Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2f34cecb-b4a3-3362-a3ac-844cb321f603.roa
File:                     2f34cecb-b4a3-3362-a3ac-844cb321f603.roa (raw, json)
Hash identifier:          GIe5Tuq1mX4kCljcnH+PTpjsNzjpLHb3dtp4hA+Ow1w=
Subject key identifier:   01:57:8D:07:74:11:28:46:13:5F:9E:97:C1:63:56:81:37:CF:08:03
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B64CE6BF96822A4EB0BD1A140
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2f34cecb-b4a3-3362-a3ac-844cb321f603.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     44559
IP address blocks:        172.120.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:6b:f9:68:22:a4:eb:0b:d1:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=df5b1a1b-7ac5-4400-b5a1-cf0bfc1764e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fc:12:1d:0a:a7:ee:e9:28:6c:61:cb:8d:e8:
                    a7:69:38:4c:24:d2:4e:c3:a3:d3:38:a9:d9:06:2a:
                    a0:e4:32:bb:13:f5:56:d8:67:21:3f:8f:ed:e5:f0:
                    52:2d:7e:98:25:e5:71:73:7f:f1:7b:bb:d0:d1:f7:
                    3d:b2:dd:c4:19:07:cc:eb:02:73:b6:99:ac:9f:b4:
                    23:ef:dc:da:87:e5:4d:17:8c:fe:35:f4:e0:2d:af:
                    89:7a:5b:75:16:16:76:6a:e3:0c:32:e4:80:13:d7:
                    ee:d6:e7:1c:28:82:b7:2c:b8:70:c4:a5:fd:68:7b:
                    46:91:c0:64:58:cd:9e:45:2b:b2:48:87:3c:20:39:
                    70:bc:ee:56:2f:07:d8:c7:64:df:3b:56:96:81:da:
                    f3:2f:3a:d5:69:1f:1d:72:71:6b:29:8e:9e:cf:39:
                    76:84:03:41:77:9e:82:3b:2a:4a:a6:a1:f3:dd:03:
                    43:39:6a:64:ed:d9:88:78:e1:40:e8:27:9b:3a:67:
                    76:90:b3:39:2b:1a:0d:17:df:1e:a5:58:9c:ca:8d:
                    6f:61:64:41:e7:f1:d0:49:bc:fd:78:df:45:2e:7f:
                    40:5c:65:ae:a1:b9:ee:b2:8e:3d:46:4d:3e:a4:a8:
                    f4:97:cf:3d:29:ba:e7:6e:10:93:1c:2b:32:aa:43:
                    42:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:57:8D:07:74:11:28:46:13:5F:9E:97:C1:63:56:81:37:CF:08:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2f34cecb-b4a3-3362-a3ac-844cb321f603.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:b6:ba:76:24:8b:be:65:0b:05:58:97:9b:d2:52:f8:56:ee:
         3e:cb:b5:9e:6b:d6:c4:3a:76:63:8f:05:07:e9:ec:0f:55:5d:
         72:c4:7b:8c:28:f4:39:1d:27:f4:f5:78:fc:f6:11:f9:5b:7c:
         89:68:00:5f:2f:ac:be:ed:c0:64:69:c6:0b:91:ba:04:63:7b:
         d0:dc:5f:68:48:56:69:2a:c5:8f:7f:7f:d6:47:60:f6:2b:8d:
         8c:0f:69:88:b6:65:18:91:81:82:ee:6a:54:95:bd:b6:10:50:
         83:ba:a8:28:fb:26:b8:12:d9:f4:74:0c:f4:4f:16:5a:96:97:
         45:1a:71:f1:86:ae:4c:45:6f:31:9c:e6:8f:f7:e4:d0:a5:01:
         08:2e:d6:a3:56:d5:3a:6d:24:a1:ee:a6:2d:64:d1:36:af:cd:
         57:da:ba:31:0d:ed:2e:f1:ad:f0:35:ad:4f:32:f5:32:52:ad:
         e4:96:91:58:bc:8a:47:31:0f:f4:35:3c:77:a4:62:ad:22:14:
         ea:38:60:62:a0:03:06:89:37:2d:af:79:df:0c:50:39:7e:a1:
         62:84:d7:ae:36:19:a7:c0:e0:81:3f:d6:2f:b4:d6:19:5a:ce:
         5d:18:f6:71:d6:bf:5e:0c:90:fd:d9:63:23:5b:ca:4d:07:3c:
         ac:b7:8d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:14:58 2025 by rpki-client