Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1166de1a-1779-370b-a609-dac3bdb72d29.roa
File:                     1166de1a-1779-370b-a609-dac3bdb72d29.roa (raw, json)
Hash identifier:          WFbIXlvWymTEUSYsSIsx8jT1ruf6IV/ut8W6do+Ddxo=
Subject key identifier:   DE:AA:56:9D:4E:84:61:61:D0:47:16:47:48:6E:2A:8A:A2:C9:4A:CC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849CEE171F90E30FA0F9BAB8D00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1166de1a-1779-370b-a609-dac3bdb72d29.roa
Signing time:             Sat 10 May 2025 15:24:35 +0000
ROA not before:           Sat 10 May 2025 15:24:35 +0000
ROA not after:            Fri 08 Aug 2025 15:24:35 +0000
asID:                     18779
IP address blocks:        172.121.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:e1:71:f9:0e:30:fa:0f:9b:ab:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 10 15:24:35 2025 GMT
            Not After : Aug  8 15:24:35 2025 GMT
        Subject: CN=733e5ae6-514a-4f10-a4a4-45e09cd5327e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ad:5e:88:0a:07:4d:77:a1:64:66:bc:ed:e1:
                    1c:18:cd:07:a4:22:39:40:00:2a:ee:b9:cf:1e:b3:
                    08:ba:d1:38:0e:e0:b9:fe:06:79:6b:67:cd:97:d6:
                    e1:0b:5c:44:99:7f:52:6b:de:ec:e0:e1:67:8e:f2:
                    00:00:7a:eb:bb:2f:e6:f5:d1:43:b6:b2:54:d1:1a:
                    9b:cb:d2:f8:96:46:31:cd:95:40:a0:b3:15:52:4c:
                    11:fb:f5:92:bc:07:26:7e:3c:2c:02:78:aa:02:12:
                    48:d8:c7:14:8a:7c:0d:39:9a:1e:06:00:cb:45:f3:
                    25:44:c7:34:b5:f3:8d:29:b7:f5:ae:f1:7b:43:47:
                    1b:b0:4b:39:b4:02:c0:d1:56:c5:9b:c6:ca:53:9f:
                    4e:30:36:b6:ed:3c:48:a8:a7:73:78:53:b2:a3:32:
                    6e:be:11:75:a7:2d:62:c8:f7:d2:9e:bf:02:52:06:
                    ab:09:16:78:a9:45:a0:c9:88:c5:e1:72:dd:2c:32:
                    c3:7c:63:44:4a:85:e7:34:f3:a0:16:5a:de:39:0c:
                    73:b8:d5:77:4f:bb:05:db:bc:b4:0f:d9:34:20:d6:
                    39:32:01:94:ef:70:d8:b1:99:12:24:f4:bc:ea:23:
                    ee:67:ea:a8:90:da:5d:a9:37:a7:64:5a:55:4f:71:
                    19:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AA:56:9D:4E:84:61:61:D0:47:16:47:48:6E:2A:8A:A2:C9:4A:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1166de1a-1779-370b-a609-dac3bdb72d29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:03:82:3a:5f:94:89:b9:8b:15:d0:02:98:66:dc:56:b0:c2:
         4e:e2:6a:fe:cb:f3:44:3f:10:ef:9f:2f:52:54:44:d7:7b:61:
         20:3b:f3:bb:f4:f3:7c:2a:b4:b7:1b:05:67:e6:3e:a1:c9:b7:
         07:b1:38:71:7c:01:3a:f8:4f:90:56:a2:e3:78:82:eb:89:cf:
         da:bf:26:01:00:f0:00:db:82:69:c7:42:16:d2:f1:43:a2:97:
         22:ef:38:af:4e:59:98:e4:ed:1a:19:e1:96:f1:7e:74:94:0a:
         e2:d3:4f:ce:44:03:a2:86:29:70:cd:d1:f7:32:0f:57:dc:b5:
         a6:40:da:d5:d6:dd:d7:8b:46:59:7d:80:d0:34:ae:1e:61:3a:
         36:08:c3:6c:78:09:b5:07:ff:8c:99:b2:01:05:d8:48:01:f6:
         20:f7:b4:67:bf:b6:27:33:ec:1a:cf:a1:cd:df:70:17:5f:0d:
         77:a0:76:5f:6a:4c:41:63:51:55:87:7b:12:dc:31:04:d0:c7:
         fe:e6:35:b4:6e:8c:14:b8:b2:8d:b9:e6:1d:d5:71:c2:d0:f8:
         28:b3:c2:86:c8:ef:e9:07:fd:95:0d:63:21:f3:45:57:2f:7b:
         f2:49:5e:ca:38:a8:61:6d:b1:2a:a2:05:36:18:31:1d:1c:9b:
         18:62:bc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:36:25 2025 by rpki-client