Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/49212058-992c-337e-a0d6-51c2a24fae6f.roa
File:                     49212058-992c-337e-a0d6-51c2a24fae6f.roa (raw, json)
Hash identifier:          PmEykpL9Mc3jD3tqQHo+YwsLWMw9VOgmXpQwHReedsY=
Subject key identifier:   03:37:57:D9:60:D4:E7:B3:72:AD:2E:FF:65:E4:2F:F7:19:7B:A3:6E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B46170657440A1AA28580CB40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/49212058-992c-337e-a0d6-51c2a24fae6f.roa
Signing time:             Mon 22 Sep 2025 01:00:33 +0000
ROA not before:           Mon 22 Sep 2025 01:00:33 +0000
ROA not after:            Sun 21 Dec 2025 02:00:33 +0000
asID:                     9304
IP address blocks:        172.120.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:46:17:06:57:44:0a:1a:a2:85:80:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 22 01:00:33 2025 GMT
            Not After : Dec 21 02:00:33 2025 GMT
        Subject: CN=fbfaefef-37e5-437c-840e-6fafa2d181c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3d:80:46:20:a4:84:37:50:e5:96:74:a0:5c:
                    22:be:a9:80:d4:ae:c3:99:32:a7:39:89:10:33:93:
                    d5:45:18:3e:a0:68:17:4a:97:c6:2b:1c:f5:5b:94:
                    cf:38:80:0d:a4:9f:67:c4:9c:59:26:78:1a:5c:bb:
                    2e:4f:c2:03:ca:3c:d3:3d:0f:96:23:b8:27:17:ce:
                    10:b8:40:9f:9b:dd:27:d7:20:00:94:e7:4e:7c:6e:
                    6c:60:2f:6d:a4:ce:dc:28:76:8c:7f:ec:cb:c9:00:
                    5b:04:89:8c:c8:34:b3:18:92:6b:28:5f:6b:15:52:
                    e1:71:37:b0:fd:2e:19:2c:ad:12:ac:38:4a:de:47:
                    9c:b2:c6:ed:90:36:d2:2b:fb:43:f2:9a:78:d8:0d:
                    74:84:5c:66:f0:1b:1b:4b:5d:11:8f:f3:b8:d4:a3:
                    d2:dd:7f:ec:b8:0c:f8:ad:16:25:ce:fc:d7:39:64:
                    cc:84:78:b2:c3:13:88:88:81:d9:5c:6b:70:a2:62:
                    fc:55:c8:e2:29:1d:fb:f7:59:cd:06:43:1b:36:ac:
                    b9:f9:f0:0c:2a:1e:37:27:55:26:93:87:9a:e7:7e:
                    e8:76:df:76:6f:7b:3f:30:ea:f7:9a:54:39:5e:f1:
                    21:fd:9c:86:2e:b6:65:eb:70:27:12:86:97:f9:b3:
                    f1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:37:57:D9:60:D4:E7:B3:72:AD:2E:FF:65:E4:2F:F7:19:7B:A3:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/49212058-992c-337e-a0d6-51c2a24fae6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:42:96:35:21:9b:2f:73:c1:da:0c:23:4b:a8:f4:d1:1e:cb:
         25:b9:7d:68:e6:18:5c:51:03:a3:84:dc:f3:92:de:9b:b5:b3:
         ea:10:29:7b:30:42:43:cf:0b:00:a0:7d:ba:4c:78:0d:27:1c:
         71:07:bb:1e:68:be:bc:96:cb:48:df:ab:9e:6f:70:b8:f5:cf:
         cf:73:dc:d8:e4:06:95:ea:48:fb:ae:69:81:a8:8e:80:e2:94:
         97:82:e0:d0:cd:e2:fe:ee:fc:9b:31:62:0b:4a:c5:75:d5:4e:
         01:63:cd:e7:d3:d3:a5:eb:a3:8b:2e:53:49:1e:2a:85:d7:5a:
         7c:9c:39:dd:50:69:45:50:df:4a:1d:87:a0:8b:0e:f2:08:17:
         00:c7:eb:e1:cc:13:cd:08:1c:c2:31:36:6e:cb:6f:cc:27:17:
         04:98:0c:41:f2:4e:ea:ae:92:8a:7e:fc:10:0b:ae:3c:23:2c:
         2d:c5:ad:88:52:2e:76:e6:b3:88:a7:ef:93:10:fe:14:8e:5d:
         2e:7d:04:15:8f:af:6e:2a:07:23:db:ee:bf:1c:41:06:31:d5:
         4f:13:25:8c:0d:9f:2f:62:47:fd:43:26:dd:a6:41:84:76:c1:
         a7:b5:47:af:dd:ed:1d:5d:06:28:3b:f9:3f:22:27:40:56:68:
         15:0b:87:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 13:27:16 2025 by rpki-client