Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bfd52911-eaf5-3313-86c0-0455a1e42377.roa
File:                     bfd52911-eaf5-3313-86c0-0455a1e42377.roa (raw, json)
Hash identifier:          h5TnaTduvFQqHFM9OBOI7N/4TZxFV2rmbFkqFTsMlf8=
Subject key identifier:   C3:45:15:EA:DE:26:25:6F:37:3E:50:24:09:C0:78:45:3E:E6:4E:8E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AB30FE8C256BC840F4A886100
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bfd52911-eaf5-3313-86c0-0455a1e42377.roa
Signing time:             Thu 31 Jul 2025 09:02:31 +0000
ROA not before:           Thu 31 Jul 2025 09:02:31 +0000
ROA not after:            Wed 29 Oct 2025 09:02:31 +0000
asID:                     40950
IP address blocks:        172.121.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b3:0f:e8:c2:56:bc:84:0f:4a:88:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 31 09:02:31 2025 GMT
            Not After : Oct 29 09:02:31 2025 GMT
        Subject: CN=3c41d54e-3066-482f-b9a6-c02d172909c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b4:77:3f:4e:69:39:6b:52:c3:67:6f:a5:c7:
                    37:9e:5e:39:18:47:39:fd:b3:da:e8:61:41:f6:73:
                    c8:17:3e:d5:10:51:b9:0e:ac:1c:75:6d:50:b3:de:
                    7b:f0:f1:0c:9b:42:23:c6:49:6f:5f:7e:0a:28:e6:
                    72:e8:55:d4:98:35:c8:04:53:42:3f:71:70:41:20:
                    25:8c:25:01:a8:57:6c:24:67:52:bb:fe:95:64:ef:
                    2a:93:31:c7:dd:3d:6b:cc:ab:cc:96:92:4a:32:b9:
                    15:ca:c0:a7:91:64:02:0d:6b:df:ef:15:9d:e5:39:
                    34:4f:bf:96:30:db:b8:35:03:4f:11:dd:80:e0:c3:
                    df:b5:a4:32:d9:76:97:14:c9:1b:d0:5b:0f:9d:fc:
                    39:41:89:30:8d:18:36:c3:c1:73:81:e0:20:41:49:
                    b4:d4:f0:45:30:bf:a4:7f:7d:16:21:28:a9:07:ff:
                    d5:01:57:49:25:2f:fd:06:e6:8a:8e:ed:a4:7e:90:
                    aa:9c:80:8b:68:68:9e:ab:e0:a2:aa:d2:a7:3a:ae:
                    62:bb:1e:02:f1:1c:18:cf:d6:23:78:45:3e:96:18:
                    9d:72:b5:66:43:a0:41:69:46:7b:1d:c6:1d:12:89:
                    15:2e:81:e9:01:29:02:b2:1b:a1:25:16:36:ef:46:
                    dd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:45:15:EA:DE:26:25:6F:37:3E:50:24:09:C0:78:45:3E:E6:4E:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bfd52911-eaf5-3313-86c0-0455a1e42377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:7b:c7:f3:c4:6f:f0:62:62:b4:a6:43:ff:2f:96:9b:6d:a5:
         c9:3f:14:37:51:b3:85:96:05:10:5b:47:68:92:92:06:84:2b:
         f8:cf:2a:2f:4c:e1:7c:b6:fa:3d:dd:58:c6:69:73:c9:fe:33:
         0e:1c:6d:2a:6c:54:4a:4e:88:4e:ed:96:a0:91:3a:8b:a8:a9:
         81:e6:4f:93:5c:8d:5f:1d:c4:5d:ed:50:95:85:22:bd:ac:05:
         c9:46:4d:d1:8b:00:51:d0:71:ff:06:71:42:a0:84:f4:a4:a6:
         cd:d7:6d:b6:a1:4a:6f:db:b4:50:cf:fa:d4:e7:ba:63:f0:e3:
         ab:ca:0b:91:81:26:ef:db:15:33:55:55:33:f7:57:80:85:0b:
         85:68:96:02:c6:a4:75:22:9e:c9:04:1f:15:16:ab:22:b3:32:
         9f:6e:e6:58:b0:60:16:ef:9d:9d:7c:b8:19:62:f3:f1:74:cd:
         06:be:15:62:ea:29:a3:02:28:58:10:72:f2:fa:05:a9:78:67:
         56:f5:c0:06:93:b8:f4:df:fb:5d:f6:8c:3d:38:d5:ca:fc:59:
         5e:de:ce:bd:22:e2:77:47:54:49:67:c7:5a:19:c9:76:ea:d5:
         11:2e:8f:2b:25:55:75:50:c7:89:94:03:de:d6:bc:58:c4:f4:
         36:9e:af:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:38:05 2025 by rpki-client