Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0ff50641-a428-3497-956b-617924387661.roa
File:                     0ff50641-a428-3497-956b-617924387661.roa (raw, json)
Hash identifier:          8CB1L6az/W5Up+1bUxNbpQtg9HZbAX7Kw2TNCC8QTt0=
Subject key identifier:   13:BF:31:99:F8:FA:79:2D:5F:B3:F3:FC:E5:8B:C2:D6:8B:61:B5:45
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B57A2ADBE62CD315699E8020
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0ff50641-a428-3497-956b-617924387661.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     212238
IP address blocks:        172.121.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:2a:db:e6:2c:d3:15:69:9e:80:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=c57a5719-7615-4d50-a882-eace393987d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:25:5a:c1:47:db:c9:03:ac:2d:37:f2:3a:1a:
                    62:5c:2e:01:fb:e9:b0:86:1e:30:88:f8:d5:e7:54:
                    df:28:d0:8f:5b:23:b5:0b:01:2c:63:c1:d7:b0:40:
                    76:4c:74:94:d5:14:c5:5b:47:59:24:32:e1:e4:8a:
                    17:a5:8f:83:f8:7f:4c:4b:08:a7:ae:73:4b:d3:28:
                    dd:0a:40:a0:60:3c:e1:da:de:10:19:a7:55:18:d3:
                    75:ac:5a:02:dd:61:c6:77:0f:72:1e:de:8a:7e:6b:
                    ba:18:66:49:9a:88:4b:99:10:a1:51:2d:5c:2d:ed:
                    6c:de:08:8d:a2:2d:bb:34:da:f2:68:f2:f8:c4:54:
                    51:14:6f:a7:62:2f:7a:41:f9:49:74:26:15:d6:70:
                    ce:3a:e0:39:ad:5e:30:74:30:ec:97:a8:6a:a3:40:
                    25:5c:5b:52:4e:8b:d1:ec:59:1f:cb:69:99:e5:c0:
                    ef:fd:4d:61:3d:42:06:bc:a2:9e:86:12:3f:34:22:
                    fd:ae:9f:a8:73:00:29:d7:37:a6:fe:17:35:e2:24:
                    d3:26:9c:bb:80:33:4b:da:d6:e0:e4:9e:6a:13:78:
                    90:89:14:e2:d2:78:3f:b1:34:eb:7c:cc:45:62:f2:
                    60:95:97:77:c1:41:f6:9e:0d:17:0a:c1:cf:e7:22:
                    e0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BF:31:99:F8:FA:79:2D:5F:B3:F3:FC:E5:8B:C2:D6:8B:61:B5:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0ff50641-a428-3497-956b-617924387661.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:2d:c4:54:26:67:38:28:fc:b6:70:cd:2f:a4:eb:98:9f:90:
         07:cc:98:23:91:be:ce:63:3d:0a:0a:7e:b4:6a:3e:c5:a1:e1:
         a9:ab:1d:4c:6a:e3:97:0c:b4:8e:cd:5b:e0:78:2e:6e:c5:cb:
         eb:79:f1:0f:7e:94:ad:82:79:18:a8:49:8a:87:fe:e5:25:b7:
         dc:8c:6b:6c:14:e3:2e:1a:d3:6f:d1:1f:a3:76:d3:d7:48:e3:
         cb:2a:6d:fd:35:de:11:87:6c:5b:d5:e0:b0:5b:d0:4e:b5:97:
         cc:5d:a4:31:f7:f6:3c:8e:e9:5e:e8:b5:71:60:7c:f5:83:84:
         29:55:c2:5d:30:29:b7:4a:ed:0b:8d:84:6e:b5:82:69:82:69:
         a6:91:d0:76:8b:f4:4e:3a:63:6d:e2:63:97:82:e0:80:a3:18:
         7f:87:48:0b:08:fb:c5:06:89:d0:54:86:8a:83:3f:be:f1:6c:
         83:e3:f5:35:bf:52:e8:ca:56:d1:b4:3c:44:70:e9:d8:f7:a3:
         71:17:1a:79:30:07:f9:e5:39:b9:f7:79:c7:22:2c:c5:78:7f:
         9e:37:61:00:67:6e:43:f5:52:20:2b:8a:ef:2a:ca:8f:ed:43:
         60:ac:67:b4:5a:b7:ec:30:5a:aa:2f:ed:25:04:85:67:f0:ef:
         cb:be:10:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:16:34 2025 by rpki-client