Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/24a9db00-6823-38a4-8702-a14bb7335cfe.roa
File:                     24a9db00-6823-38a4-8702-a14bb7335cfe.roa (raw, json)
Hash identifier:          EIhKPA5h8BgZnH7hXMrvPuLVGy5z8ro2VCcqh+34FKU=
Subject key identifier:   01:F8:D9:E2:AB:51:E3:93:C3:63:B3:EC:26:8F:BD:A4:B3:00:1C:82
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B758CAEFAF85705B21310F100
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/24a9db00-6823-38a4-8702-a14bb7335cfe.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     62240
IP address blocks:        172.121.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:ae:fa:f8:57:05:b2:13:10:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=d406237e-2d71-434e-8d77-274d8580b342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1e:3e:b3:70:06:d8:aa:f8:78:b9:0e:05:71:
                    6a:79:60:6e:8b:65:e5:db:f8:9c:e4:2a:ab:8c:49:
                    92:b5:c3:ea:b9:8f:bd:c9:90:fb:3e:a6:fc:4c:60:
                    07:dc:6f:2e:c5:fa:af:fa:95:d8:54:68:a0:d1:4b:
                    0d:9b:c9:ea:75:a9:9b:b1:3c:d0:7c:b6:2b:7b:89:
                    36:01:b0:44:d6:29:37:2f:c5:09:b3:30:17:92:7a:
                    67:0c:0d:c5:d2:e6:7d:08:32:46:ab:04:2f:4c:f3:
                    6c:ef:17:4e:e9:12:b2:43:59:7a:c4:f6:05:9c:13:
                    b5:96:41:59:13:e5:72:56:f7:00:6b:b6:1c:b1:70:
                    21:2e:9b:3d:df:d9:fb:73:84:05:c0:44:46:ed:87:
                    90:53:a6:40:63:cb:e7:77:56:48:53:ec:52:cc:f7:
                    26:7e:12:b2:49:00:c4:c8:d1:33:e7:e2:63:e5:0f:
                    12:3f:fc:84:12:a5:09:6c:40:55:97:d8:02:54:ce:
                    72:37:4c:9b:86:80:5d:78:9f:14:be:93:c3:f3:69:
                    d4:0f:db:37:1a:87:9a:71:de:17:8e:f1:af:ea:72:
                    c3:3c:2b:e1:20:34:29:2c:1a:54:f2:21:26:6d:39:
                    3c:ec:55:56:68:c2:c8:18:6a:1c:f0:3d:4f:4d:de:
                    3d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F8:D9:E2:AB:51:E3:93:C3:63:B3:EC:26:8F:BD:A4:B3:00:1C:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/24a9db00-6823-38a4-8702-a14bb7335cfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:d1:58:3e:15:92:07:87:e3:b2:33:52:1a:78:f0:8b:b9:01:
         8d:da:c7:a8:48:0a:2c:20:cc:23:d9:8c:10:a0:47:c6:d0:74:
         cf:91:d6:5a:ea:bb:34:fd:2a:4d:c7:db:6b:0c:22:75:4a:45:
         ba:70:48:45:bb:da:14:6f:85:cc:4e:0a:8c:98:df:07:42:a8:
         61:d5:6a:55:49:c6:ae:68:24:a0:f7:3a:d3:a8:a3:50:3f:ad:
         84:dc:ca:c5:38:a8:2b:f6:4f:1b:21:2e:af:30:c7:89:a4:9f:
         9b:05:cc:1f:a7:b3:29:d0:2f:ae:70:8c:3c:5a:ce:73:93:31:
         e9:f2:b7:6e:20:de:cb:6f:aa:20:67:19:2d:bd:b9:4c:b3:1f:
         fb:b2:9b:92:24:be:96:9c:4c:77:74:b2:4e:99:19:a0:8e:d9:
         3a:a2:49:49:8f:0b:c6:57:84:8d:e5:f1:3b:ff:be:08:b3:73:
         2b:39:e6:a4:0c:18:44:31:37:a4:64:d0:cd:82:2f:7c:e9:16:
         06:d9:21:0c:da:20:3c:72:67:69:4f:0d:82:5d:4f:6c:f9:05:
         f0:75:0e:d8:65:8e:d5:e1:05:54:d0:91:ae:2c:27:8f:b1:c4:
         dc:63:b2:03:5d:21:bc:e2:c2:59:6c:a0:29:bd:54:50:c7:0f:
         3b:10:5a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:11:41 2025 by rpki-client