Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/39932daf-ed25-3c18-b74a-fb6fc8bb7095.roa
File:                     39932daf-ed25-3c18-b74a-fb6fc8bb7095.roa (raw, json)
Hash identifier:          jOloyJkDlMuqd7Dj3bu7KnAe3UgXkTjLMPWW/34fUDw=
Subject key identifier:   CF:44:3F:7E:87:46:C1:3D:C6:C0:D7:D4:03:9A:94:F3:88:CC:1E:8C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B758CAED84D03F2EE6551BD00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/39932daf-ed25-3c18-b74a-fb6fc8bb7095.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     62240
IP address blocks:        172.120.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:ae:d8:4d:03:f2:ee:65:51:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=807251ca-413d-4eef-a497-81e3a3c278a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:50:3f:34:5a:97:9e:30:91:c4:1c:f7:d4:2d:
                    b6:ff:46:8e:64:47:38:45:0c:f4:dc:1c:e5:45:1f:
                    f1:e3:38:b5:09:26:7d:73:d5:44:a3:c4:55:c1:3f:
                    30:b1:fe:ac:85:9d:69:85:44:e6:f8:16:6f:c4:5c:
                    07:56:51:a0:b5:c6:da:07:2f:16:36:7a:50:5d:57:
                    71:c9:08:e2:6b:57:82:a2:47:d2:4e:a6:24:07:4d:
                    36:88:dd:93:74:e2:54:11:d8:c5:02:1e:b2:9c:52:
                    11:28:3c:c4:6d:20:36:6e:34:ac:47:d3:62:d8:11:
                    d7:14:bc:d3:2c:3e:41:07:4a:74:42:21:77:35:d3:
                    63:a9:49:fe:cb:8d:44:ec:e0:f7:15:38:d8:26:7c:
                    71:6e:4a:29:e4:b4:8e:29:84:88:e6:81:c2:73:5f:
                    1d:31:0c:c9:fe:9d:66:87:43:3d:cc:68:cc:bd:ed:
                    48:fd:ca:e9:d5:97:0b:35:88:70:c0:eb:1f:d2:65:
                    79:c1:83:2e:0a:e6:b1:e9:77:9c:ab:5a:35:d4:31:
                    19:52:e9:1f:8a:6f:ab:7c:27:4c:6b:5c:35:59:01:
                    b3:46:1e:af:90:50:a2:bd:b5:3c:30:71:09:e9:3e:
                    d5:9d:a3:ad:94:a9:ff:2b:a4:f0:d3:31:e1:35:be:
                    2e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:44:3F:7E:87:46:C1:3D:C6:C0:D7:D4:03:9A:94:F3:88:CC:1E:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/39932daf-ed25-3c18-b74a-fb6fc8bb7095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:de:19:ee:68:aa:42:0c:13:75:42:ba:1e:d3:c5:08:be:d8:
         47:a5:3d:ec:38:6d:21:cb:91:8a:d8:55:6e:7f:19:15:fd:8c:
         b0:1d:a6:77:f6:42:cd:ef:fc:95:19:f0:f4:22:91:d1:87:4e:
         45:85:2a:cc:54:d7:a8:ce:9f:47:d5:76:66:db:02:74:0c:6e:
         d9:d2:e8:fe:96:d6:f2:71:c8:b8:3b:b4:03:82:db:e3:62:13:
         99:2a:66:4f:51:60:c7:ae:d8:fd:3e:6b:6c:0d:82:b4:fb:5b:
         fa:6f:89:db:5b:68:44:cf:e2:95:cf:1a:c5:60:86:21:a3:be:
         73:c8:62:8f:e3:dc:31:4e:f6:ed:a5:b9:20:75:1e:93:06:69:
         1a:b3:96:77:e4:da:bf:ed:cb:73:18:90:6a:5c:ef:0b:02:37:
         3d:a3:36:35:3d:d9:69:94:6f:e2:41:dd:de:05:d4:d5:a1:cf:
         3e:36:dc:41:ae:bf:d8:65:db:31:7f:c4:60:27:13:45:a6:7f:
         53:bc:f8:35:ef:c6:92:db:2c:30:d5:08:af:dc:ab:43:15:e5:
         ad:9a:85:cf:19:e2:7b:2d:38:8d:7a:31:34:b0:2d:21:2e:6d:
         69:0b:75:bc:08:07:c4:94:a1:17:3a:11:79:35:e8:1c:7b:ff:
         5d:2e:06:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:16:05 2025 by rpki-client