Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2a7b1ac6-aa14-36fc-a0f8-1bb7bcec26b4.roa
File:                     2a7b1ac6-aa14-36fc-a0f8-1bb7bcec26b4.roa (raw, json)
Hash identifier:          TF703UsokwDfqQtbY/W0BwYu55yOR4Ed4iLTG9eDCkA=
Subject key identifier:   C9:08:2E:16:05:79:7C:2E:C7:CB:22:C6:7E:7B:6D:80:47:63:1B:6F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858498A3454FE1C5CD984BE29FD00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2a7b1ac6-aa14-36fc-a0f8-1bb7bcec26b4.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     18779
IP address blocks:        172.120.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:54:fe:1c:5c:d9:84:be:29:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=b30f5506-e5de-4099-8dc7-447344ba6f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bc:da:5e:44:b2:76:bf:b9:00:1d:de:75:56:
                    c7:7b:ab:82:f6:77:26:f5:c6:37:ac:e8:f7:57:d6:
                    e6:75:55:0b:61:db:f3:44:d2:b4:0f:67:96:87:88:
                    b6:ce:d6:84:a6:02:f9:02:c3:42:a7:dd:aa:80:4d:
                    1b:25:3c:26:70:99:8f:df:8c:11:7f:ff:26:31:c7:
                    db:19:d8:67:9a:79:bb:30:8e:47:a2:06:bf:b9:59:
                    83:d5:40:e5:1f:e0:89:b6:d8:98:bd:38:3d:08:1e:
                    01:fb:f1:55:03:6a:78:f7:da:e5:8b:9b:1c:20:24:
                    85:ad:7e:d2:e7:f2:e1:4a:e2:77:d4:d4:f8:11:6a:
                    e8:69:c6:8b:45:50:81:01:aa:a9:10:fd:8e:bb:10:
                    f6:d0:c9:5c:b7:07:45:91:25:98:97:4c:d8:53:46:
                    c0:5e:44:4a:2e:7a:f7:94:e4:d6:84:52:91:a3:43:
                    bc:a6:e6:b2:de:e9:32:20:ec:4a:68:7d:14:f5:1d:
                    c9:32:dc:9d:92:32:6e:bd:77:34:77:ad:e6:53:3f:
                    fe:4c:26:24:95:27:26:04:d8:2b:cc:82:c2:15:df:
                    f4:85:00:a3:02:33:a5:b0:aa:5d:9f:42:bf:1f:8a:
                    57:67:b3:fb:bf:0a:ac:47:b2:19:06:c4:22:2f:c3:
                    27:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:08:2E:16:05:79:7C:2E:C7:CB:22:C6:7E:7B:6D:80:47:63:1B:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2a7b1ac6-aa14-36fc-a0f8-1bb7bcec26b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:7c:1b:a7:dd:c5:5f:2f:51:db:7d:43:d6:32:86:94:da:9a:
         6a:61:d8:47:9d:7f:df:c3:1e:7c:e1:bb:80:21:66:15:47:1d:
         5b:0d:af:34:c3:20:b3:a1:31:94:a1:50:12:9a:f7:32:83:b6:
         47:be:5c:45:87:dd:f9:46:80:dd:eb:9d:8a:b3:a2:39:ae:5b:
         59:95:9f:fd:30:1b:37:a9:53:2e:59:11:10:9c:69:99:7c:64:
         ba:b5:51:6e:f3:ab:3d:24:a2:13:8f:58:a1:66:f8:ae:50:c5:
         7f:e2:00:8d:15:aa:81:7c:c3:e6:b3:dd:3f:3b:17:39:7e:5c:
         9a:b9:11:5e:0b:fc:28:1f:04:24:23:09:5a:10:ea:c8:6d:65:
         32:6e:98:94:42:47:44:d0:6b:0d:a4:7a:09:35:49:43:05:97:
         07:5b:1f:84:d0:02:5e:e2:1e:c8:a3:02:af:6e:60:d5:dc:5a:
         59:c2:ec:3e:af:4f:57:c5:88:6a:dd:56:31:d7:08:70:d9:d4:
         b8:3a:4e:77:37:b3:84:3f:44:33:82:f3:2c:0a:e9:02:31:36:
         d2:f8:3c:96:99:35:0c:ed:23:34:d7:e2:8e:91:e7:6a:6a:ec:
         06:d2:55:9c:ab:af:c5:71:2c:af:0e:4e:dd:cc:26:b4:99:4f:
         21:24:73:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:45:52 2025 by rpki-client