Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e47f7629-04bb-3c7f-85cb-e777670e587b.roa
File:                     e47f7629-04bb-3c7f-85cb-e777670e587b.roa (raw, json)
Hash identifier:          VfubVGU/L7uSTuUnFc8SSn4BpebLVFWvy/7fA0MD6dU=
Subject key identifier:   F2:13:70:52:D1:2D:2E:1E:53:91:5F:71:BC:E6:D3:F5:D5:7E:4E:84
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B4A471689DFCFC5DB9D2DC180
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e47f7629-04bb-3c7f-85cb-e777670e587b.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     18779
IP address blocks:        172.121.38.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:16:89:df:cf:c5:db:9d:2d:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=47571db0-934e-4add-b64e-656d926a41a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:31:16:91:ce:c9:d8:a3:e7:12:b3:54:5c:d6:
                    09:b0:ca:23:8c:ed:db:74:4f:88:d7:2c:51:a4:ef:
                    ed:03:a2:20:7e:6d:08:3e:1a:a8:39:90:15:a2:4c:
                    90:6a:f6:a2:e2:b2:b4:24:89:ea:ce:6d:08:d2:94:
                    89:9d:bb:a2:51:96:78:15:e8:18:1b:24:3e:56:e8:
                    73:2c:7f:b8:cc:dd:77:c5:2a:20:5e:7b:fb:2b:89:
                    d3:20:cd:d0:f9:90:3b:38:30:63:19:2c:d5:e6:df:
                    6c:36:2e:d3:74:7e:c6:ff:71:13:89:2e:05:4a:ee:
                    35:bb:eb:cf:b4:c2:bb:41:fd:d1:67:fe:b8:25:18:
                    7c:4e:2f:a1:7e:a8:59:4c:68:d1:e6:c6:6c:26:ac:
                    84:11:6d:4f:49:ec:3f:e5:66:87:f9:10:1d:b9:56:
                    db:69:66:d0:ea:87:12:d6:77:89:90:08:a6:bd:c8:
                    b4:84:4c:f5:64:02:30:a3:6e:74:65:14:f1:c1:8b:
                    81:32:22:e2:ae:87:8d:1a:60:57:11:83:17:33:ba:
                    28:f2:ec:43:3e:dc:62:90:14:47:4f:ec:8a:83:c1:
                    70:84:05:1b:80:35:20:56:50:c9:c9:05:4b:c6:31:
                    c8:bb:67:93:33:07:fa:3d:89:d3:00:d6:69:cd:79:
                    49:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:13:70:52:D1:2D:2E:1E:53:91:5F:71:BC:E6:D3:F5:D5:7E:4E:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e47f7629-04bb-3c7f-85cb-e777670e587b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:1a:9f:18:9b:ef:30:38:76:27:e5:e9:c8:f6:32:d8:ba:16:
         d8:9e:8b:cf:2c:a4:28:fd:32:19:47:25:78:c1:ac:d0:e1:be:
         e5:85:00:d7:3a:9d:ab:f8:bd:be:56:b7:3f:4f:7f:10:e7:e6:
         84:47:ed:06:da:0e:b5:a5:e8:71:dc:2a:b9:4f:fa:f2:8f:f2:
         8b:3d:f5:19:8b:c5:5d:38:47:5b:17:00:57:4c:e7:27:b5:43:
         cd:04:1f:69:96:e0:c5:6f:fe:15:b7:3e:ad:b9:2f:c3:24:73:
         44:d7:bc:78:65:25:52:3d:74:cc:bd:e4:04:8e:22:18:fc:c8:
         4f:3a:3c:24:2e:d3:66:69:93:7b:66:c9:47:5f:53:54:d7:c3:
         cc:3e:7b:ee:41:bd:0c:5f:16:5f:dc:e0:7b:e0:b4:6b:a8:05:
         1c:a9:7c:f7:70:0b:20:fe:32:dd:85:bd:16:ab:e5:ad:f2:cb:
         2c:f1:b6:64:25:dc:54:44:67:bc:51:56:b2:e5:2e:e6:24:09:
         d1:99:4d:4c:1f:16:0f:03:d0:e0:88:87:15:3c:97:ea:0c:63:
         8d:8d:ca:42:ed:62:b0:c9:5f:50:a9:91:d9:f8:4b:e2:bb:a7:
         f0:0b:17:7d:cc:71:bd:ab:96:b0:99:6a:03:5f:c7:43:b1:2e:
         cf:84:76:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 13:27:20 2025 by rpki-client