Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5dacd464-398e-3d8f-83eb-266218e903f1.roa
File:                     5dacd464-398e-3d8f-83eb-266218e903f1.roa (raw, json)
Hash identifier:          sAAR7VRvu+HGBcC+DpHnL1l0jghz312Qya5DDY+GBOs=
Subject key identifier:   69:79:85:16:61:27:CE:C7:D9:4C:B8:8E:C5:11:E7:AC:3E:CA:9C:F5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B57A25C42C5C154526A6C880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5dacd464-398e-3d8f-83eb-266218e903f1.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     62240
IP address blocks:        172.121.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:25:c4:2c:5c:15:45:26:a6:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=97c7943a-94e9-47e9-a3d6-93d218790c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f7:ae:88:6c:b2:09:08:fa:56:2f:51:4d:6e:
                    26:2c:d9:b1:47:bd:15:9f:12:06:10:ae:98:0c:50:
                    ba:11:7d:e5:58:ff:13:6f:25:19:64:e7:03:58:2c:
                    cd:9f:9d:2f:b5:8e:cc:ef:bb:3d:f0:1d:cb:80:dc:
                    1a:b1:38:de:2a:b0:7b:28:c4:b6:76:cb:17:77:e0:
                    c8:a5:fa:74:72:dd:05:df:98:c8:99:c2:44:17:f0:
                    b6:10:a9:6b:58:68:8b:5c:ce:e5:78:16:4c:f7:3c:
                    c7:d0:40:23:16:23:9a:c4:c0:86:d6:50:48:80:4a:
                    e6:5c:dd:90:0c:3b:f1:9e:8e:f3:6b:39:2c:7d:c4:
                    27:be:fb:b0:64:a8:c4:4e:b9:09:f6:d1:e5:f7:9f:
                    24:b0:c2:13:62:de:07:95:06:0a:b8:3d:33:ed:5c:
                    f4:8f:8f:74:8a:c9:b4:a1:fa:c6:ed:52:2b:48:e0:
                    46:72:e6:b5:3a:2e:45:c9:ea:d6:03:96:cf:e3:64:
                    e8:88:c2:d8:62:11:eb:f8:c8:29:47:53:6c:ab:f2:
                    93:6d:79:3e:0f:4c:57:26:15:45:db:68:23:a5:d2:
                    e5:48:37:8d:a0:af:ee:08:cd:3c:54:7e:2a:cb:ba:
                    33:9b:3a:9f:1e:89:0f:e6:c2:22:42:1e:bd:74:78:
                    bd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:79:85:16:61:27:CE:C7:D9:4C:B8:8E:C5:11:E7:AC:3E:CA:9C:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5dacd464-398e-3d8f-83eb-266218e903f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:f6:cf:d5:c4:66:00:a8:f2:ea:64:6d:c4:36:74:18:1e:76:
         64:c7:7d:0a:08:7e:9d:1c:27:a8:41:89:5f:eb:f4:52:02:6e:
         10:4f:e1:a1:c0:46:c5:a6:ec:99:23:48:f5:58:2c:67:a2:3f:
         23:dd:de:06:3e:ba:10:a5:9e:d7:56:a5:1a:5c:82:ea:9f:34:
         ed:a6:be:d1:3e:1e:f3:dd:50:9c:87:55:f4:b1:80:86:d9:2b:
         ff:68:84:e9:af:73:65:89:c2:f6:ed:44:23:11:6e:0c:69:06:
         80:50:02:c2:6b:72:1c:9f:76:1b:75:8d:73:fd:42:fb:24:b8:
         44:3f:23:87:f7:55:7a:53:dd:21:c6:23:06:a4:80:e7:5c:72:
         e7:26:b7:07:08:90:d1:38:e1:2f:3d:20:92:d2:4c:b2:36:ac:
         24:8d:fa:ee:3e:cd:25:72:83:8d:cc:65:42:cd:4f:4a:83:f1:
         d8:51:25:73:18:25:73:a9:86:9a:7b:de:6f:67:38:af:b3:a2:
         96:f2:2e:11:e6:9d:ad:98:1c:2b:d1:e5:62:b7:ef:21:d8:6f:
         27:93:c1:2e:24:37:00:98:94:18:c4:cf:23:3f:f6:70:00:e8:
         e3:27:52:ec:ea:14:18:98:75:70:21:63:57:5f:e2:15:20:3a:
         af:e9:72:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:55:12 2025 by rpki-client