Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1323caa3-c43a-325a-b011-d76ededafbb4.roa
File:                     1323caa3-c43a-325a-b011-d76ededafbb4.roa (raw, json)
Hash identifier:          3lm4NwcsqJTwfe1/tup84JkcbgCzQfw/b0ZI+6A6syI=
Subject key identifier:   17:12:C0:6E:AE:72:00:99:A6:90:4C:14:0C:7A:6F:CC:E6:CC:37:0C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A497071824E02B4EAE03ECD80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1323caa3-c43a-325a-b011-d76ededafbb4.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     149440
IP address blocks:        50.118.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:71:82:4e:02:b4:ea:e0:3e:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=7de3e583-ea39-428d-aea9-b66995dd9f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:82:2f:9c:b7:95:10:c4:29:b0:5d:f8:0b:dd:
                    c7:fe:ba:d6:ba:87:7b:40:f0:67:c1:e9:b3:46:f5:
                    6b:a5:0a:e6:cf:88:53:3a:a2:14:3c:c1:36:ef:e8:
                    47:8c:31:16:8e:89:a1:50:9e:3a:e3:d1:ad:31:b3:
                    f2:12:5c:e4:d9:8d:90:42:17:29:43:ab:a6:61:e8:
                    05:48:fe:ca:5b:9d:59:32:0e:ee:87:98:54:21:8e:
                    63:af:9b:4f:97:8b:7c:71:28:42:fc:89:56:04:83:
                    3b:b2:6a:d5:6c:71:b0:47:06:b6:2d:d3:5f:9e:62:
                    fd:20:e6:b3:4a:9c:5f:93:ea:fd:07:73:23:c6:43:
                    0c:b4:9e:76:95:cd:aa:d2:80:fc:21:87:74:7a:62:
                    2c:c3:6d:0a:7e:38:b3:20:ef:74:bf:d6:c2:a5:4f:
                    fe:23:c0:2f:cd:95:6e:a0:9d:47:aa:f6:1a:af:ef:
                    b8:7b:7a:54:43:21:1f:a1:ef:d9:17:5c:24:67:fa:
                    fe:b6:32:0d:38:09:99:03:5e:f0:c2:e0:cf:98:0d:
                    13:61:4b:73:af:71:c9:b4:6d:20:b8:09:d3:9a:b8:
                    43:7f:d2:a4:6f:84:ae:b6:52:5a:c1:19:54:a9:ae:
                    b9:84:09:ff:fd:10:8a:3c:9f:a3:a3:3f:68:1e:e0:
                    cf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:12:C0:6E:AE:72:00:99:A6:90:4C:14:0C:7A:6F:CC:E6:CC:37:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1323caa3-c43a-325a-b011-d76ededafbb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.118.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:b4:12:f4:b1:e9:0e:ed:af:aa:10:1e:5c:d0:42:c8:77:df:
         2f:97:b0:b3:23:4a:6a:81:93:1b:8a:70:e5:9e:41:90:0d:06:
         37:15:60:f8:13:80:19:30:19:77:3d:c7:63:bc:09:9b:79:7f:
         91:1a:13:f2:9d:65:ee:81:07:6c:c7:e7:9e:20:61:65:8e:91:
         15:89:d3:03:b4:9b:ff:7d:a0:88:47:d2:f2:cd:d8:0c:c0:9a:
         1e:75:88:80:a4:18:d3:99:47:63:d0:c2:39:74:5a:76:9f:bd:
         30:f4:dc:59:94:d8:2b:ba:15:ed:98:0d:73:cf:1c:9f:9c:05:
         a4:8c:33:9a:48:7f:47:99:8e:16:30:ab:99:90:3d:41:cb:df:
         77:a5:b2:c6:9e:77:0d:7d:b8:82:12:86:0a:70:52:0e:45:56:
         49:04:7c:18:2b:f6:fb:c6:04:a7:ab:34:c1:0e:9e:bb:2b:13:
         0d:6d:05:b9:33:dc:18:72:39:0b:53:31:41:ae:a2:27:4c:4e:
         e2:ce:f8:19:7c:01:fd:bc:1a:5d:fa:fc:ea:aa:08:45:72:b9:
         11:26:6c:cf:69:98:e7:98:cf:bc:35:01:0f:3b:35:18:d7:cd:
         d3:81:cb:73:f4:c3:b6:b9:33:b4:fb:e4:ee:7e:75:20:e1:fd:
         88:90:ff:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:55:24 2025 by rpki-client