Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/046d3315-ec1e-3463-a320-06e75f609024.roa
File:                     046d3315-ec1e-3463-a320-06e75f609024.roa (raw, json)
Hash identifier:          XFgmU2ez++90gAXsnFG2Mo7/lAEDgzEnLV3eMAqmcUo=
Subject key identifier:   93:DA:F9:89:B8:98:FD:12:EC:3E:56:D5:44:27:60:01:9E:57:26:8C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B758CA583C47E7E85D7382B20
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/046d3315-ec1e-3463-a320-06e75f609024.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     212238
IP address blocks:        172.120.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:a5:83:c4:7e:7e:85:d7:38:2b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=53bdaa2f-360e-476e-b254-d8b95ce87d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ab:98:fe:9c:04:5c:b1:ff:ab:23:c6:af:d0:
                    b2:2d:c6:52:12:46:13:39:0a:ca:c6:cc:ef:a2:41:
                    e4:17:57:21:20:81:80:83:d2:47:cc:96:bb:88:2d:
                    57:9a:bf:a3:5c:43:3c:4c:ab:95:3e:c8:4a:02:66:
                    01:de:61:b8:21:f6:52:86:5c:dc:45:c3:56:6c:62:
                    e0:6e:4a:d4:8e:1e:4a:fd:09:5c:00:b1:51:ea:f4:
                    ab:65:ab:02:33:a4:e8:c1:cd:01:90:32:fc:0a:aa:
                    dc:2b:3e:88:38:27:5c:21:ad:59:ec:ff:7c:ff:29:
                    85:d0:29:9a:cf:76:a3:bc:b1:ee:5a:e7:43:30:6e:
                    50:c4:48:2c:ca:af:03:29:43:34:e8:a6:07:d0:f9:
                    c5:8d:35:20:7b:e5:4c:12:b8:09:da:33:04:be:b8:
                    05:d2:47:06:5e:05:24:ae:81:b1:bf:83:32:4d:c0:
                    07:ba:fc:37:61:6f:2d:75:72:58:83:3a:b6:12:5a:
                    55:31:a4:24:ae:70:0a:c4:6d:3a:26:c7:a8:be:de:
                    39:61:f2:8d:7f:5c:78:cc:d9:1a:8c:e1:9c:3e:22:
                    da:17:26:4b:c8:79:31:75:c8:44:7c:67:13:b4:62:
                    47:14:a9:d3:74:2f:90:7b:7f:91:ac:80:2a:ce:2f:
                    a7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DA:F9:89:B8:98:FD:12:EC:3E:56:D5:44:27:60:01:9E:57:26:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/046d3315-ec1e-3463-a320-06e75f609024.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:58:d1:89:51:e8:ef:1d:6e:83:14:55:26:37:45:72:e7:e8:
         18:61:0d:1c:d4:b1:fa:4f:19:e2:15:37:97:99:35:8f:67:6f:
         45:b3:e5:d3:ee:ea:3e:e0:d4:d6:03:bd:28:8f:57:2d:e8:b8:
         b2:28:5c:d2:6a:32:54:97:17:23:62:da:49:e1:b1:8b:2c:7b:
         b1:d4:cd:bf:48:05:90:3b:0e:c5:ac:57:37:fe:aa:2a:bc:89:
         ae:05:52:79:e3:0e:24:84:a1:28:e8:bb:ef:3a:b1:1e:af:19:
         b3:43:53:fb:27:de:4a:1b:e7:74:9b:46:6d:68:5b:ab:30:b9:
         bd:27:b4:a0:a6:28:51:d2:7b:45:56:74:d3:e4:35:5a:11:ae:
         14:48:5e:be:dd:a4:e9:6d:d2:42:d0:d5:d7:63:c6:6c:b0:0c:
         ba:6c:51:ef:a4:56:d3:65:37:8c:2d:43:3f:ec:23:c0:25:a2:
         c3:10:0d:51:72:f2:36:7e:1e:25:ac:61:eb:e1:e0:58:a6:72:
         f7:fb:87:c3:8a:1e:3f:dd:39:c7:1a:56:0f:fa:d5:85:bb:35:
         29:9d:58:e3:4b:6f:0f:31:37:2d:1e:1c:61:fb:d7:87:b8:b3:
         9f:ae:2a:93:47:4e:02:70:14:26:a6:08:c7:45:de:29:51:de:
         26:41:66:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:08:54 2025 by rpki-client