Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/43a93262-8365-39a9-9d5b-310ced1845ac.roa
File:                     43a93262-8365-39a9-9d5b-310ced1845ac.roa (raw, json)
Hash identifier:          8D0K0kIAwFYhG/0f+BBriOnskRa2WgC8Udba3h1QwBw=
Subject key identifier:   A6:B0:37:4F:0E:5E:2A:C9:C4:8B:FC:FB:12:79:32:06:45:8D:12:B5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584BB88D572241D6E2EBDA675E00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/43a93262-8365-39a9-9d5b-310ced1845ac.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     214238
IP address blocks:        172.120.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:57:22:41:d6:e2:eb:da:67:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=50db2388-7b3e-4323-bd39-1cd4f56205f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:98:2f:7c:aa:b3:9c:17:e9:7e:74:d6:44:c8:
                    b6:e1:d7:4f:61:15:58:a4:4f:6d:bb:b2:97:41:31:
                    21:b6:7b:04:04:3e:99:92:b3:0d:81:21:75:04:e9:
                    e1:d3:81:27:22:76:c4:65:48:20:6f:36:28:26:4e:
                    0f:1b:a5:a0:a2:38:2b:1c:17:64:d5:dd:04:89:3d:
                    fb:d0:05:d7:9a:55:d4:5c:08:1b:ec:37:12:6a:ac:
                    54:0a:01:aa:b2:6a:d8:ef:92:8e:fc:e5:66:02:0d:
                    15:f9:b8:0d:4d:aa:e8:8b:91:09:77:53:26:a6:61:
                    0b:19:4c:1a:62:ed:a8:df:0b:c7:3e:0c:cf:27:17:
                    8b:52:e1:98:21:a0:1c:b3:ee:4c:5a:a3:42:c7:90:
                    74:c5:eb:34:b6:13:56:d0:6b:c0:aa:be:fb:88:8f:
                    b6:e6:45:23:0f:3f:f5:72:7b:ec:e5:a4:7c:db:b4:
                    de:b6:fc:ce:7e:e8:da:67:b8:e5:0f:33:0f:a6:5d:
                    ad:ab:f1:9f:16:c4:fc:ea:e3:4d:6e:43:41:6f:17:
                    47:7b:ee:c2:df:f2:af:d1:c5:3b:ec:89:46:cd:ca:
                    5e:a3:1e:d4:2c:67:8c:7f:30:3d:7e:2b:7f:fd:a0:
                    06:05:57:aa:5f:d4:ed:2d:f7:d0:97:dc:00:79:10:
                    c5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B0:37:4F:0E:5E:2A:C9:C4:8B:FC:FB:12:79:32:06:45:8D:12:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/43a93262-8365-39a9-9d5b-310ced1845ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ab:f4:7a:ee:e4:4c:7b:f7:d6:e0:18:84:d9:f3:9b:55:3b:
         6b:0a:6c:01:05:bc:0d:ea:d5:0e:99:fe:ac:f7:f8:ef:df:c1:
         19:c2:32:d3:b9:42:c7:d3:3b:1a:5b:92:2d:11:da:97:7e:9a:
         90:42:0e:17:bf:35:31:9e:28:12:6e:1e:2c:c5:72:3e:55:16:
         7f:50:1e:94:eb:d4:cf:97:15:23:b8:ab:ea:5b:33:3c:0d:79:
         71:da:00:bd:c1:8a:f5:53:da:02:91:ab:03:94:2c:ab:ef:d3:
         a9:7c:24:16:bb:b4:63:21:dc:f3:fd:ed:1b:8e:3b:fb:24:66:
         e6:61:67:e3:c3:d3:b2:a6:8d:9f:af:0e:75:7a:3d:fe:9f:e0:
         b4:04:29:c4:33:ca:c2:4c:30:2d:38:16:97:32:a1:cc:08:5d:
         83:72:b6:dd:2e:2c:62:1a:93:b2:db:fc:5d:3a:0d:39:5c:ab:
         7e:92:24:94:1a:71:4b:68:46:13:aa:3b:01:05:bb:e9:84:71:
         24:85:5a:52:12:a1:fb:68:b1:a8:b6:d2:b2:51:50:36:05:00:
         67:cc:d1:61:ab:5e:de:0e:6c:65:ce:ca:39:be:32:e5:50:29:
         d4:c3:bf:71:2e:34:ea:d6:e1:b7:95:6e:ad:18:d6:e6:84:a8:
         84:7a:22:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:29:37 2025 by rpki-client