Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d336b8a0-5ab3-39bf-9100-3461a0074eab.roa
File:                     d336b8a0-5ab3-39bf-9100-3461a0074eab.roa (raw, json)
Hash identifier:          hNmdceUx9/sUDc/J3qE/w5ApxpCectA1974eS75b4kY=
Subject key identifier:   F1:2B:7F:5F:ED:0F:C8:15:13:61:A3:58:BF:2C:DA:59:77:AA:AC:EC
Certificate issuer:       /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
Certificate serial:       010D0C9F4328584B0CDC1B202935398DF334BC00
Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d336b8a0-5ab3-39bf-9100-3461a0074eab.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     19740
IP address blocks:        172.84.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:1b:20:29:35:39:8d:f3:34:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=05dc3568-a896-477d-9fd3-f8f00918a255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:19:c7:a1:86:ab:e1:d9:cf:95:71:98:8d:ea:
                    6a:07:c6:e6:00:7f:e6:67:33:c1:09:2d:df:ca:70:
                    92:3e:81:dd:ff:c9:09:a6:78:3d:87:d3:af:d3:8c:
                    9d:81:c8:bf:ac:b1:34:18:42:49:b2:4a:08:7b:d2:
                    b4:65:59:03:a4:d5:12:04:ea:25:26:5b:ab:29:9f:
                    86:2c:bc:38:4a:be:3e:9e:44:01:c3:08:e3:c6:10:
                    7e:30:cb:93:67:dd:32:3b:de:7f:eb:ed:3e:74:73:
                    00:ed:eb:a0:bd:32:8b:5c:59:c9:83:b1:65:7b:6e:
                    c3:24:92:ec:56:cd:62:b0:ca:3c:2d:91:1a:8e:46:
                    78:7a:6d:68:07:fb:b4:f9:44:15:16:4f:74:33:d8:
                    57:e9:ce:81:9b:8e:ac:e1:c7:8d:99:d0:ad:5d:b1:
                    b9:94:09:e5:cd:e7:e6:f8:64:91:55:0c:a9:09:02:
                    c6:c3:cd:c4:00:fd:75:99:86:29:22:40:73:70:62:
                    59:98:71:8f:14:25:4f:9f:60:c5:d6:bd:ef:2a:88:
                    e8:70:d6:fd:45:fa:75:32:17:4d:e8:45:92:24:a0:
                    d8:87:1a:74:06:2f:c6:ae:5a:74:27:c6:62:3d:0e:
                    8a:03:b7:94:e9:7e:ef:dd:2a:cb:28:b4:fb:6b:b6:
                    9f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2B:7F:5F:ED:0F:C8:15:13:61:A3:58:BF:2C:DA:59:77:AA:AC:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d336b8a0-5ab3-39bf-9100-3461a0074eab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl

            X509v3 Authority Key Identifier:
                keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:54:12:35:3a:34:18:98:4f:2b:91:cd:f8:41:75:3f:02:16:
         7e:12:fc:35:16:d9:b2:c5:4b:78:d1:26:93:77:04:e6:f1:29:
         bf:14:86:bf:eb:56:e8:dc:21:a0:6e:6f:15:6f:9f:3a:74:93:
         cd:40:e2:0a:b8:9f:af:c8:63:19:33:a1:63:10:31:7d:a8:0d:
         9f:1a:f6:4f:7f:d2:03:dd:4d:b6:10:96:91:c9:fe:a1:11:10:
         52:36:0a:14:a5:06:d0:e1:96:2f:c8:ef:e5:b8:82:ed:cb:9d:
         e2:80:11:5d:73:11:7c:da:4c:c4:57:48:0a:97:9a:9b:1b:43:
         cd:cc:b2:70:72:a1:77:3a:d3:e5:3c:22:37:71:35:4f:de:bd:
         e3:d0:ba:33:13:46:51:2a:57:00:84:b0:72:5c:67:2d:be:9f:
         d9:f1:dd:1d:ea:88:03:9e:a7:d7:f1:52:0f:1a:da:59:7e:00:
         79:44:6c:7e:2a:d0:17:02:04:00:ae:dd:9d:01:36:7b:de:8a:
         b9:31:59:6a:3a:d5:c7:a0:a6:6c:39:97:ad:94:68:47:a3:f2:
         f7:1f:c9:2d:cb:de:4a:9b:12:f6:b6:ce:4b:67:7e:ae:c2:39:
         e0:98:67:70:a1:09:11:82:b8:dd:92:37:b3:3a:b6:62:66:1a:
         e0:ea:b7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 21:24:16 2025 by rpki-client