Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/472875f1-bb6c-3d80-9a96-6912680f3f2f.roa
File:                     472875f1-bb6c-3d80-9a96-6912680f3f2f.roa (raw, json)
Hash identifier:          uxetDDvK8Bkewu4tsKAkIu7pNvfW5hxENhjUej/Muic=
Subject key identifier:   BE:08:14:46:CF:72:45:D2:86:3A:F4:44:47:37:27:E9:64:71:BC:AE
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A84A10D5EA19E1E0F0F640380
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/472875f1-bb6c-3d80-9a96-6912680f3f2f.roa
Signing time:             Mon 14 Jul 2025 17:51:58 +0000
ROA not before:           Mon 14 Jul 2025 17:51:58 +0000
ROA not after:            Sun 12 Oct 2025 17:51:58 +0000
asID:                     44559
IP address blocks:        172.121.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:a1:0d:5e:a1:9e:1e:0f:0f:64:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 14 17:51:58 2025 GMT
            Not After : Oct 12 17:51:58 2025 GMT
        Subject: CN=29627602-14d8-43b5-8f28-e57040de7178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:93:8b:67:44:f7:60:df:f2:44:12:0f:9a:7c:
                    13:40:03:31:75:6d:8d:8c:80:34:bf:10:67:c3:36:
                    6e:fa:e6:93:c7:e2:d6:bd:fb:13:4b:25:47:e2:58:
                    37:14:25:05:d2:c4:92:2e:87:eb:60:07:3a:8a:4d:
                    26:c9:92:f4:3c:b6:e9:aa:97:f1:fc:7b:5c:9c:5e:
                    46:1e:52:87:e0:8c:a1:49:1b:df:3e:09:d9:cb:a8:
                    6a:30:7b:ff:ab:0c:81:d8:8f:e9:a3:d2:31:2b:a9:
                    36:b2:12:1f:a9:3b:b5:85:c8:3b:c2:74:39:a3:40:
                    68:fd:3c:da:83:67:29:27:79:f4:f1:ce:2c:4a:ce:
                    5b:81:14:e3:42:c3:96:32:73:f6:b0:05:80:7e:b5:
                    e4:5f:a5:16:8d:dc:14:34:a4:e9:53:34:a6:77:5b:
                    e2:fc:fd:d2:d2:ac:e9:a1:c2:55:06:e9:6a:12:71:
                    c6:ae:e3:83:39:fb:68:48:13:8c:b4:54:83:10:b4:
                    9b:99:88:87:84:42:ef:4e:08:2c:14:71:cb:f1:7f:
                    10:f0:62:dc:aa:b8:f4:de:1c:74:7a:a6:04:16:4e:
                    79:46:4c:89:eb:8d:ef:48:76:18:91:c3:be:d4:0c:
                    a3:72:9b:8d:8a:39:6a:a1:ad:0a:09:a5:e6:74:b1:
                    e2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:08:14:46:CF:72:45:D2:86:3A:F4:44:47:37:27:E9:64:71:BC:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/472875f1-bb6c-3d80-9a96-6912680f3f2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:25:6e:96:db:65:65:30:13:6e:18:54:b2:92:62:0e:f0:db:
         8d:2d:ee:d1:fa:d2:96:d0:ad:4b:c7:ab:d1:1c:7f:d1:d9:eb:
         38:54:ca:22:b6:88:4c:97:0e:61:da:91:d8:b1:16:88:85:bc:
         a0:30:95:b7:3e:25:ca:79:61:53:21:ee:7c:a6:ce:44:b1:75:
         7e:0e:7a:29:39:7a:00:84:50:2f:c9:a4:da:9a:d8:a5:ae:7b:
         da:2b:20:30:9c:82:52:88:38:63:ad:9a:63:08:8b:d5:69:43:
         39:c6:8c:ee:63:df:05:4a:82:06:e4:74:fc:c6:1b:52:4d:72:
         f0:34:27:24:a0:7b:ef:93:b8:0e:86:b5:32:37:4a:b3:c1:8b:
         39:0d:33:f7:06:95:7b:13:a6:38:20:95:87:94:3d:5f:32:0b:
         b2:29:74:2c:23:2f:df:cd:d4:8c:c0:98:d8:21:33:5b:d9:17:
         53:80:ea:9a:22:45:66:f8:b2:0f:fc:8d:3b:0b:b1:a0:b5:0d:
         48:24:f7:1c:ce:44:1c:76:3a:25:c6:4e:c3:61:5f:92:ab:16:
         a8:56:5b:d6:83:ca:95:07:5e:8e:a8:1d:3d:49:40:0a:87:78:
         e5:49:9f:85:e0:c1:e2:40:d1:0c:77:d8:53:43:6c:54:b8:ce:
         de:b1:09:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:38:46 2025 by rpki-client