Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4664b117-9b75-3e17-a1a3-0f5cd4735209.roa
File:                     4664b117-9b75-3e17-a1a3-0f5cd4735209.roa (raw, json)
Hash identifier:          Qf6B9a2Oc2SZDFxK6KQ1z3ocnLWEL1x9vcOd5TaXTQk=
Subject key identifier:   0E:A1:61:44:A8:43:4A:5E:9B:87:A7:34:0D:B3:95:26:A1:DF:09:36
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B715CED8AB6FE97C8EF785550
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4664b117-9b75-3e17-a1a3-0f5cd4735209.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     44893
IP address blocks:        172.121.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:ed:8a:b6:fe:97:c8:ef:78:55:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=23459406-7735-468a-9fce-c6b74df2e781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e6:ed:fb:fd:b8:f6:53:c2:22:28:9c:ac:ea:
                    1d:9b:e7:4c:17:4a:40:20:78:75:3e:be:a1:d0:5e:
                    ca:6c:c0:d0:be:70:96:d9:0d:1e:11:03:ae:74:97:
                    59:33:3a:cd:73:65:a6:f0:42:8c:be:c3:5d:61:5c:
                    fd:cb:6b:3e:7e:71:6f:3b:f1:7b:9a:df:e8:48:b8:
                    95:f8:60:3a:73:ee:66:94:21:80:c3:33:e7:cd:44:
                    1d:74:43:2d:fe:12:3d:f1:77:57:4b:bc:20:56:52:
                    92:64:4e:8b:13:aa:4d:a7:2b:7a:5b:f6:7d:70:85:
                    37:19:03:8c:50:7d:47:c9:b1:39:59:d3:c0:6c:e5:
                    ca:38:8c:60:30:3c:18:c9:98:bb:d6:42:6c:5d:43:
                    e1:75:f2:95:6e:a6:14:28:da:98:37:d8:4a:de:76:
                    4d:43:d3:f3:02:b9:cb:0b:b1:a7:02:f3:4b:5a:62:
                    43:c8:87:e2:c7:93:6a:b3:53:52:db:ea:40:c2:9c:
                    dc:09:01:cd:3a:ea:86:c5:89:d2:a9:52:10:77:1f:
                    30:e4:58:37:17:49:a0:be:82:9e:d8:5f:73:fe:ca:
                    c3:6d:ff:80:59:eb:8a:98:1e:1f:94:d3:5a:da:54:
                    6b:21:09:af:eb:cf:3d:89:45:e2:b7:39:82:48:6f:
                    76:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A1:61:44:A8:43:4A:5E:9B:87:A7:34:0D:B3:95:26:A1:DF:09:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4664b117-9b75-3e17-a1a3-0f5cd4735209.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:a4:3b:fe:d9:5d:11:d6:34:58:53:fe:b0:f3:e7:37:07:84:
         ec:d3:f6:22:13:18:bb:e3:47:22:df:57:2c:1b:a0:75:f3:60:
         1c:4e:25:6d:0d:d6:b7:f0:8e:8c:86:94:61:51:41:aa:28:59:
         86:bb:3f:37:d9:63:f9:1a:17:fc:c6:ce:8a:f9:d9:9d:32:45:
         d9:5a:62:0a:ea:be:e1:39:f1:40:7f:d1:cf:f3:c5:66:2b:8e:
         36:b3:6e:70:7b:df:3b:84:36:81:e6:51:2a:05:12:d0:ef:e2:
         92:5c:9b:cf:22:96:e9:01:fa:a0:d3:40:78:ce:3b:36:14:cd:
         03:71:ec:2b:e1:f9:34:b6:77:fa:b2:26:71:40:d3:00:10:3c:
         53:5b:f5:95:9f:ae:0c:e9:e1:f5:94:25:ef:a9:db:45:d2:cd:
         30:59:c9:f6:5e:87:cb:6d:06:0d:fe:6e:56:be:37:2a:a2:5c:
         2e:f6:2b:0a:e3:45:dc:55:0f:50:66:f0:18:3e:fa:24:db:37:
         2d:78:34:73:97:10:ea:18:24:74:ff:d3:96:dd:0d:1d:2e:62:
         4c:f8:d3:2f:63:ff:44:38:48:ed:31:20:ae:32:1b:f9:82:3c:
         75:54:f3:aa:4f:42:d5:b2:0d:4d:98:9a:78:d8:2a:51:48:72:
         ce:e2:8a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:09:08 2025 by rpki-client