Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/11478e2c-013e-35c0-ad8d-8b1fd93a778d.roa
File:                     11478e2c-013e-35c0-ad8d-8b1fd93a778d.roa (raw, json)
Hash identifier:          l5ezEzcdjiyqYBisGm784XGL8gNUxUlHwiOI6EtY4Ow=
Subject key identifier:   42:AD:C3:B1:EE:9C:EB:85:90:40:DE:C1:C4:69:5F:10:0F:4E:E2:45
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A78865D4463B70374CC733400
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/11478e2c-013e-35c0-ad8d-8b1fd93a778d.roa
Signing time:             Thu 10 Jul 2025 09:48:29 +0000
ROA not before:           Thu 10 Jul 2025 09:48:29 +0000
ROA not after:            Wed 08 Oct 2025 09:48:29 +0000
asID:                     18779
IP address blocks:        192.177.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:86:5d:44:63:b7:03:74:cc:73:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 10 09:48:29 2025 GMT
            Not After : Oct  8 09:48:29 2025 GMT
        Subject: CN=a842cba2-f354-4d21-ad6c-a3d7be18f2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4d:c2:27:61:c1:f4:94:c3:49:43:27:a4:80:
                    ad:05:f2:f1:a7:66:29:35:df:bd:65:b3:e2:b9:34:
                    29:11:81:53:64:29:39:c3:9b:f2:85:6c:35:57:0e:
                    57:b4:5b:ea:ec:2f:64:7a:87:e5:d3:03:f0:bd:e4:
                    be:ad:4d:f6:9a:eb:b5:ec:7e:f1:f1:4a:9c:e2:b5:
                    18:8c:3e:9d:39:74:a1:4a:77:97:1d:dc:76:37:fd:
                    f8:39:bd:ae:02:24:3d:84:7e:1f:98:44:0b:1c:8f:
                    31:61:ac:26:75:a4:b8:b2:de:7c:86:1f:a9:39:79:
                    fd:d7:a4:c9:1e:34:1c:4b:21:49:d3:3b:91:7e:f4:
                    9a:57:eb:bb:ce:59:74:c8:81:71:fe:a6:10:ce:ab:
                    d5:a8:92:b8:0c:b6:12:3a:50:87:bc:92:58:da:a7:
                    34:e7:ff:cc:71:41:fa:7a:6f:84:ed:65:e2:5d:28:
                    71:5d:9c:38:43:09:8b:45:9d:e5:49:38:48:c1:7c:
                    00:e9:f4:ca:d4:88:f3:05:b9:a0:13:8d:61:b1:2f:
                    2a:b5:13:73:c1:6c:34:1d:53:d6:e5:f7:46:3c:18:
                    7b:22:a6:f0:6d:dd:dc:d4:87:4c:66:ed:9c:6a:3d:
                    e0:05:69:e9:b4:49:43:d6:ce:30:84:37:fe:39:a7:
                    6d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AD:C3:B1:EE:9C:EB:85:90:40:DE:C1:C4:69:5F:10:0F:4E:E2:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/11478e2c-013e-35c0-ad8d-8b1fd93a778d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:4c:8d:a7:6c:83:1c:ae:78:a9:d2:c9:1d:ff:31:5b:27:ab:
         d7:bc:77:07:b5:ec:a3:e6:85:24:75:87:a6:89:37:7c:7b:85:
         d1:5c:98:88:13:03:c8:0f:f1:cb:c7:44:c3:5a:2a:09:f4:f7:
         f2:a8:1a:01:df:4c:94:02:58:60:bb:db:c2:7a:c1:48:e6:89:
         32:32:63:83:cf:71:6f:86:00:57:30:a4:ac:14:4e:0a:44:34:
         61:1f:50:54:21:08:03:2b:f5:15:06:46:e9:49:ac:f4:3b:26:
         13:40:01:1a:f9:85:cd:3a:73:f5:63:12:bc:47:50:80:53:1a:
         f4:5d:14:d0:64:96:bd:af:da:16:be:55:db:e2:05:72:04:83:
         79:2c:1e:59:51:19:9f:3f:ae:77:af:79:e2:48:ab:c3:e4:c7:
         0a:56:2e:be:a7:96:5e:07:9b:e4:e5:a9:c0:e4:43:2e:44:9f:
         d6:c0:5a:29:e8:91:33:f9:29:9c:c6:60:c3:03:9b:9f:b1:44:
         50:b3:c2:ab:90:62:dc:90:82:61:64:21:fc:f3:01:76:eb:d1:
         3b:a8:75:96:07:ba:cc:ef:43:0f:90:25:98:a2:1d:37:86:99:
         64:4f:65:53:a8:e9:7b:71:ba:19:1d:ed:4a:ee:36:79:86:0b:
         33:5f:f6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 05:13:57 2025 by rpki-client