Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/30094f38-8467-3965-b0d8-2428c8f46755.roa
File:                     30094f38-8467-3965-b0d8-2428c8f46755.roa (raw, json)
Hash identifier:          1MGguP0f2xTXZ2cVNQjcBQJzmwqI5mLyMBnyHULVY6Q=
Subject key identifier:   BC:85:B4:0C:E7:9D:2F:2D:CB:DB:7D:CA:CE:61:A0:2B:FE:6F:2D:AD
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A8DC18279AB3D78AC69756080
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/30094f38-8467-3965-b0d8-2428c8f46755.roa
Signing time:             Fri 18 Jul 2025 00:19:38 +0000
ROA not before:           Fri 18 Jul 2025 00:19:38 +0000
ROA not after:            Thu 16 Oct 2025 00:19:38 +0000
asID:                     6939
IP address blocks:        172.120.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:c1:82:79:ab:3d:78:ac:69:75:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 18 00:19:38 2025 GMT
            Not After : Oct 16 00:19:38 2025 GMT
        Subject: CN=371cd0fa-297c-4a65-8f88-9d793473bfdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:07:82:7d:5c:c9:ed:76:f6:3c:90:08:ba:d7:
                    dd:cd:d5:6e:bb:5b:dc:55:9d:99:9e:bd:3e:f6:3a:
                    b1:89:00:4b:03:07:c0:76:f3:45:14:94:a3:5e:0a:
                    ef:db:0b:2b:9c:f2:cd:b5:9a:21:ea:7f:09:c5:c0:
                    2d:96:2b:d8:29:ac:ea:e6:fb:b9:75:c9:65:e4:80:
                    77:91:fc:bd:a0:4e:80:82:82:7e:37:f2:38:58:41:
                    3e:5a:d7:3f:03:e3:da:9d:20:5b:c5:84:63:f1:ed:
                    da:7e:32:13:71:9b:df:a6:ba:fa:bb:14:56:9d:32:
                    98:d5:69:f9:4e:8f:96:4b:28:a0:71:5d:59:b5:3e:
                    4c:d9:0a:2b:83:50:a2:76:71:16:41:f7:1d:e0:39:
                    83:5e:aa:d5:aa:15:45:37:6c:49:1a:76:c2:b4:ef:
                    33:02:25:48:12:a7:71:97:46:d7:04:f2:7a:16:a0:
                    b9:27:7b:f2:58:b5:46:2d:5f:f8:bf:e6:51:38:05:
                    22:97:00:84:17:fa:1e:64:e0:7d:db:b1:6c:f6:d6:
                    8d:92:32:5e:0d:bf:d6:9f:3d:83:9e:33:36:c3:8e:
                    88:08:19:85:71:f4:c6:30:af:73:1d:9b:52:5e:f5:
                    df:06:ca:aa:49:0c:b3:de:a7:44:8a:98:5e:82:ff:
                    4b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:85:B4:0C:E7:9D:2F:2D:CB:DB:7D:CA:CE:61:A0:2B:FE:6F:2D:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/30094f38-8467-3965-b0d8-2428c8f46755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:ef:f9:60:25:19:0c:02:da:16:cd:f7:51:fb:95:dd:cb:d8:
         11:5c:ff:f6:32:13:6d:f7:7f:ca:c0:0b:b9:3a:32:98:10:1a:
         e2:2d:da:db:00:44:fe:52:97:26:2b:a2:a6:85:4a:89:d6:6e:
         d2:1b:80:3e:4e:84:51:42:f4:71:d0:ab:06:d5:4f:9e:2b:71:
         9a:3b:22:35:db:2a:3b:2e:9f:b0:dd:06:8d:16:d0:5b:a5:02:
         bc:c4:b1:6b:71:09:3f:56:d7:c8:c2:ac:af:a1:bc:cb:2f:0f:
         70:3d:39:8d:8e:4d:eb:16:76:04:f2:ed:be:57:2c:1b:31:35:
         ae:48:45:8e:21:0e:b0:0f:3c:34:3c:c1:4d:39:5c:3e:c8:87:
         1c:91:c1:51:89:3d:19:d9:6f:41:02:9e:b8:71:b1:3e:c7:f4:
         eb:58:b2:68:97:82:28:91:3a:a1:38:5c:8a:6a:4a:11:e4:93:
         19:0e:86:ba:ed:26:87:1d:ec:be:13:20:1e:f9:d5:84:c3:cb:
         a8:29:50:17:0f:92:6e:09:d4:c9:76:94:d3:23:76:43:11:bf:
         17:26:85:17:ad:ae:06:49:9f:86:bf:ef:33:74:f3:12:da:bd:
         c6:96:a9:8c:81:af:9a:30:d0:6d:37:97:6d:d3:07:bb:63:8d:
         57:9d:89:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:52:48 2025 by rpki-client