Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1f4b8060-cc5a-3d5e-90ef-0d93a075573f.roa
File:                     1f4b8060-cc5a-3d5e-90ef-0d93a075573f.roa (raw, json)
Hash identifier:          O85msxa3WMABk334+jq+Tc9a2nyuu3UHGo46rntXcMg=
Subject key identifier:   23:F7:13:8F:3E:91:CE:EC:3F:E3:39:17:8F:32:A8:8D:3E:27:33:B7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B233199A8D24F240898BC82C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1f4b8060-cc5a-3d5e-90ef-0d93a075573f.roa
Signing time:             Tue 09 Sep 2025 13:00:41 +0000
ROA not before:           Tue 09 Sep 2025 13:00:41 +0000
ROA not after:            Mon 08 Dec 2025 14:00:41 +0000
asID:                     151371
IP address blocks:        172.120.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:31:99:a8:d2:4f:24:08:98:bc:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep  9 13:00:41 2025 GMT
            Not After : Dec  8 14:00:41 2025 GMT
        Subject: CN=25e6b52f-6cba-41c9-8d96-c3ae44a8b62f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1c:6c:04:e9:55:8e:6d:0a:7e:a8:a7:f4:c9:
                    3a:a0:46:4a:37:38:0b:51:85:32:d2:25:d9:88:1b:
                    75:7e:de:b3:7f:25:e5:bd:e0:1a:d8:43:36:20:c2:
                    ed:c9:f1:e5:92:0d:4d:cb:24:61:9e:0f:1d:2f:49:
                    90:cf:f7:cf:30:43:ce:66:5f:96:22:5a:38:ad:27:
                    7e:45:c0:3c:72:44:35:ff:e6:6d:94:64:44:4e:fd:
                    88:dc:55:d8:89:32:5f:41:7a:11:f5:00:03:69:72:
                    10:6a:0f:3c:54:b4:77:99:1e:e7:30:6d:45:b6:95:
                    1d:7f:fd:83:79:47:62:e8:23:05:e3:36:86:f8:b1:
                    19:8c:b1:ab:64:5b:94:13:e3:59:00:ce:c0:75:43:
                    85:75:e9:a6:45:59:94:44:56:21:55:f5:67:76:80:
                    0f:26:58:63:24:71:6a:ff:86:3a:98:66:fd:ef:3f:
                    5b:8c:82:d1:06:ca:41:d8:a0:74:97:d3:6c:76:7e:
                    d7:8b:af:e4:ec:c4:13:df:6e:63:16:8f:d5:4b:d2:
                    d6:53:17:af:8c:49:f5:b9:a3:0c:94:7c:c3:73:a2:
                    88:f6:8d:84:ed:42:79:64:69:af:8e:e3:f9:94:3c:
                    e7:8e:18:f8:9f:64:45:f1:54:2e:15:7f:d1:9b:a7:
                    40:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F7:13:8F:3E:91:CE:EC:3F:E3:39:17:8F:32:A8:8D:3E:27:33:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1f4b8060-cc5a-3d5e-90ef-0d93a075573f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:5e:73:ff:6f:b9:65:43:c0:f4:4f:18:50:9c:f3:81:c0:fe:
         9b:77:9c:af:2d:35:7f:af:f5:40:b1:d6:6a:8d:09:0a:24:7d:
         8b:e5:a5:70:73:41:f1:af:81:20:98:b9:96:4f:f4:74:3d:17:
         f9:4c:ce:ed:2b:d2:40:ca:b8:b4:c9:19:0b:62:9a:59:df:1f:
         87:7f:c5:ef:94:56:36:d6:fc:cd:10:45:2d:c7:04:da:0f:cd:
         92:24:43:e1:6a:47:cd:e1:63:c7:05:ab:0a:33:63:e4:d8:8f:
         40:89:61:8e:d5:d4:c2:c7:2d:62:e4:66:84:73:46:c5:02:e1:
         ce:27:83:96:8e:1e:f3:ac:cd:4e:dd:f8:7a:ad:19:83:04:66:
         3e:33:dc:d0:e1:49:82:6f:f0:73:43:ff:7a:a0:c5:57:22:74:
         4e:2f:7b:bd:6b:e9:c5:88:bf:3f:fe:99:bd:f8:ce:45:7f:92:
         32:a3:4f:79:f0:d8:dc:04:59:6d:15:70:45:a2:c6:e0:68:ab:
         10:70:2f:8b:42:5a:1a:d8:f4:20:91:9e:a1:d2:8d:42:ea:f8:
         56:00:b1:81:3d:80:3a:37:ca:a4:79:aa:e7:be:75:de:c9:60:
         88:0f:90:72:fe:de:93:cc:9e:ff:fc:3d:06:8a:90:d7:0b:a9:
         17:02:4c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:23:00 2025 by rpki-client