Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/20fbc16c-35e8-3525-8346-fb53423c2aec.roa
File:                     20fbc16c-35e8-3525-8346-fb53423c2aec.roa (raw, json)
Hash identifier:          0e2vrrhBl94GWCRNW6/YdOs2fYApDUwFbTNDwnPmOhY=
Subject key identifier:   52:57:C1:E0:BD:38:A5:18:88:FE:C9:41:4D:49:6E:30:35:9B:C1:E8
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B758CA37F2D8997430A3B6200
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/20fbc16c-35e8-3525-8346-fb53423c2aec.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     62240
IP address blocks:        172.120.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:a3:7f:2d:89:97:43:0a:3b:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=24f8852a-8fef-410c-a4a0-44294fa72c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:49:d8:3c:aa:7e:c1:73:1d:ed:6b:cb:3b:7a:
                    ed:12:57:28:30:3b:b5:a8:cf:c5:f9:cb:ed:ba:d7:
                    9a:7d:df:8e:53:4f:2d:42:0f:9d:0c:06:1e:f1:81:
                    f9:b3:59:72:34:ad:4a:07:55:d4:4e:a0:48:8c:78:
                    a8:73:83:d7:e7:f7:05:99:b6:27:97:6a:09:38:03:
                    0c:38:65:f2:0d:23:6d:17:d1:c9:c9:e6:02:c0:4c:
                    04:c7:af:80:59:ff:f1:21:24:ba:6a:61:79:ed:f0:
                    89:01:02:37:ae:52:d0:c8:8c:cb:e9:03:5a:00:f2:
                    92:b6:ab:e7:ff:7b:ba:af:87:6b:10:19:2f:2a:8b:
                    47:fa:c8:f1:06:25:f0:7e:54:ca:12:35:76:e7:58:
                    40:3a:36:85:6e:1d:15:bc:84:fa:db:f4:30:65:a6:
                    de:bc:7d:d5:b2:22:3e:97:af:a7:f9:01:bc:a7:ca:
                    18:41:ab:d8:b5:ea:f7:35:06:c7:18:85:a8:86:79:
                    41:97:98:66:7e:b5:6c:cb:d7:cc:dd:d5:c8:25:fd:
                    d0:e0:5c:3d:83:8e:99:b0:26:23:b9:3f:7f:2f:54:
                    df:61:94:ca:10:79:3e:1f:4c:78:bf:3b:41:37:d5:
                    ce:23:5c:29:d1:9f:a0:5a:88:60:7b:c4:2b:66:3a:
                    12:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:57:C1:E0:BD:38:A5:18:88:FE:C9:41:4D:49:6E:30:35:9B:C1:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/20fbc16c-35e8-3525-8346-fb53423c2aec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:2b:56:a1:f3:83:6c:ce:ea:d4:f3:11:92:bd:34:26:10:58:
         5d:e1:57:a0:a7:a9:94:67:a5:71:53:32:a6:65:95:25:e4:9f:
         11:62:f3:d1:93:62:f4:cf:e9:98:ca:9a:ab:f0:c2:a1:c9:3b:
         b8:e3:fb:44:68:51:da:95:33:c9:60:2c:22:94:33:7c:c2:55:
         ce:d6:0f:3a:56:7a:9a:14:6f:40:5f:ce:7a:ba:25:64:c7:ce:
         7c:2f:eb:d3:b4:07:37:26:9f:be:13:4a:e5:7e:cc:d2:1b:69:
         68:00:08:6e:a7:25:87:92:7e:c3:bc:dd:a9:f8:45:1f:f1:da:
         62:d1:18:a3:5c:aa:79:01:8c:29:67:d3:fd:8c:b7:e6:23:7f:
         4b:e2:60:b9:59:f1:c3:7a:bc:8e:d8:ab:4c:8b:d5:3d:87:16:
         fe:35:b4:20:dc:50:73:12:0e:f7:11:77:1f:06:45:22:77:9c:
         78:99:1a:c9:8c:af:f9:c5:86:39:51:68:ea:80:3c:ed:e7:fc:
         e0:9a:8b:bb:c4:0d:81:ed:f6:4a:c8:4f:1c:08:a8:2c:c7:2e:
         15:d1:e1:83:a5:3c:ee:dd:71:38:20:d5:69:d7:03:6a:de:b2:
         29:ef:d8:7f:e9:95:c6:11:49:74:9f:52:8f:86:de:b3:66:0a:
         c9:60:93:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:16:14 2025 by rpki-client