Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e16764a8-5245-390e-85c8-3a9a59af7d4b.roa
File:                     e16764a8-5245-390e-85c8-3a9a59af7d4b.roa (raw, json)
Hash identifier:          khhiQFDeYEyjb+rdDHG3rlmQMLxYniAeo9ZjJRCbJyE=
Subject key identifier:   F1:6B:31:31:5F:A3:CF:98:CA:78:5E:C3:5B:9B:C7:6C:58:FF:53:B4
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A698B3570684F2129D9DDAE10
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e16764a8-5245-390e-85c8-3a9a59af7d4b.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     18779
IP address blocks:        172.120.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:35:70:68:4f:21:29:d9:dd:ae:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=03fec784-4e9a-459e-ad88-6e697ce36756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f6:83:5a:4f:fe:aa:3c:b9:4f:5f:65:98:0c:
                    e8:8c:b8:cb:ce:cc:e2:ff:3b:35:2f:90:7d:61:00:
                    f9:fb:fa:80:f1:12:82:9b:65:ca:e3:34:62:6c:aa:
                    dc:66:68:21:9f:32:fa:3a:03:c0:ea:0d:a5:f7:44:
                    06:11:35:64:a2:56:71:b0:94:8a:d8:37:7d:1e:1f:
                    71:26:ea:13:e8:bf:b1:ad:43:40:b9:17:fb:3b:32:
                    d6:59:49:08:76:86:62:d1:34:2b:3c:99:7e:a7:c4:
                    cc:21:20:b6:b2:87:46:29:51:7b:8f:0d:b0:9b:78:
                    39:c1:25:84:cf:5e:de:23:ee:b9:e4:f2:d9:e1:ac:
                    bf:bb:d7:db:6f:4a:fd:ad:37:9f:2b:24:5b:81:f2:
                    b7:e9:a8:e1:01:7d:20:4e:59:49:55:f9:7e:fb:68:
                    b3:5f:7d:18:47:e3:26:70:76:95:63:1e:bf:40:36:
                    3c:43:cb:d8:e5:b0:b2:84:46:52:ef:17:e0:3c:0b:
                    4f:ee:48:d4:8a:80:ae:ed:f1:93:85:8f:cd:85:1c:
                    cd:b6:85:0b:68:30:04:bc:ab:de:36:e2:a9:91:de:
                    69:7c:d5:b0:54:bb:cd:fa:dc:01:4a:60:17:4e:96:
                    ec:39:dd:8c:54:72:eb:fc:68:10:ea:bf:99:f2:b6:
                    ea:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6B:31:31:5F:A3:CF:98:CA:78:5E:C3:5B:9B:C7:6C:58:FF:53:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e16764a8-5245-390e-85c8-3a9a59af7d4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:13:56:ee:26:c5:82:10:c5:e4:bc:28:c4:c1:6f:c1:1b:f2:
         b4:11:03:9f:d2:70:b6:a0:c9:8a:12:12:ad:cd:ce:ba:9e:9c:
         29:f2:78:4f:28:6e:6a:f1:89:1e:e2:1e:b2:44:25:72:b4:bc:
         63:43:6a:f6:25:51:93:90:08:68:c3:ec:f7:5c:db:96:f3:49:
         13:3f:ea:bf:9b:1c:b7:20:35:88:0f:7a:cf:93:73:25:dc:53:
         39:d8:59:ef:61:6e:3b:26:5a:97:ce:c2:06:9e:b0:e8:98:23:
         3b:4f:49:54:a2:bf:c5:11:23:6d:76:10:61:48:d4:44:98:3f:
         51:f4:79:1e:4b:c4:23:16:ff:ef:46:02:c8:78:5e:41:b0:bf:
         13:13:fb:5e:6c:fd:ce:4b:a3:e2:a5:ed:eb:63:54:40:17:ea:
         e8:13:cd:fc:16:32:16:28:85:26:6e:96:b6:0f:c0:a3:68:55:
         00:6f:ed:14:38:fe:62:dc:d4:77:59:58:a4:00:b7:e2:de:66:
         1e:f1:a3:a7:a0:2c:88:30:b0:e9:38:28:81:75:b8:14:ea:92:
         20:e1:01:5e:43:d7:d9:6c:5f:75:55:b0:59:1a:5d:76:fa:8e:
         e0:bb:55:cd:58:02:51:a0:e9:98:82:a8:e1:64:46:fa:c6:65:
         8e:28:0b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:30:21 2025 by rpki-client