Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/66c54f55-5da5-35c2-9cf7-95a0c6d1d360.roa
File:                     66c54f55-5da5-35c2-9cf7-95a0c6d1d360.roa (raw, json)
Hash identifier:          WFUnSyk0tkbyV4P4MThyc3yfH0kI+lQE7ce8UN2RGWU=
Subject key identifier:   F2:62:B9:6E:07:F3:CF:DF:18:90:27:18:F5:4D:13:E0:9F:C7:96:60
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A8497925366C722201D0CC630
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/66c54f55-5da5-35c2-9cf7-95a0c6d1d360.roa
Signing time:             Mon 14 Jul 2025 17:32:52 +0000
ROA not before:           Mon 14 Jul 2025 17:32:52 +0000
ROA not after:            Sun 12 Oct 2025 17:32:52 +0000
asID:                     44559
IP address blocks:        172.120.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:97:92:53:66:c7:22:20:1d:0c:c6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 14 17:32:52 2025 GMT
            Not After : Oct 12 17:32:52 2025 GMT
        Subject: CN=bce09f66-daae-4259-af8e-e8025acb7b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5d:0b:b4:6c:33:9c:e7:14:7c:f4:bb:02:20:
                    8b:09:84:91:61:e0:82:3a:27:f8:5e:85:ad:fb:ff:
                    ca:db:54:2a:63:3f:f9:40:c5:58:cf:dd:f8:14:e8:
                    98:57:ea:20:6b:05:f6:7e:0d:2d:34:3a:84:fc:51:
                    50:11:29:51:73:00:73:75:4e:44:dd:86:79:ef:5c:
                    a3:a6:e3:1b:9f:2c:3f:23:7a:be:f9:e8:97:ad:02:
                    95:55:ac:1d:f7:9b:b0:60:95:58:90:ac:19:33:95:
                    da:56:b7:cb:f2:dd:6a:42:d6:ea:f1:3b:fc:3d:18:
                    c4:b6:fd:0c:53:28:67:bd:4b:a2:05:87:f8:65:78:
                    ac:f6:82:ad:ba:52:a4:d3:7e:17:97:db:2d:15:48:
                    63:c8:3d:dd:96:14:81:d8:bd:76:a5:5a:d2:a0:e6:
                    04:40:f5:1b:17:52:b6:a4:6d:8d:d2:bb:91:6a:94:
                    26:cc:49:76:83:94:8f:d7:c2:7a:98:51:a3:79:f2:
                    cf:f3:c2:1f:26:1a:07:bc:2e:29:ad:d4:0f:6e:01:
                    da:a8:66:5f:1f:ee:23:2a:03:c2:b8:7a:66:10:fb:
                    ac:74:fb:e8:05:59:75:4c:64:79:cc:62:70:aa:d7:
                    0c:ff:ac:ee:03:91:72:dc:08:0b:42:c1:07:13:03:
                    56:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:62:B9:6E:07:F3:CF:DF:18:90:27:18:F5:4D:13:E0:9F:C7:96:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/66c54f55-5da5-35c2-9cf7-95a0c6d1d360.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:e6:7d:84:bb:83:2d:b5:20:b3:26:02:92:1c:56:97:9c:eb:
         61:71:8a:6c:10:8d:ce:cb:e6:68:52:a8:0d:f6:92:bd:af:e6:
         25:ac:d0:bd:12:0d:d3:c3:66:45:37:ac:06:df:5f:8a:1c:d5:
         61:33:d9:56:a9:32:b0:09:8d:2a:f9:8f:c5:95:0e:e1:98:af:
         bb:59:cd:9c:d6:9c:dc:b1:50:6f:db:52:69:14:f7:21:1e:2b:
         d4:d6:87:2b:8a:ec:c2:16:f5:b9:aa:3a:fb:4f:70:56:30:b8:
         02:77:df:24:89:7f:ff:ef:63:44:fe:bc:c6:2b:e9:1e:8f:28:
         69:13:61:21:87:76:26:2e:3b:55:d7:8c:ff:4e:72:c5:e8:7e:
         97:45:44:4f:51:f3:61:95:6d:9d:a2:7a:5f:4c:3c:97:a5:86:
         d6:94:78:40:76:6d:e6:d7:5b:4f:2e:4c:9c:e7:24:d2:23:4c:
         00:47:4d:49:a8:57:04:1e:eb:d9:dc:66:df:60:4c:00:bd:0f:
         b0:6f:f3:72:6c:05:71:9d:9e:c1:fd:23:40:12:34:d2:5b:da:
         74:05:c9:c3:87:a0:95:8e:5d:c6:4d:88:b8:38:5e:8e:31:3c:
         4e:2a:03:6f:da:cc:2d:e4:87:b1:55:0b:b4:86:57:8c:fc:10:
         08:80:00:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:38:54 2025 by rpki-client