Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5192079f-12ce-31a7-81a2-74f178528cee.roa
File:                     5192079f-12ce-31a7-81a2-74f178528cee.roa (raw, json)
Hash identifier:          4B2XwxP2mp+gO0B2u0O4HoUTGhcM1sG8gXbKczIk8q0=
Subject key identifier:   15:09:39:64:64:A0:D0:AF:98:6B:CB:43:9B:CA:65:A3:73:91:FD:32
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B57A2AC271CCB1D38EB51480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5192079f-12ce-31a7-81a2-74f178528cee.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     212238
IP address blocks:        172.121.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:2a:c2:71:cc:b1:d3:8e:b5:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=405e2d2e-10c6-44bf-83f2-65dea295abc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:66:52:f2:93:dd:92:4b:e2:1b:b3:c1:b9:72:
                    7d:75:fd:16:4a:df:58:17:fa:49:2f:db:2f:09:b9:
                    3e:03:3e:68:60:35:ac:c5:22:3c:1f:e9:71:80:cb:
                    ce:3f:83:c6:67:7a:e6:63:70:18:02:a8:9a:79:6b:
                    2b:23:b9:8b:bb:70:9e:a1:bd:ae:dc:1a:43:56:8b:
                    51:ae:03:f6:9f:b1:c9:13:6b:4b:d3:37:61:e3:00:
                    37:46:d5:fc:ba:fd:10:8a:0a:76:3e:3d:ff:ce:0a:
                    0c:eb:41:d5:60:8c:2d:ef:30:9b:51:1f:e7:7a:f3:
                    5d:d9:e0:f4:7c:8e:79:20:1e:5c:6d:57:9e:d5:bf:
                    87:94:78:dc:ef:8b:b2:78:14:ea:98:3b:7b:1a:64:
                    03:97:f9:52:99:fe:f8:e5:0b:b4:35:52:e4:be:65:
                    80:1b:b8:f1:04:6d:84:73:a0:57:65:83:94:d3:48:
                    e0:7e:d1:0c:bc:87:dc:ef:c5:01:28:6c:8e:23:5c:
                    8c:04:8d:11:7f:bb:9f:54:e9:3b:d8:b6:0f:99:af:
                    e8:02:c1:81:8a:de:f8:b8:32:5d:e1:ed:f7:5f:83:
                    99:43:a9:e2:8b:b8:2d:57:0c:bd:9d:e2:6d:d2:20:
                    c0:5a:b3:26:a6:72:e9:92:70:f9:99:a8:11:49:64:
                    96:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:09:39:64:64:A0:D0:AF:98:6B:CB:43:9B:CA:65:A3:73:91:FD:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5192079f-12ce-31a7-81a2-74f178528cee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:c5:da:d6:f0:aa:a7:cc:96:c0:53:cb:28:22:93:d4:e7:9a:
         69:e5:47:25:9a:45:12:86:02:e7:93:3e:d7:37:04:ec:d1:bd:
         b1:d1:3c:7e:d5:17:2d:88:8d:65:75:0a:24:41:a7:f6:35:86:
         1e:3e:ef:da:81:29:52:6f:ae:33:9e:c7:0d:5d:76:a7:b4:15:
         0c:6e:8e:10:6f:51:b7:49:1c:70:ea:e8:8b:e5:37:34:ed:eb:
         ec:61:2d:91:2a:da:16:4c:5b:fd:c0:9c:5f:32:fb:26:c8:c3:
         63:36:78:a0:0d:91:5b:1a:cc:46:97:f7:99:89:90:31:83:33:
         38:37:3d:f3:b9:e9:89:85:27:b0:10:ac:c5:33:76:4c:53:49:
         e7:b4:4a:34:af:5f:23:80:2a:cc:4d:54:e4:7f:ab:db:b7:02:
         58:42:a5:ee:c5:ec:5c:91:28:a6:d4:84:2d:74:41:63:17:50:
         b8:20:a7:b6:a3:24:91:fc:52:45:f8:7a:0e:e9:02:24:9a:2d:
         58:17:6e:4b:63:88:4c:91:41:88:23:e9:e7:46:54:c1:a7:18:
         8e:4c:c6:94:d2:68:bb:81:2a:ff:ee:f8:d7:42:75:6a:f9:4c:
         07:a2:68:ac:ea:cb:a4:a7:11:ad:37:c2:86:e8:04:5a:8c:e3:
         6f:71:91:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:12:53 2025 by rpki-client