Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5e08e1e7-e94a-3573-972e-0ff5a6da2d0a.roa
File:                     5e08e1e7-e94a-3573-972e-0ff5a6da2d0a.roa (raw, json)
Hash identifier:          O6zZM85ak8u9Mmc/lpPeYi7lsQ+o1hp621JD80jSXoc=
Subject key identifier:   8F:83:E4:FB:D4:6B:23:0C:A5:CA:DE:55:92:38:3D:71:01:F0:D7:86
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B57A29021B92962A725407E0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5e08e1e7-e94a-3573-972e-0ff5a6da2d0a.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     204957
IP address blocks:        172.120.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:29:02:1b:92:96:2a:72:54:07:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=f55430e2-2927-4049-bd04-5ecaa1e436b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:26:9d:8c:23:46:10:08:1d:9c:d8:c1:e5:b2:
                    6c:c3:62:77:c9:14:c6:0a:77:dd:10:31:25:ee:68:
                    bc:cc:c9:56:f5:38:72:65:9e:b1:a2:46:37:fa:82:
                    dd:fa:46:01:4d:7a:d6:60:18:fd:08:d3:64:ea:0b:
                    ba:2d:1c:75:03:7b:38:f2:9f:7f:84:44:bd:e7:6c:
                    38:2d:7e:54:e1:77:d6:8e:c8:6f:c0:81:fa:d2:81:
                    7c:a3:88:5a:23:af:32:d9:77:61:6f:4f:38:65:43:
                    17:58:77:c2:89:b5:cb:16:f4:8f:c4:18:26:15:96:
                    13:2a:20:80:d2:4a:94:1a:8b:35:3e:f5:df:de:e4:
                    f3:e2:49:aa:a9:60:81:14:8a:91:67:2a:08:c5:1a:
                    e5:e4:f8:99:cf:e1:b2:00:af:4e:96:15:84:82:7d:
                    dd:58:c4:b8:73:e4:27:91:03:07:b2:70:9e:23:43:
                    f0:89:43:01:96:ca:df:7d:3f:62:0e:6f:d2:2f:39:
                    b2:e7:bc:9b:85:2f:16:10:a1:11:e9:89:6a:81:28:
                    39:df:f7:c7:57:73:ea:0b:74:1f:26:a8:db:35:28:
                    5d:9f:49:53:2e:f1:8c:d8:f7:0b:2f:d9:c2:bb:f1:
                    fb:87:4a:e7:7e:69:ea:ac:fb:79:00:9e:07:a7:90:
                    00:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:83:E4:FB:D4:6B:23:0C:A5:CA:DE:55:92:38:3D:71:01:F0:D7:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5e08e1e7-e94a-3573-972e-0ff5a6da2d0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:f5:2e:91:32:14:26:36:89:86:9a:25:9b:1e:dd:b7:a9:1a:
         57:03:ab:a8:93:6a:7c:0a:7d:93:c6:73:5a:4b:7e:74:37:25:
         cd:cb:e3:70:49:a1:51:99:bf:a2:47:4c:b7:81:e9:45:06:84:
         a1:30:e1:4c:44:41:ad:0a:ee:04:af:ad:52:ca:75:4e:04:e9:
         08:5d:64:cd:0b:84:74:2d:11:7b:6d:7f:3e:6f:0a:92:85:22:
         74:fe:fe:73:3e:09:fd:a0:cc:8a:4f:6b:55:ac:70:c8:d8:62:
         46:53:c0:7e:43:c0:3e:97:c5:e9:a2:5e:22:e1:68:0f:b9:d5:
         d2:26:1b:1f:af:69:d6:f5:6f:57:1f:b1:bb:75:6e:25:72:c7:
         22:13:0e:50:b0:00:e9:4a:7d:a3:8f:e8:9a:91:76:d7:0d:b2:
         64:61:f0:d5:cb:46:c9:7b:03:4e:f7:dc:d4:99:89:d5:29:7e:
         5b:ba:0d:ce:92:77:6b:84:ad:3b:81:67:82:ba:c7:62:2c:cc:
         8a:e4:ec:ee:c8:0b:1a:b1:0f:9b:26:f4:7e:ff:6c:4d:b3:69:
         58:0f:63:3d:af:fc:36:bc:d3:e7:6e:2b:be:dd:c7:ab:67:96:
         c9:50:2f:40:0e:1e:10:6b:0a:ce:32:1d:d5:b1:7f:6f:76:24:
         23:24:90:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:19:16 2025 by rpki-client