Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5dacd464-398e-3d8f-83eb-266218e903f1.roa
File:                     5dacd464-398e-3d8f-83eb-266218e903f1.roa (raw, json)
Hash identifier:          HX8+j9B1iRQoFKGQXQJN+XlNkvsRBChAp8SCTEc5jHg=
Subject key identifier:   B9:AF:D7:42:CD:51:21:8C:5E:F7:D8:A4:8C:BB:ED:D4:02:C5:3B:5F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B758CA3A37506ED65F05551D8
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5dacd464-398e-3d8f-83eb-266218e903f1.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     62240
IP address blocks:        172.121.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:a3:a3:75:06:ed:65:f0:55:51:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=9e0643de-3f95-456a-aac6-ba31632aa8dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5a:5b:20:2b:92:f9:de:53:da:57:40:77:b2:
                    f0:77:da:0e:04:8f:e2:3d:86:de:44:68:c0:91:d7:
                    2f:52:9f:16:31:7d:fc:21:a3:4b:91:c1:80:4f:01:
                    54:70:7d:75:b3:27:e8:82:4a:85:22:78:ee:ea:b6:
                    00:01:59:54:20:2b:b2:29:52:aa:d4:a4:72:c3:7b:
                    81:ca:89:db:78:f6:05:40:7e:49:19:ad:34:1b:32:
                    50:4e:79:f4:3a:38:7d:a7:36:c9:28:00:69:7e:f7:
                    63:11:1c:8b:42:ac:40:27:e9:23:78:c1:56:9f:5d:
                    33:7f:14:a2:ed:1e:52:3a:2d:7b:04:82:44:ea:b1:
                    27:fe:fa:66:f3:c2:53:1c:f6:30:45:a6:97:c5:ed:
                    aa:7d:44:f2:de:51:2c:e6:a7:6f:c5:37:77:c2:9a:
                    02:ff:d7:af:de:52:06:bc:64:2a:2e:8b:51:7a:ee:
                    65:52:a9:50:34:97:de:7a:b4:b0:41:cf:ff:15:7e:
                    86:f7:ef:34:2f:1a:cf:79:6e:d6:b5:3a:88:b2:11:
                    c1:6a:44:6b:a7:9c:29:fe:9a:ac:c9:a7:ab:e5:95:
                    d5:99:a2:e4:cf:49:04:4a:48:da:69:45:61:da:7f:
                    93:db:e5:68:54:a4:ad:76:63:a0:42:68:9b:04:8a:
                    1e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AF:D7:42:CD:51:21:8C:5E:F7:D8:A4:8C:BB:ED:D4:02:C5:3B:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5dacd464-398e-3d8f-83eb-266218e903f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:da:a4:e7:09:a5:e6:34:b2:4d:79:78:c6:c0:f5:cb:a1:69:
         2a:3a:d7:43:9e:62:a9:41:ba:80:fa:2d:e9:f8:13:1d:2a:b6:
         e5:26:6b:8b:26:08:97:07:8a:a2:55:bb:0c:f2:b4:f1:a1:78:
         b2:49:ae:97:f8:22:d1:d8:da:b5:d4:83:d9:1c:eb:ef:61:02:
         fd:5a:e9:14:2c:f0:e4:88:3b:30:45:0c:89:a2:7f:34:65:8e:
         d6:d5:a3:0f:39:9c:96:b4:fd:66:a2:bc:7b:5d:28:15:fb:26:
         7c:be:52:49:12:e5:6e:b1:b9:75:37:7b:8d:87:d3:e2:a2:56:
         c4:ba:33:17:cb:50:c8:b1:f2:e7:98:58:39:4d:0f:d8:1f:0c:
         fc:e3:18:c8:b1:ad:59:95:ec:d5:c7:cd:bb:9b:6e:26:26:89:
         82:b9:c8:86:16:b9:b0:2c:0c:f1:28:3b:5e:eb:83:d6:58:e5:
         b5:0c:91:55:06:39:d9:f3:2c:0b:b1:6d:f0:6e:ea:2d:22:c4:
         9d:04:b6:99:3e:d4:80:af:97:89:92:c7:81:96:5d:4d:e1:81:
         3f:eb:e5:f1:75:80:43:b5:50:f2:53:48:c5:62:e0:ad:8a:2b:
         b3:13:88:6d:ab:f5:ec:b0:b1:0a:90:97:ce:0b:24:ec:39:da:
         c1:19:ad:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:15:08 2025 by rpki-client