Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/727358dd-6ae5-369e-9eed-58a62144acdf.roa
File:                     727358dd-6ae5-369e-9eed-58a62144acdf.roa (raw, json)
Hash identifier:          JfKhYmPMrx/jY9SdvO3OjvoQVv3YYJY/fqwtb/08xgE=
Subject key identifier:   CF:BA:97:AE:C8:B4:8A:36:E0:1B:1C:64:63:E5:13:C7:E9:06:5C:1C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AA2C63677B24274E4E3BC4600
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/727358dd-6ae5-369e-9eed-58a62144acdf.roa
Signing time:             Fri 25 Jul 2025 13:01:04 +0000
ROA not before:           Fri 25 Jul 2025 13:01:04 +0000
ROA not after:            Thu 23 Oct 2025 13:01:04 +0000
asID:                     18779
IP address blocks:        172.121.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a2:c6:36:77:b2:42:74:e4:e3:bc:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 25 13:01:04 2025 GMT
            Not After : Oct 23 13:01:04 2025 GMT
        Subject: CN=2974c5a6-fd93-4d75-b6b2-26c89fbebe7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:25:3c:0e:5b:3a:e4:53:ad:d2:38:b7:cf:66:
                    7a:e5:35:5f:07:94:03:89:50:98:a3:07:15:68:c3:
                    b7:7c:6d:aa:bd:af:40:4f:11:f0:44:c0:bc:24:7d:
                    b1:35:23:d2:22:29:5e:9c:11:00:85:9b:17:c1:59:
                    07:ef:bd:a8:ce:c4:f7:c1:35:1c:83:a1:c9:73:5d:
                    a5:18:f9:54:c4:e0:20:b5:6c:59:58:cc:3d:10:e0:
                    77:a8:77:0d:4a:59:d8:7f:01:01:b9:04:b0:b2:08:
                    48:72:f6:10:27:4f:e2:4b:cc:a3:e7:a1:ce:fe:b0:
                    c3:f3:41:32:a4:4f:02:73:31:a7:b2:86:a2:26:70:
                    8b:92:0b:57:bc:ef:ea:30:6a:47:6d:9c:83:c1:e5:
                    c6:76:ef:e7:4f:6d:3c:b1:9f:83:94:50:6b:4e:ce:
                    f6:67:a7:07:f2:4f:f9:82:27:42:6b:17:42:7d:64:
                    fe:ed:90:02:0e:42:9b:50:2a:05:4c:60:19:9f:db:
                    b4:38:db:79:71:df:1e:d7:84:f4:af:08:5a:d0:20:
                    68:bd:6b:09:d9:8e:35:c9:63:ca:c5:2b:be:b8:c3:
                    1f:22:26:c8:f9:d8:eb:7c:ed:0a:2d:c8:77:85:a0:
                    af:f2:c7:73:18:31:60:82:18:aa:ce:3c:e3:41:f1:
                    52:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BA:97:AE:C8:B4:8A:36:E0:1B:1C:64:63:E5:13:C7:E9:06:5C:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/727358dd-6ae5-369e-9eed-58a62144acdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:7f:90:72:fd:2d:50:af:02:20:3a:12:dc:1f:b8:66:b3:35:
         01:ac:3e:ff:18:be:bc:57:63:2e:ad:75:fc:ff:24:fd:43:8d:
         8a:3c:b5:9f:97:6f:c7:e7:4d:f5:eb:b4:81:db:30:06:72:cc:
         fc:21:10:c3:02:84:ae:6f:fd:f5:a2:da:93:60:ec:1a:81:c0:
         1e:e3:0c:d6:5c:ad:dd:45:49:44:0e:15:50:57:6e:55:9d:78:
         d2:a8:4e:dd:d8:3a:f6:84:de:30:93:1b:a0:d4:24:74:44:a6:
         6c:b6:ad:75:9c:77:4b:ce:38:a0:53:fd:cb:79:07:ab:2b:29:
         3d:13:88:b1:28:ed:46:da:67:93:ba:8a:4c:c5:cc:e8:22:4c:
         b9:4b:36:f8:48:ca:5b:09:72:1c:b3:3d:54:58:56:41:76:c8:
         cf:88:53:94:0d:a5:95:4b:e3:58:37:54:b6:53:d5:ca:47:e7:
         ac:32:c9:d4:3b:98:e9:1c:56:98:37:f0:e3:c3:d8:4e:b3:fc:
         c3:e8:e7:0e:4f:5c:75:cb:d7:36:5b:7a:1d:c3:02:58:9b:14:
         1d:33:f6:87:15:ce:20:74:4e:35:d4:44:1c:25:17:0b:73:92:
         4e:e4:55:25:d6:24:77:73:4f:9b:21:b9:f3:6b:67:3b:c5:7d:
         96:ee:07:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:47:56 2025 by rpki-client