Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fffbff41-2b8f-3bae-8e48-152d7683df11.roa
File:                     fffbff41-2b8f-3bae-8e48-152d7683df11.roa (raw, json)
Hash identifier:          qo9IeaNL2a9OnLDn8no4EyyAL986yrRTnKgwrRzjIps=
Subject key identifier:   69:E3:D6:0C:55:BE:7A:EA:0B:5D:D1:4B:E2:13:08:59:B3:A9:64:96
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A698B1DFB98887C05C3428500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fffbff41-2b8f-3bae-8e48-152d7683df11.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     18779
IP address blocks:        172.120.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:1d:fb:98:88:7c:05:c3:42:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=d3c029b5-72c7-4ee4-9a14-d0ece7b15994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c8:fc:2c:2e:b8:e0:ca:85:7b:14:47:62:96:
                    bc:5e:12:6e:58:64:56:bf:fb:c6:58:f0:c4:12:2c:
                    91:fb:78:a5:80:ef:60:98:e5:d5:48:ee:be:04:74:
                    46:33:7f:49:16:83:ab:7c:24:18:cd:57:77:7b:63:
                    af:49:2f:6e:ed:d1:f9:24:e6:be:d7:c4:50:37:ad:
                    67:0a:57:48:84:51:dd:3f:74:d1:ad:08:66:f4:c0:
                    15:13:d4:df:6a:65:13:3c:62:2c:73:3b:a9:89:83:
                    2c:44:8d:e1:88:ad:b6:83:1c:50:28:2d:6e:f2:aa:
                    80:f0:28:23:c3:cd:c3:62:02:33:8a:21:9c:2a:e8:
                    e2:62:f9:ff:20:9e:b4:8e:78:5a:b1:2d:75:6a:e2:
                    3e:d9:45:99:ce:3a:e0:7f:61:99:d9:bb:19:95:7c:
                    16:4a:3e:dc:39:65:4e:5c:4b:da:2c:e7:4c:01:7e:
                    c8:57:80:d7:81:b9:25:7b:2d:b7:80:6a:af:6e:be:
                    12:8d:9f:97:97:f8:0a:70:d1:ef:db:b3:e0:58:76:
                    c3:d2:de:68:5d:e9:e9:ea:9b:37:eb:84:e1:1d:98:
                    5a:c7:2e:66:b8:34:38:ca:64:90:91:ef:b6:46:d1:
                    7d:c8:25:c7:e0:45:cc:29:d2:39:c8:3f:05:3a:84:
                    53:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E3:D6:0C:55:BE:7A:EA:0B:5D:D1:4B:E2:13:08:59:B3:A9:64:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fffbff41-2b8f-3bae-8e48-152d7683df11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:01:c2:9c:5c:48:67:08:4c:a4:b4:38:63:ca:c0:a5:c9:71:
         fe:b1:9f:22:cd:cd:9d:9c:57:ab:81:e7:a5:9e:fa:0c:52:bc:
         46:ce:8b:27:a5:16:a9:af:54:c9:e6:d6:da:6e:ed:d0:68:fc:
         e5:d2:ad:16:b9:27:43:e9:3f:41:47:56:71:48:82:da:e4:27:
         37:a2:db:56:8a:93:ad:83:25:f4:ea:99:64:ce:88:1e:92:c5:
         63:26:6b:89:6d:53:d5:da:27:66:1d:5d:72:12:78:37:83:03:
         a2:3a:c4:3d:0c:d0:97:05:f7:7f:7d:da:21:ff:55:b5:40:bc:
         83:0c:10:0c:f3:5f:9d:4a:51:1f:9a:7b:bc:b3:41:0c:d0:17:
         9c:1b:df:20:f9:18:cf:50:c1:47:95:9b:a9:f6:92:d5:28:53:
         b8:6c:2f:da:25:91:23:3e:a9:89:c0:b7:62:f4:50:6a:68:99:
         f7:55:63:a2:c0:4c:c5:8d:a4:22:a5:e9:cf:dd:7c:db:f3:b4:
         0b:f0:7d:0d:8b:1e:ce:4e:91:cb:ce:a3:67:ef:91:b0:a1:f3:
         5d:1c:66:b7:8d:59:f7:cf:d4:cd:0c:97:ab:cf:7e:5a:31:fa:
         d2:81:2a:99:2e:ed:e8:66:4d:0e:ba:a2:e3:ed:09:47:fd:b7:
         a8:c6:b6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:21:03 2025 by rpki-client