Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/88dc3e03-abea-3602-96b7-094af246b218.roa
File:                     88dc3e03-abea-3602-96b7-094af246b218.roa (raw, json)
Hash identifier:          vuFYoDZvlNiInOcwVJknWrBhuku/iavJyzS6sXPjMXU=
Subject key identifier:   B0:F2:F7:B6:BC:42:63:48:95:CA:1B:A9:65:6E:83:EB:0F:5D:5D:91
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A94D0E2B14712179473D5228A
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/88dc3e03-abea-3602-96b7-094af246b218.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     212238
IP address blocks:        172.121.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:e2:b1:47:12:17:94:73:d5:22:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=4519082f-a29e-4498-b908-9032eaae2292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5c:bd:13:f6:f8:d2:0b:1c:ee:26:5c:79:e7:
                    82:96:98:db:91:0d:69:4b:f2:b9:f4:ac:3c:0e:02:
                    34:02:95:ef:66:33:c4:ed:d1:a5:a4:98:3c:dc:ee:
                    0f:e4:18:d3:ff:d9:3b:02:2d:90:60:3a:fc:a2:70:
                    82:20:59:75:60:26:be:4e:0f:28:6f:8e:19:40:18:
                    6f:3f:69:60:da:16:78:67:f9:94:c3:29:11:35:92:
                    0d:73:4d:e4:fa:09:33:7a:03:ed:34:38:eb:04:65:
                    c5:32:2c:f1:08:3e:58:21:59:4b:ab:35:89:12:05:
                    00:df:9b:b5:5d:8c:99:42:d2:d1:12:76:e4:fe:9f:
                    12:d2:4e:c3:e7:ac:47:9d:1b:86:72:58:6d:c0:31:
                    15:f4:1e:22:f2:4c:0e:e8:6f:01:5f:2c:8c:e2:f2:
                    d9:0a:0b:75:62:e0:1e:00:c2:b8:a4:fb:01:b2:f8:
                    c1:6c:63:ee:2b:71:c4:b8:c8:ef:9d:cc:59:a3:c2:
                    e8:7b:db:d9:97:8e:40:e0:98:ba:f5:56:dd:c8:16:
                    f5:fa:e3:d8:7a:9c:85:7f:26:67:23:2b:12:4e:24:
                    da:42:f6:41:93:3a:17:02:95:92:62:5f:92:c0:12:
                    1c:e4:5f:a1:1f:7b:ea:6c:1d:65:1f:fc:86:6e:49:
                    fd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F2:F7:B6:BC:42:63:48:95:CA:1B:A9:65:6E:83:EB:0F:5D:5D:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/88dc3e03-abea-3602-96b7-094af246b218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:e3:85:3a:bf:67:57:17:74:a5:33:e2:f8:ce:96:33:a1:1b:
         73:f9:f9:e7:17:02:e8:7b:cd:6e:37:7b:d3:60:b2:ed:98:dd:
         67:33:c8:14:2f:bd:88:2a:d4:fe:9f:a6:64:5e:f6:21:c8:15:
         94:36:3d:f7:da:0d:c3:b7:22:9b:e8:32:8b:30:67:b6:1d:59:
         c9:e8:36:69:8a:74:f4:62:67:22:bd:67:06:ca:35:73:bd:9d:
         61:23:e2:93:30:1f:05:99:ad:f1:69:5d:0a:80:08:12:3c:f3:
         70:f0:68:35:d5:1f:a8:1d:3f:bc:39:48:cd:45:18:18:ec:1e:
         5c:61:af:0a:e4:a5:e4:48:4f:e6:ad:f0:95:b6:f4:0b:71:7e:
         6c:e8:39:f1:6a:3e:f9:73:52:88:fa:ed:e6:47:5b:4c:19:e7:
         b5:e6:b0:c8:66:fd:76:63:ff:64:14:d6:65:81:5a:81:4b:ae:
         6a:36:0f:93:63:ff:dd:1a:26:e7:72:3c:a0:2e:88:1c:8e:50:
         26:40:72:b8:52:46:c7:4e:78:f9:fa:8a:58:d1:ef:46:7f:70:
         af:08:78:3f:08:60:6a:e0:18:67:e5:82:df:0d:63:d9:4e:7e:
         16:98:86:a4:68:f7:5a:0f:47:fa:b3:ab:49:76:c9:22:b6:26:
         78:72:85:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:08:04 2025 by rpki-client