Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aab07657-018f-3da9-aa87-62f7bffff039.roa
File:                     aab07657-018f-3da9-aa87-62f7bffff039.roa (raw, json)
Hash identifier:          mZKZWedR/dRsutzfp3sAVdCHAfhFiwBXXbWq/cPgAVE=
Subject key identifier:   28:30:0E:D5:64:ED:96:6E:3A:AC:D4:F3:1B:10:DC:75:6E:43:3C:E9
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A698B1D41A276AE88229A7980
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aab07657-018f-3da9-aa87-62f7bffff039.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     18779
IP address blocks:        172.121.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:1d:41:a2:76:ae:88:22:9a:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=1ab30181-3579-465a-b1f5-97f9789d2af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a7:4f:7b:43:17:38:9e:01:c8:42:de:da:88:
                    b9:72:d2:a4:0c:13:11:a8:f8:7d:04:d7:04:95:4f:
                    29:3e:31:8f:9a:72:f4:21:b9:20:60:9c:36:50:e0:
                    da:e3:2a:f5:fe:88:ec:a6:34:65:fb:d7:40:52:d8:
                    2e:fc:c6:0f:47:9b:7d:40:7c:79:51:84:10:f6:7f:
                    93:59:49:fe:7f:c1:73:ed:ae:71:c2:78:4e:7a:c3:
                    e1:a5:1e:bd:2b:96:cd:53:83:2f:ab:a9:90:5b:63:
                    6e:03:a1:54:36:ce:d7:49:7d:20:f2:80:37:55:09:
                    db:f7:72:0f:be:da:ad:08:da:f1:17:6c:48:d0:6e:
                    1c:8d:1d:c9:e5:5c:9c:05:90:1e:45:58:c1:a4:c4:
                    27:53:75:29:5e:79:92:b1:59:10:31:09:36:11:73:
                    5d:6c:18:60:2f:f0:f3:41:f4:38:61:3d:23:5e:47:
                    a7:ca:23:97:b5:1e:66:46:15:8f:b4:bb:3c:ce:ac:
                    ce:33:16:88:08:ad:a1:85:c5:e5:aa:4d:dc:25:93:
                    00:1a:26:b8:cf:6d:17:6d:d0:f8:34:35:98:ce:a3:
                    6b:9c:e0:c8:07:38:53:c7:30:52:21:cd:3d:c8:ff:
                    9a:61:6b:4d:d6:fe:8e:61:55:f1:79:fc:6d:9d:ac:
                    b9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:30:0E:D5:64:ED:96:6E:3A:AC:D4:F3:1B:10:DC:75:6E:43:3C:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aab07657-018f-3da9-aa87-62f7bffff039.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:2a:ea:2c:d6:8f:b3:64:9b:7c:01:91:76:f5:fb:5c:69:54:
         49:4e:3f:24:16:0b:c2:c7:ec:56:9b:b0:e1:ee:b4:5d:f8:0e:
         4d:9f:65:e3:f1:07:56:03:53:12:9b:8f:22:5a:24:0a:4a:7e:
         2c:02:df:45:de:2f:87:6e:f2:fc:af:20:49:fc:a7:db:c7:a2:
         89:e5:5f:a5:a5:db:6c:96:8c:20:32:dc:d7:17:54:0f:7f:cf:
         19:7d:b1:2a:0b:98:6c:08:7a:5f:78:63:8c:ca:f9:55:58:e6:
         a2:7b:6e:b5:72:c9:45:bc:b5:be:0e:bc:74:cc:ff:82:01:c8:
         5a:e5:d8:f7:1f:ec:26:a2:bd:42:63:ff:d9:0a:b6:33:9b:61:
         38:15:b6:8d:e9:d4:c6:bb:39:85:99:9a:d0:73:09:12:32:c5:
         c9:e2:e1:46:7f:73:df:40:d5:e7:ae:26:46:e0:d1:c0:a7:f3:
         05:da:d5:77:b4:5d:51:42:a5:c6:17:16:49:ee:d8:3f:46:c5:
         af:b3:a2:1c:66:13:cd:a3:55:ac:67:cf:a7:6a:94:78:76:6a:
         a3:7b:18:0a:f6:bc:65:4e:f6:e7:26:dd:85:b7:ee:e8:95:91:
         5e:ef:b8:c6:57:8a:c2:9d:75:98:a2:81:59:85:b5:71:ab:74:
         d2:f5:9e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:24:38 2025 by rpki-client