Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b981ad8-c3de-339f-bf1a-84b91287eff3.roa
File:                     3b981ad8-c3de-339f-bf1a-84b91287eff3.roa (raw, json)
Hash identifier:          9xO04NrRpxULAp4HzNcV4GE7+uMkHlXW0EZR1qnL61g=
Subject key identifier:   77:BF:31:1F:B4:ED:79:2A:F6:0D:5D:0D:72:B8:09:C0:3C:3D:B7:8B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A849C48B91FCEA051A7990980
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b981ad8-c3de-339f-bf1a-84b91287eff3.roa
Signing time:             Mon 14 Jul 2025 17:42:21 +0000
ROA not before:           Mon 14 Jul 2025 17:42:21 +0000
ROA not after:            Sun 12 Oct 2025 17:42:21 +0000
asID:                     44559
IP address blocks:        172.120.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:9c:48:b9:1f:ce:a0:51:a7:99:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 14 17:42:21 2025 GMT
            Not After : Oct 12 17:42:21 2025 GMT
        Subject: CN=0b3826b7-c59a-4505-9ab9-980a49208fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f4:c6:ef:4e:d6:25:08:7c:91:2b:02:2f:eb:
                    ca:83:27:fa:fc:2e:95:55:06:8b:30:38:1f:11:ad:
                    69:7f:c7:d2:31:47:32:d7:ce:4f:38:f7:a0:68:d7:
                    5f:52:a2:49:db:8f:38:ee:ac:d0:0f:a2:d8:a4:ab:
                    fb:0d:3f:74:0e:70:8f:91:c2:3e:56:39:8f:8f:a6:
                    d2:50:a5:6b:bd:6b:04:85:5c:91:99:91:b0:3f:82:
                    bd:36:37:63:7d:2b:65:ae:7f:08:bb:98:94:e1:67:
                    c1:36:c2:78:37:47:1a:9d:94:26:7a:49:03:ee:bb:
                    e1:a3:af:81:f9:dd:95:91:28:63:5a:fb:0b:53:90:
                    d4:66:41:59:32:42:c9:28:45:a3:ab:34:7d:1a:b0:
                    47:3b:83:d3:67:8a:a1:2a:13:24:b6:f0:f4:1d:9f:
                    dc:c0:48:96:71:44:e0:13:5d:bd:59:56:24:84:c3:
                    fb:fe:dd:2b:0e:88:df:59:05:f3:6c:dc:ea:60:ae:
                    9d:15:da:b5:68:e3:e5:2e:9d:fe:7a:1b:4a:10:ab:
                    41:f7:07:97:04:5d:fe:5f:2e:ac:25:74:1b:a1:4c:
                    37:18:6f:93:e3:47:f0:50:12:e5:e8:85:55:e3:95:
                    ff:b8:e6:58:ef:fc:29:b1:85:a7:3a:3b:b2:ca:6b:
                    81:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BF:31:1F:B4:ED:79:2A:F6:0D:5D:0D:72:B8:09:C0:3C:3D:B7:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b981ad8-c3de-339f-bf1a-84b91287eff3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:b7:d0:db:7e:f1:da:f1:5e:ca:83:19:81:f4:bf:43:8e:39:
         e9:8a:42:16:f8:cc:e7:ec:2e:5f:8d:cb:9e:7a:d4:91:2c:7e:
         3e:16:65:65:79:71:01:52:9e:fe:68:71:5c:d4:e7:48:e1:e8:
         2d:d9:22:09:c0:1d:dd:d1:e0:6d:79:8b:f2:53:d6:95:94:03:
         57:bc:e1:28:fa:a9:8e:bb:9c:09:51:16:0a:65:d4:d3:d4:e0:
         0e:fb:5b:48:e8:79:1c:49:07:33:b0:6b:70:26:a6:aa:73:1c:
         34:f5:ab:b9:1e:91:24:c2:d1:9e:45:b4:2a:37:ab:65:9c:ab:
         51:c2:7e:7c:ce:3c:54:af:b2:73:d1:91:9c:1a:21:6d:05:44:
         80:90:bb:32:85:bd:05:cf:ed:15:a0:70:d6:3f:31:4f:be:43:
         e4:7d:35:d6:db:74:fc:0e:f0:51:0d:60:9b:ab:47:f2:17:bc:
         31:52:a7:6b:ff:5c:56:1f:86:67:db:c0:c3:35:5a:37:23:44:
         39:2c:2c:8b:ca:27:2f:a1:a2:fa:e1:b3:a4:f9:19:ed:bd:16:
         2b:10:de:d3:7a:17:5f:de:21:82:2a:32:bf:0e:fa:ec:4d:16:
         a4:e0:ee:a8:f3:15:00:4f:9e:f4:08:fe:c8:aa:26:b5:67:ac:
         74:68:fe:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:33:59 2025 by rpki-client