:1c:36:28:fa:73:29:
         5d:56:56:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:09:29 2025 by rpki-client