Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/75de36a7-aa0c-36cb-a43d-c4e798deb00d.roa
File:                     75de36a7-aa0c-36cb-a43d-c4e798deb00d.roa (raw, json)
Hash identifier:          dvmVX1Th2/yuDFahhn36Dwm8srGhAlIj4ftAsS9iZ2U=
Subject key identifier:   80:33:79:05:DF:78:FE:7C:0C:B5:8D:EB:43:5C:AB:3B:E1:B6:A6:23
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B57A28670FDEEF5B00262960
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/75de36a7-aa0c-36cb-a43d-c4e798deb00d.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     204957
IP address blocks:        172.120.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:28:67:0f:de:ef:5b:00:26:29:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=511a41e5-a5d6-45c7-8f52-1741476fc0a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:08:93:9e:4c:71:4e:a2:2e:5c:b5:f1:02:04:
                    1f:1d:93:e6:78:72:05:f2:e2:a9:96:2c:76:bc:74:
                    f7:0a:5d:cb:50:78:25:d1:c6:d6:04:85:90:2e:bf:
                    02:00:8c:f8:55:a1:f2:1c:d6:60:7c:07:67:7a:d7:
                    8e:0a:82:04:70:8f:77:7b:d7:5c:b9:7c:7a:94:4a:
                    28:e1:2a:9f:d1:87:7c:1c:e6:03:78:16:91:12:16:
                    f9:3a:94:7d:4e:27:d5:07:17:a5:4a:bf:6d:f0:7e:
                    db:51:99:90:59:72:da:b5:04:42:bc:33:ab:a3:94:
                    ec:c8:5b:eb:69:ad:e6:6b:cc:d0:a8:92:10:b2:17:
                    8b:61:4e:40:8a:89:b7:a0:4d:ac:e1:f2:7a:a9:de:
                    69:f0:bf:5e:85:f9:80:54:38:1e:02:b4:0c:9c:85:
                    b9:99:ed:5d:53:2b:aa:0b:73:b5:d2:ad:19:f5:77:
                    ba:2b:77:e8:ca:78:6b:db:65:b7:4f:88:5b:a0:4a:
                    c7:2d:2c:23:fd:1e:4c:7b:86:7a:fc:56:59:d4:ce:
                    9c:8d:ec:3b:0e:a0:76:c6:de:5e:19:a9:f5:61:ce:
                    0a:58:f9:ac:70:26:9c:83:2c:7b:9b:ff:c8:24:3e:
                    8e:99:89:6c:c5:69:74:04:3e:18:db:d9:24:8e:7a:
                    54:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:33:79:05:DF:78:FE:7C:0C:B5:8D:EB:43:5C:AB:3B:E1:B6:A6:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/75de36a7-aa0c-36cb-a43d-c4e798deb00d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:d8:71:08:51:53:89:e8:01:52:e2:1f:5e:ec:4a:cd:fa:c8:
         8c:7f:f5:b0:0c:52:58:52:54:09:80:05:08:f9:92:3a:b6:eb:
         90:be:db:8c:5e:0c:f0:78:41:60:ef:81:c8:54:3f:09:c7:91:
         4a:ff:80:a3:05:88:4e:ac:bb:71:6e:f1:12:d9:15:6a:b9:62:
         19:4d:cb:c5:91:45:15:df:ef:f2:d7:7c:1b:37:ba:dc:9c:75:
         67:75:9a:01:ad:3d:c7:85:7d:93:6b:a8:16:f9:b6:64:9c:80:
         73:39:00:1d:e0:6a:40:ee:00:a3:2b:99:2e:40:50:a8:6b:33:
         ea:27:56:ae:bf:fb:9e:c5:e3:4b:24:3d:51:08:9c:ab:6e:19:
         b9:05:3e:21:cd:5a:bd:1e:e0:50:6f:8a:3d:18:e2:ec:b0:e8:
         81:21:c1:70:52:2b:56:25:e7:fa:fa:27:78:dd:0e:f9:ee:80:
         93:60:d4:5e:40:58:91:5b:30:3f:0f:59:f9:e6:ff:04:0a:3b:
         a7:21:f0:f5:ea:43:5f:56:78:1f:f5:06:b4:1d:a8:dd:87:7f:
         9f:50:f0:58:78:e7:61:36:ce:4f:ce:69:95:58:51:ab:83:81:
         aa:02:74:92:41:90:7d:57:31:9d:bf:58:d6:ec:81:33:07:e1:
         ee:25:23:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:38:09 2025 by rpki-client