Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a641eb12-b8a0-3c3f-9bf4-e479bf161929.roa
File:                     a641eb12-b8a0-3c3f-9bf4-e479bf161929.roa (raw, json)
Hash identifier:          3WptDKiqfGqsjo5srC5MQa4lyZwsP6SXjXWyathP3ik=
Subject key identifier:   2C:C0:C8:64:61:6D:76:D0:5C:C7:65:3E:4F:D0:1D:3D:9E:07:0E:2E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A849FF018F06A060106F0CF80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a641eb12-b8a0-3c3f-9bf4-e479bf161929.roa
Signing time:             Mon 14 Jul 2025 17:49:43 +0000
ROA not before:           Mon 14 Jul 2025 17:49:43 +0000
ROA not after:            Sun 12 Oct 2025 17:49:43 +0000
asID:                     44559
IP address blocks:        172.120.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:9f:f0:18:f0:6a:06:01:06:f0:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 14 17:49:43 2025 GMT
            Not After : Oct 12 17:49:43 2025 GMT
        Subject: CN=480a9b1b-7238-40d9-9f42-1d35e9956175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:47:da:ff:09:4c:e4:82:db:ba:42:ba:a0:33:
                    16:78:a2:47:72:22:0e:55:59:f5:ff:23:da:f5:6d:
                    d7:5c:9e:b6:64:18:54:5c:87:ee:3c:86:82:22:94:
                    1a:4a:ad:b0:35:0a:e7:9a:66:01:c6:03:2b:ff:35:
                    4b:e1:55:77:4f:08:5f:0f:6a:43:29:f0:57:70:11:
                    30:83:37:66:d5:36:63:ad:73:4a:1f:c8:0c:21:ce:
                    48:fe:e1:81:c7:90:90:29:4a:60:ee:9b:67:1f:9e:
                    2a:3b:e0:a4:02:07:7c:3b:83:b8:ed:50:64:d0:2d:
                    59:ae:f0:03:62:fe:82:1d:d0:eb:39:c7:28:f6:cc:
                    7c:5d:44:ef:f9:c5:66:59:90:db:30:d2:2f:9b:df:
                    df:ba:77:7e:a1:c8:06:af:0d:17:41:e4:bb:5c:4d:
                    fa:6a:a1:b9:7a:54:69:5a:e5:bc:ba:be:44:d8:3a:
                    8f:aa:07:84:d9:3f:4f:78:ee:66:f4:38:f7:84:c4:
                    0e:05:31:a3:2b:bf:5b:50:66:8d:2f:c0:98:5f:a6:
                    a7:da:1a:ac:87:c2:0a:4f:c1:47:ca:6c:c6:a0:32:
                    57:04:0e:7c:9d:dd:c2:1c:d0:d7:38:82:f2:79:47:
                    c9:06:27:d4:f1:e3:14:53:f7:9a:7e:7b:b8:c9:9b:
                    49:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C0:C8:64:61:6D:76:D0:5C:C7:65:3E:4F:D0:1D:3D:9E:07:0E:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a641eb12-b8a0-3c3f-9bf4-e479bf161929.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:fb:24:d4:c5:42:6c:05:56:87:f6:e3:92:46:e1:39:07:7a:
         58:42:47:49:37:eb:29:bc:db:a5:e9:ca:fa:0b:90:cd:da:49:
         2d:5f:cb:01:bf:c5:04:82:d8:fd:f7:f5:4f:f1:88:01:27:1f:
         ac:8d:ef:c4:38:b5:4e:3a:eb:86:f9:58:89:a7:52:e4:a4:1e:
         c4:64:b1:9c:27:f5:8d:76:56:91:0c:b3:76:ac:a7:93:ee:f0:
         4c:76:67:a8:c1:ae:4f:8e:0a:3f:77:87:25:c5:ea:13:34:82:
         dc:a9:4f:b0:ea:35:9c:1c:23:34:33:8f:c4:a5:d7:b9:08:9c:
         23:1f:e6:d0:0f:0b:70:9d:ba:d4:95:34:1a:95:f7:4f:93:f6:
         ba:0a:3d:70:15:b9:8a:8c:d2:58:57:af:81:84:ae:a2:ff:11:
         ac:99:f8:a0:55:3e:a6:41:b4:ef:95:24:f7:fe:67:f5:55:7c:
         48:78:6c:01:1a:93:1d:80:82:de:85:ca:51:fd:9c:23:28:c3:
         24:63:f3:a4:88:40:eb:4d:eb:47:19:04:4b:ec:64:7c:e5:1c:
         74:24:97:b2:b5:83:31:b5:15:52:c8:b2:cf:fa:d3:e1:be:5d:
         3b:b4:1c:fc:43:dc:a6:e2:fc:72:e9:46:1c:7b:2b:c5:e0:41:
         b8:1c:90:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:13:05 2025 by rpki-client