Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d67acbeb-dc64-3324-8fca-3adb5b6387fa.roa
File:                     d67acbeb-dc64-3324-8fca-3adb5b6387fa.roa (raw, json)
Hash identifier:          ywftR2DeM+9yuOX/2u+Lo3dLpEVJEmb9Oh1gIjYFX4M=
Subject key identifier:   D1:37:88:14:3B:20:62:69:2F:8E:E5:4D:6E:2B:38:20:C3:B2:3D:A1
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A94D0E1869DF13A01D26ECE80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d67acbeb-dc64-3324-8fca-3adb5b6387fa.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     138233
IP address blocks:        172.121.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:e1:86:9d:f1:3a:01:d2:6e:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=a0b73756-f2c3-4e8b-a625-09104aacce3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9f:09:f1:27:f2:39:38:0e:6b:22:dd:0d:c8:
                    f5:ef:df:5c:bb:8c:86:97:8f:f4:0b:3c:0d:86:e0:
                    aa:6c:32:43:2c:86:f5:ec:94:6d:91:07:72:d5:d3:
                    ea:75:83:8e:88:5e:8d:a2:91:e0:f5:6e:6f:f9:4b:
                    15:86:d9:d0:94:ea:6a:f6:95:1d:b3:ed:d5:de:ae:
                    b3:8b:88:4b:ec:f3:86:e5:2c:ba:a8:db:89:94:c5:
                    e8:9a:e7:d6:f5:de:5e:15:11:17:ba:07:9b:d8:7c:
                    1c:27:3e:9a:5e:ee:17:68:31:84:1c:5d:61:b7:a1:
                    ed:ac:99:f6:cb:06:61:d6:af:e9:ab:a8:b8:45:1d:
                    90:e0:0d:05:9f:55:fd:bf:80:58:63:fe:2f:29:5d:
                    09:38:a6:62:e7:45:62:bb:12:3f:98:80:eb:24:8e:
                    99:96:4c:8c:33:9b:01:7c:c4:1f:e0:5c:21:88:7f:
                    30:5e:7e:2d:47:d9:35:f1:73:84:1b:31:bb:55:a7:
                    82:75:8b:66:65:3d:e4:1b:1f:15:ac:24:ac:ec:c7:
                    a0:30:81:67:06:6d:b5:16:bc:4e:48:bb:7b:73:5c:
                    a0:1e:c9:07:9e:1f:eb:3c:a9:eb:22:90:d7:33:01:
                    41:59:1b:6b:b1:d5:c3:ca:c4:f6:01:f7:d3:a6:9a:
                    19:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:37:88:14:3B:20:62:69:2F:8E:E5:4D:6E:2B:38:20:C3:B2:3D:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d67acbeb-dc64-3324-8fca-3adb5b6387fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:a2:dd:43:61:3d:6e:cf:7a:1a:3c:e7:84:57:45:b0:17:32:
         87:44:e2:9e:8b:aa:44:79:67:56:4f:ef:21:2f:08:dd:ee:4e:
         34:6c:2a:a5:4d:ad:74:c4:f7:53:66:71:d6:f6:f7:2b:2b:38:
         91:80:47:f9:c0:26:2d:0d:1d:bf:88:2b:0b:b1:de:0e:b1:15:
         78:ef:11:11:4d:56:1d:81:aa:47:1f:e9:a8:c9:36:68:bd:e4:
         57:3c:b3:d8:e6:1c:5e:27:e0:8f:1a:55:9a:f5:83:98:e8:56:
         63:46:02:0b:4f:c5:91:3f:d3:36:e5:b2:00:c7:82:02:6a:fc:
         08:15:1f:d5:81:40:b1:89:74:f3:8c:18:51:aa:d5:75:de:e4:
         fb:ac:a8:9f:eb:91:6f:f6:9d:2f:b3:aa:6d:11:12:d1:74:96:
         0e:d2:e3:ef:84:37:5f:27:21:90:e2:02:9c:ce:fc:2d:3a:7d:
         2c:28:78:1f:35:f2:3b:a4:f9:1c:6c:7d:06:3a:79:ab:d2:1e:
         8f:c8:a4:18:7e:55:80:c6:aa:8c:fa:2b:a5:9c:c3:fd:4b:ee:
         42:72:47:8c:de:59:8d:f7:0d:bd:f4:dd:32:72:72:42:48:0e:
         26:47:b8:49:8f:58:f7:69:d5:85:6a:12:7a:e9:96:01:57:a0:
         7c:39:df:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:50:11 2025 by rpki-client