Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/75c71d8c-1f4e-3573-89a0-5a6026d660d2.roa
File:                     75c71d8c-1f4e-3573-89a0-5a6026d660d2.roa (raw, json)
Hash identifier:          RoUmfWTcB0gwO0dh4ShIkjKgzdvl+6cQQ77m2ZMp6T4=
Subject key identifier:   70:F3:BE:13:45:C8:70:AD:3C:CB:1C:8A:CB:AC:C6:3B:49:57:43:87
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B4A4731C28E7DFFFC87B36FA0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/75c71d8c-1f4e-3573-89a0-5a6026d660d2.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     18779
IP address blocks:        172.121.186.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:31:c2:8e:7d:ff:fc:87:b3:6f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=aa91b271-7469-46ef-8046-5e79606ae41f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dc:a3:5e:b9:ec:8f:15:29:8e:c8:70:24:15:
                    ab:21:6a:a0:0c:7b:86:74:36:a0:db:32:f8:f2:1d:
                    51:21:88:7b:d4:91:79:72:b4:eb:14:c2:36:42:12:
                    50:d1:a6:10:5b:e3:2e:36:d8:eb:38:78:53:a6:ee:
                    2c:42:f9:9b:39:ff:d5:92:c7:df:47:0a:4b:41:b9:
                    41:81:50:6a:09:81:e8:64:9f:86:1c:b9:d9:0e:17:
                    90:9f:60:e8:64:b7:d1:bd:9d:1a:b7:0a:f2:49:34:
                    a4:a6:db:eb:ed:75:80:27:ba:02:54:11:37:c5:ab:
                    aa:83:67:36:3f:5a:45:52:49:14:fc:08:be:3e:f1:
                    75:aa:51:35:f6:59:04:0d:53:2b:87:8e:95:16:3d:
                    52:b3:96:a8:61:e1:2c:fb:51:fc:cc:b4:5e:50:e0:
                    19:50:21:ec:14:e3:36:ef:1c:47:75:cf:09:be:c2:
                    de:15:23:0a:26:5d:3c:5a:6c:e0:0d:2a:58:4f:a9:
                    6a:c7:af:bf:e2:90:c0:f1:4e:44:95:92:2e:f0:db:
                    27:e3:3f:22:85:24:dc:7e:ff:95:49:64:3f:66:b9:
                    a3:36:ae:fa:b0:91:3a:64:a3:7f:4f:27:33:cf:6b:
                    27:48:09:08:09:d3:92:c4:20:e8:53:a5:8f:67:2e:
                    a0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F3:BE:13:45:C8:70:AD:3C:CB:1C:8A:CB:AC:C6:3B:49:57:43:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/75c71d8c-1f4e-3573-89a0-5a6026d660d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:db:75:df:ae:c8:e5:a7:0b:c7:ea:57:b5:06:f3:29:da:00:
         ed:d0:d9:a6:44:e3:f4:35:a8:2f:48:95:d0:38:2d:dc:c6:e4:
         e9:d0:be:f1:e7:5f:d0:2b:cc:a7:82:f1:b9:bb:ba:17:ef:a0:
         32:75:71:a3:f9:ec:0f:00:39:e5:1a:e3:0f:05:4a:69:57:76:
         9c:b3:5f:f1:ab:95:7e:f6:35:13:49:79:f1:78:2e:22:3e:6d:
         18:37:06:4e:94:ea:f7:54:11:e8:f6:b5:84:29:e6:c0:42:ec:
         45:e4:d1:bb:68:55:05:9b:aa:d3:94:e5:21:4a:bc:9a:49:5b:
         64:01:95:52:9b:6b:1d:03:08:13:bd:4d:00:b8:af:9f:ba:e5:
         68:5f:2f:a2:fb:a3:31:d3:12:c8:f5:26:5e:5f:7c:9e:8e:10:
         93:55:44:8c:ad:08:6d:8a:36:a3:40:4e:dd:9d:57:0f:3f:03:
         3b:ee:4c:1f:44:9e:72:df:84:fe:08:b5:48:1d:a9:6a:aa:02:
         dd:1c:ca:19:b1:9c:f7:95:44:07:41:ca:d2:6b:59:e7:08:71:
         55:a9:44:79:72:2c:1d:d7:bf:38:bf:8d:a5:7b:44:12:9d:05:
         76:29:96:16:7a:e3:ff:f8:9d:0c:05:fc:af:01:bb:22:f4:cf:
         e5:55:cb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:13:05 2025 by rpki-client