Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6312e17b-eabc-36c6-8226-e3aa5ccfece1.roa
File:                     6312e17b-eabc-36c6-8226-e3aa5ccfece1.roa (raw, json)
Hash identifier:          ruqnWRHSo7SpnTiC+0ujI6eJ2Fl23f1J4py2H8bfgxE=
Subject key identifier:   7F:04:D1:99:73:A7:94:1B:14:05:09:0F:EB:4F:E1:2C:B7:14:FD:11
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A8DC18AEF55C273A2D53C1DC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6312e17b-eabc-36c6-8226-e3aa5ccfece1.roa
Signing time:             Fri 18 Jul 2025 00:19:42 +0000
ROA not before:           Fri 18 Jul 2025 00:19:42 +0000
ROA not after:            Thu 16 Oct 2025 00:19:42 +0000
asID:                     6939
IP address blocks:        172.120.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:c1:8a:ef:55:c2:73:a2:d5:3c:1d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 18 00:19:42 2025 GMT
            Not After : Oct 16 00:19:42 2025 GMT
        Subject: CN=4d45b0e4-6aa7-4ee1-b406-74b085b8b067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fd:5f:3d:17:04:3a:b6:b4:12:f3:8d:9f:56:
                    b3:0c:62:70:e4:9f:41:95:0d:cf:4b:22:af:bb:1c:
                    b0:87:35:e2:f4:a0:24:e6:77:ba:fc:98:05:38:b0:
                    19:15:16:dc:22:8e:2e:21:7b:74:2c:21:34:80:67:
                    98:63:fa:6e:00:b2:43:2d:6a:3e:75:98:c8:dc:23:
                    86:f4:c0:d2:3e:fc:57:02:6d:59:3d:8a:f4:f2:43:
                    a9:a8:99:07:1b:8b:ae:07:04:33:ab:54:c7:87:a9:
                    7c:16:cb:73:b5:30:70:38:65:ba:74:39:ba:bd:db:
                    01:34:a2:80:44:64:43:fc:c7:9c:3c:84:f4:65:be:
                    f8:4a:7c:e5:43:2a:3c:ae:13:db:77:79:aa:0b:86:
                    a2:11:4f:68:7b:f6:22:67:c8:17:90:b9:ff:a6:bc:
                    9f:24:5d:94:57:a6:af:90:b0:56:2e:14:cb:4a:a3:
                    cd:2f:d6:4a:78:76:51:18:50:bb:ba:7f:9c:67:cd:
                    a4:a5:5c:5a:ca:33:e8:c3:20:26:21:34:f0:60:2a:
                    18:c9:2b:67:6e:51:25:30:0f:f3:28:12:36:f9:85:
                    c7:25:5c:0c:83:fb:32:57:ca:46:c5:ae:fa:e2:dc:
                    e8:58:07:bc:5c:8f:9a:96:8c:e9:ea:0e:c3:0e:26:
                    9e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:04:D1:99:73:A7:94:1B:14:05:09:0F:EB:4F:E1:2C:B7:14:FD:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6312e17b-eabc-36c6-8226-e3aa5ccfece1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:71:5c:3e:47:5e:65:2b:42:f4:c4:0f:42:b1:7f:8f:f3:c6:
         89:3c:f1:c5:a4:ff:78:ab:1e:bc:8c:70:21:47:46:49:a9:4c:
         20:79:53:91:61:38:e9:e6:7e:ba:a9:87:5c:e0:6e:a5:3d:d9:
         36:7f:2f:1c:c8:ed:a7:3a:48:e7:ad:13:b0:df:76:5e:4b:26:
         15:3f:60:ef:fa:36:91:11:5b:cf:8f:4f:5e:0a:8a:22:75:d7:
         ab:45:8d:58:28:22:82:81:11:a8:f2:8d:0e:a0:a2:48:ae:ed:
         2c:ef:46:0e:9b:65:01:dd:75:b0:a5:11:c3:98:77:a2:38:de:
         d6:39:46:2a:70:62:ac:4d:6f:ff:b5:99:a2:12:16:6f:46:6c:
         3e:0d:1a:d9:73:0e:d7:e7:5d:62:11:37:3b:5e:4c:f3:86:be:
         4c:3c:2b:97:2f:8a:f4:e7:89:26:7f:2d:c5:20:15:dd:55:2c:
         27:d2:36:b2:f9:36:14:99:e9:a4:a9:6a:ed:78:58:03:e3:e4:
         84:45:e4:bf:c5:58:35:9e:09:b3:ef:83:64:f4:2e:fa:7c:bb:
         3f:e9:7f:da:1b:ef:96:40:a8:34:37:da:a6:75:d0:1e:0e:03:
         66:f7:57:2e:e6:60:14:96:47:9e:4d:e9:52:2d:88:45:bc:4b:
         b7:91:9c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:09:21 2025 by rpki-client