Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5cc8404c-41b5-34eb-8629-99a0fddfda32.roa
File:                     5cc8404c-41b5-34eb-8629-99a0fddfda32.roa (raw, json)
Hash identifier:          9se8yp7vUb5Bq7+fbspwJOTw0EW+2RXXDXnxML7y6Kg=
Subject key identifier:   72:50:BD:BD:88:28:8A:F9:F1:17:F7:4A:97:AE:30:C7:46:D1:72:C5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A84982B9FBD27B75B3520B340
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5cc8404c-41b5-34eb-8629-99a0fddfda32.roa
Signing time:             Mon 14 Jul 2025 17:34:04 +0000
ROA not before:           Mon 14 Jul 2025 17:34:04 +0000
ROA not after:            Sun 12 Oct 2025 17:34:04 +0000
asID:                     44559
IP address blocks:        172.120.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:98:2b:9f:bd:27:b7:5b:35:20:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 14 17:34:04 2025 GMT
            Not After : Oct 12 17:34:04 2025 GMT
        Subject: CN=0b759504-6a4b-450d-9613-414550bc18e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d0:ff:66:b1:1d:df:31:1b:22:73:ea:40:b9:
                    f7:38:39:79:51:86:b8:c6:19:9d:ff:b1:17:60:f6:
                    97:b5:90:8a:46:0f:c8:0e:38:0f:92:46:39:e8:64:
                    ab:8c:b7:3f:ed:30:6c:38:28:42:09:d4:78:4a:ba:
                    a4:2f:91:30:f7:b5:5e:6f:05:f6:78:45:16:be:8c:
                    cd:df:a0:3c:06:2c:e1:27:44:16:2d:2f:11:d3:65:
                    4b:d5:46:57:c2:0d:bc:74:b9:80:d0:27:71:c0:d7:
                    14:98:b8:e8:76:51:2b:03:06:d6:8f:21:c6:a3:83:
                    17:22:af:08:38:cc:4d:f8:9d:30:77:d7:8f:2a:56:
                    0e:de:75:47:69:3f:76:a1:3d:90:05:9b:b3:49:a5:
                    53:95:d4:9c:20:3e:5d:9c:4b:1e:88:5e:3e:ea:d5:
                    61:d0:84:62:4b:7f:bc:52:57:4e:f1:0e:16:5c:9a:
                    21:5e:0b:86:cc:51:ea:dd:77:8f:6c:b9:9b:e9:75:
                    83:7c:d4:ca:f6:81:4f:ad:85:e9:82:82:0e:05:98:
                    99:b4:d2:17:08:a8:29:08:c0:57:91:af:b0:fe:6c:
                    d6:76:2b:f4:f3:8a:d6:f4:3a:98:5a:9b:c8:2b:dd:
                    87:dd:0d:42:56:14:da:d9:cc:a0:24:93:64:55:87:
                    84:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:50:BD:BD:88:28:8A:F9:F1:17:F7:4A:97:AE:30:C7:46:D1:72:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5cc8404c-41b5-34eb-8629-99a0fddfda32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:f8:56:9f:d4:d0:90:49:d4:6e:d7:ec:a6:40:5a:78:9b:f5:
         7b:e9:c4:3c:58:ba:98:9f:4a:f1:9c:66:67:31:e1:68:cd:23:
         7f:55:7f:4f:53:7f:b2:dd:71:be:71:14:56:3a:28:80:26:25:
         c6:f5:ae:0f:d4:c2:cb:a4:cb:cd:03:73:86:55:ff:47:18:9e:
         d9:37:16:71:86:70:b1:79:0d:24:4a:3b:13:1c:74:bc:54:eb:
         0c:f0:f1:c2:9a:10:c1:48:0f:a4:3b:1f:db:7f:0f:9e:f2:12:
         b2:2e:00:36:3d:77:c9:ee:bb:17:10:83:9d:0e:51:f4:b6:ef:
         e3:9c:16:2a:c0:ec:71:1a:5f:2a:38:bc:83:ef:25:0d:19:9f:
         d6:5d:32:2b:a6:44:2f:ad:30:96:8c:14:85:49:9e:1b:9f:c5:
         45:db:fe:b5:a1:52:36:cd:72:eb:86:ab:45:47:71:fd:c5:e4:
         b9:c1:98:4e:a9:b3:81:13:21:61:de:de:3d:a9:22:c9:7b:d6:
         4f:16:d5:8a:9a:b3:28:6e:ca:25:ce:91:bd:8d:96:72:94:91:
         6c:14:04:a0:01:6e:90:10:21:44:a6:03:3d:5a:ae:1b:d4:c9:
         c5:c8:a7:6e:1c:df:1e:cb:c7:5d:12:33:3b:74:08:ab:6a:31:
         a2:04:f4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:34:00 2025 by rpki-client