Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5192079f-12ce-31a7-81a2-74f178528cee.roa
File:                     5192079f-12ce-31a7-81a2-74f178528cee.roa (raw, json)
Hash identifier:          79sq6xjIQvD//m0tHycFm0PAKB3bwu3OeEtVbU9yu9k=
Subject key identifier:   B5:BA:A3:2E:DC:6F:91:B7:00:CF:51:59:D8:B4:2F:A6:15:42:2B:36
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A94D0E313FAB306842B6AFC00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5192079f-12ce-31a7-81a2-74f178528cee.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     212238
IP address blocks:        172.121.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:e3:13:fa:b3:06:84:2b:6a:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=15762ea2-97e0-4f49-b093-c3427b866dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c5:95:ba:83:2e:b7:cf:a0:6d:9e:88:99:6a:
                    e6:84:90:bb:c4:cc:12:68:a3:da:d3:b2:43:99:9f:
                    f0:57:92:46:1f:bc:c9:11:fe:76:df:44:c0:70:c0:
                    54:cd:30:a1:e4:b4:55:d8:f2:82:e0:8e:23:35:13:
                    db:56:a9:e3:25:e5:af:ab:9e:43:db:05:75:49:92:
                    37:70:82:4a:ed:91:a2:a5:75:63:00:73:22:22:d3:
                    04:96:cd:81:e9:a6:99:ef:61:de:60:82:2d:97:1e:
                    b7:32:f9:24:da:af:22:d8:a6:0d:44:91:cf:d6:48:
                    01:ec:31:bb:6c:31:05:25:69:89:3b:f7:a8:9a:d4:
                    67:da:ba:8b:69:35:75:7c:b3:8b:ca:a3:71:73:21:
                    d6:12:a5:da:69:3d:02:54:08:ec:28:ae:33:62:f8:
                    f5:1d:da:37:7f:7d:ca:5d:72:68:63:1c:b8:16:e2:
                    c6:7c:b2:40:c5:d7:61:1a:46:22:63:d7:dd:a4:27:
                    2c:12:a2:a6:fc:8e:39:f8:05:3b:d5:a1:dc:3d:bb:
                    56:fc:00:fa:a4:cf:dc:43:22:ee:8b:76:c5:24:05:
                    f1:f5:c3:e9:47:c8:6f:18:71:ae:32:fa:cd:58:06:
                    7a:19:7b:ad:78:3f:04:10:df:57:e5:c8:2c:c8:c9:
                    d0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:BA:A3:2E:DC:6F:91:B7:00:CF:51:59:D8:B4:2F:A6:15:42:2B:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5192079f-12ce-31a7-81a2-74f178528cee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:45:46:5f:fc:36:ec:de:b1:1c:ab:d6:5b:02:45:32:1d:cc:
         6a:c5:d0:8b:15:cc:d6:16:44:d0:64:28:5b:41:00:cc:68:93:
         97:2d:fb:a2:6f:ac:6a:d0:1a:4a:8a:3d:e1:54:84:0b:23:31:
         3c:6a:a8:ae:9d:49:51:4d:e4:48:60:e4:bb:a2:ec:54:a6:d2:
         b9:7a:18:e5:75:ea:07:02:3a:bd:1e:6a:38:0e:5d:1e:65:bd:
         27:33:20:fc:fa:56:cf:2a:03:69:a8:00:4c:c1:f8:03:83:ec:
         e6:da:4f:12:ea:89:60:4a:c8:b4:b6:1e:bb:df:86:ab:a7:41:
         e9:76:00:4b:b8:43:b8:5e:b2:08:ee:e2:0f:2a:c1:83:bd:32:
         13:b9:29:f0:72:3e:03:95:df:82:23:fa:b4:86:9a:57:46:60:
         c6:57:38:8b:c7:4a:76:51:7b:07:f3:b7:2d:94:fc:27:a3:6d:
         1e:c3:92:82:cf:d9:ee:63:42:c3:22:51:1e:e0:68:b8:7e:b4:
         10:db:c4:cc:92:2d:60:db:45:c2:dc:94:e8:75:10:2a:d7:31:
         56:fa:29:51:18:2a:5a:a5:fd:f2:a5:44:03:3d:c1:69:94:de:
         99:53:6d:56:6e:b5:b4:3a:4d:93:c1:a2:d8:ff:d3:20:d4:56:
         76:c7:ad:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:02:28 2025 by rpki-client