Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40c62f17-d670-300f-9aa5-d83ea7edba96.roa
File:                     40c62f17-d670-300f-9aa5-d83ea7edba96.roa (raw, json)
Hash identifier:          Agl3eJ21XLEG/0+l8rvVbdL/AMunqQ5bnkK3S+VjqF8=
Subject key identifier:   09:0D:94:B5:91:C5:DB:C0:5B:78:4B:ED:57:35:FE:68:D9:CD:87:BC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B4E7706728124FADAD8865FC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40c62f17-d670-300f-9aa5-d83ea7edba96.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     62610
IP address blocks:        172.120.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:06:72:81:24:fa:da:d8:86:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=5e2f6681-b7e0-4867-8889-beee47f9e1bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:86:09:34:3f:65:26:a5:7b:53:58:b0:0a:2b:
                    46:2e:6b:ac:3b:d0:a8:f0:bc:1d:cd:34:45:c7:16:
                    3d:fa:e2:6f:07:25:90:e2:c5:40:bd:56:44:85:b0:
                    e6:d8:23:9e:27:58:5e:bb:b9:64:1c:4f:ab:cd:0a:
                    ce:2c:1f:eb:7e:81:da:81:0f:38:4d:2e:c1:a3:ab:
                    35:7b:d4:a3:7a:3d:0b:b7:d0:a0:30:15:88:a5:65:
                    40:75:61:a9:cc:23:b1:da:0a:a2:95:70:c4:f6:2d:
                    be:78:83:04:87:ae:9c:56:77:2c:75:c3:24:b1:d5:
                    3b:c0:e6:b0:54:5c:24:35:75:84:3d:76:78:e5:a3:
                    da:36:05:94:66:19:32:d0:ec:3c:95:c9:ac:86:81:
                    f3:03:9b:6d:45:e1:36:8a:0f:c3:0f:6b:55:28:08:
                    00:04:51:1c:38:f9:90:c5:b1:8c:ac:77:25:7f:ad:
                    6e:c5:6f:1b:55:7d:a0:a6:4d:6a:f0:c8:f5:68:de:
                    e6:36:a4:ac:fd:f5:2e:59:ac:06:91:4d:b6:c9:fe:
                    b1:69:85:3d:64:7e:0d:18:4f:22:82:89:ac:14:d3:
                    43:92:ff:9d:a2:2a:fa:19:13:77:ad:f9:5b:d0:59:
                    55:83:be:78:82:95:06:b1:0c:24:c0:1b:7b:4c:3f:
                    fc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:0D:94:B5:91:C5:DB:C0:5B:78:4B:ED:57:35:FE:68:D9:CD:87:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40c62f17-d670-300f-9aa5-d83ea7edba96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:d7:0a:88:c1:1e:48:87:5b:be:67:df:3c:59:75:ca:f2:99:
         5a:7f:27:97:9d:7e:12:c0:47:97:38:62:93:e9:4f:b1:10:cd:
         21:f7:35:05:35:d3:8c:a6:36:db:d9:1f:dc:46:da:ff:bd:98:
         6c:bc:18:f8:72:1b:25:36:c6:d4:aa:88:09:df:d0:a3:a5:21:
         f9:d3:47:c9:bf:a0:e7:6a:e9:cb:e8:3d:83:96:b9:b7:7f:b2:
         81:f4:2f:a7:16:9b:d8:28:f9:54:4a:32:03:1d:32:5f:1c:a3:
         1a:75:85:85:cf:7a:3d:a5:3a:96:fa:c7:a8:9b:76:f4:c5:dd:
         da:4c:fc:00:8c:46:9b:8b:45:2d:0a:2a:a7:7d:94:21:84:ce:
         99:4f:58:ca:de:0f:dd:1d:2d:dc:da:07:e1:dc:dc:84:eb:74:
         2f:02:60:3f:1c:eb:23:20:a2:fd:de:ad:74:e3:57:58:df:58:
         07:b9:44:f9:ef:9a:05:7a:2f:08:92:d5:df:ca:98:df:83:27:
         cf:fd:d3:29:f2:90:06:2b:2b:51:18:7c:39:d5:13:41:f5:ff:
         4c:44:8c:fb:e5:54:b7:c0:74:12:34:ed:ae:b0:63:38:21:56:
         27:be:83:f1:8b:5d:fb:49:3d:05:e2:ce:d0:e8:9c:2f:ce:0d:
         fa:85:70:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:14:55 2025 by rpki-client