Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/78845aa6-e586-3264-9afd-cdc611e1eb38.roa
File:                     78845aa6-e586-3264-9afd-cdc611e1eb38.roa (raw, json)
Hash identifier:          L3/7Bk72U5itFZO7rm0mr90e7M0A7tkpxWywJivxXL0=
Subject key identifier:   B2:27:62:62:40:E9:B2:53:F7:B9:CF:7C:0C:FD:04:07:D8:EF:98:B2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B5F3777C5E302054E8F622200
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/78845aa6-e586-3264-9afd-cdc611e1eb38.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     3257
IP address blocks:        172.121.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:77:c5:e3:02:05:4e:8f:62:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=192b93c3-6723-4a2d-8204-d87bdd947e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dd:a9:e7:54:b5:61:b0:18:6d:ed:d3:6d:00:
                    2c:76:48:65:61:21:5a:b0:d3:62:f2:7e:aa:10:b9:
                    7b:7a:25:6c:ec:00:1f:89:a7:63:88:68:3d:74:97:
                    f1:43:ee:04:fc:43:e9:17:ae:15:bd:12:59:68:1d:
                    9d:fb:de:73:76:38:1a:b2:0e:e7:ba:08:82:da:c7:
                    bc:09:db:64:90:a1:7c:b7:b1:84:70:c3:46:b7:50:
                    32:77:32:0e:e2:83:56:63:97:6f:6d:12:9c:0d:1f:
                    df:0c:f2:86:d4:ec:e3:61:cb:16:82:d3:80:71:23:
                    7e:00:ed:cd:9e:b1:46:1e:38:93:a4:03:9f:f2:49:
                    2b:89:84:ff:45:cf:d6:9c:64:37:da:c2:e7:c9:bb:
                    69:1e:c8:16:b3:68:d9:4f:77:18:0a:7f:3f:fe:58:
                    2a:6b:35:3f:48:9e:9d:c1:2e:63:69:46:0b:68:4f:
                    80:a4:3d:b8:30:47:72:d7:ca:45:0b:e4:ef:3e:45:
                    5d:a3:4c:fe:95:f8:a0:2a:b4:60:bf:ad:83:d8:22:
                    56:bf:60:90:51:8a:7a:41:20:be:5a:1d:dd:ae:b0:
                    68:d4:15:28:e8:84:0d:fe:b5:41:81:57:99:00:65:
                    ce:0c:09:ab:7a:e9:3b:27:e3:07:73:bd:90:3c:af:
                    b6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:27:62:62:40:E9:B2:53:F7:B9:CF:7C:0C:FD:04:07:D8:EF:98:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/78845aa6-e586-3264-9afd-cdc611e1eb38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:72:7b:55:b4:38:f7:99:09:0f:6f:8a:e0:2a:0d:4d:82:98:
         47:d4:77:36:04:40:76:ee:bd:3d:93:74:b0:e1:d2:b9:a1:ca:
         71:4b:3f:61:09:5f:b5:6d:e5:59:2c:81:dd:9e:ce:5e:68:84:
         1f:85:89:76:e3:90:a5:14:ba:23:66:2e:ab:b4:5c:47:28:35:
         29:fb:e0:27:64:0d:d9:1c:49:12:e0:a0:2e:05:fd:d6:28:d7:
         6d:b4:9b:a5:ef:c4:01:e7:e9:28:3f:ff:11:b4:2a:b5:7a:12:
         9e:37:04:e7:b5:d2:20:7f:69:d4:c6:dd:c2:c2:7c:af:a4:07:
         4d:df:01:7e:0c:0b:a8:22:9d:a6:80:52:14:75:5e:e2:b0:d3:
         cb:ea:19:07:72:9c:49:d7:21:a4:c3:c9:ea:9e:fb:91:2c:d5:
         be:e6:9b:30:d3:0f:75:76:4f:3d:b9:07:13:95:90:06:e9:e8:
         94:22:b8:f4:aa:58:7c:ad:3b:be:c9:4d:15:69:b1:63:9a:16:
         d2:22:68:09:49:97:f6:94:5c:10:6c:e4:0b:b6:3e:88:7e:35:
         71:89:9f:ec:ac:e6:43:d1:54:83:d4:2f:58:10:73:ce:99:dc:
         b8:a9:b3:c0:52:55:7e:bf:9e:2e:82:33:5d:17:36:42:09:0b:
         db:54:55:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:14:54 2025 by rpki-client