Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7ce2f2f5-2072-32f1-952e-abf88c415326.roa
File:                     7ce2f2f5-2072-32f1-952e-abf88c415326.roa (raw, json)
Hash identifier:          Y4ejSu6qTos2orn/eC/qVTF9FqUa423gbad/bfiv9jQ=
Subject key identifier:   B7:F2:E4:9C:21:7A:FD:38:98:21:41:87:12:90:03:5F:F7:33:C1:75
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849CA6A0F3B7C4DA038D35B0300
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7ce2f2f5-2072-32f1-952e-abf88c415326.roa
Signing time:             Fri 09 May 2025 01:00:47 +0000
ROA not before:           Fri 09 May 2025 01:00:47 +0000
ROA not after:            Thu 07 Aug 2025 01:00:47 +0000
asID:                     55201
IP address blocks:        172.121.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ca:6a:0f:3b:7c:4d:a0:38:d3:5b:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May  9 01:00:47 2025 GMT
            Not After : Aug  7 01:00:47 2025 GMT
        Subject: CN=3e89dd0f-8861-4f75-aad1-178239b93450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:30:54:84:42:7b:8e:54:de:4a:43:e1:80:0f:
                    de:f5:88:1e:d8:71:c2:b3:ce:bc:30:be:7a:8a:69:
                    99:32:70:34:11:6c:b1:a9:85:be:fb:55:0a:2e:ae:
                    dc:71:7a:88:31:d0:b6:1a:e0:d5:a9:d2:d7:9a:48:
                    09:2c:3e:41:a4:02:27:ec:dd:ce:2a:db:36:c0:67:
                    07:65:ed:8c:67:ab:1d:78:60:2f:b9:16:be:37:a5:
                    d4:d4:d1:2d:a4:aa:26:12:45:90:e2:df:27:2c:11:
                    9b:23:3a:d0:55:c0:10:8a:0e:48:30:39:34:f4:70:
                    7d:ec:fe:cd:ba:48:cf:7d:62:45:d6:fa:96:6b:b9:
                    9c:e9:83:ab:d0:b6:98:68:ec:66:ad:0d:87:54:2f:
                    f1:cd:0b:01:6e:fc:c3:a3:b7:9d:3f:f8:12:f3:d8:
                    5b:84:db:a0:db:2b:ba:5e:b9:18:be:27:a5:7c:c6:
                    cd:5b:1f:a4:dd:b1:4a:14:9a:f5:dd:73:dd:2a:8b:
                    b3:37:c9:00:62:6b:4c:d2:d2:ff:1f:6b:12:23:8b:
                    51:73:f8:46:ac:53:87:67:87:16:1f:16:4d:1c:9b:
                    6b:30:87:47:45:5c:f7:6f:93:ac:8a:10:27:41:26:
                    7d:09:ad:f0:5e:53:32:7c:66:5c:7e:a6:1e:f3:a7:
                    c2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F2:E4:9C:21:7A:FD:38:98:21:41:87:12:90:03:5F:F7:33:C1:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7ce2f2f5-2072-32f1-952e-abf88c415326.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:5b:92:78:20:1e:47:25:d9:71:12:48:08:b6:0c:07:8e:bd:
         3c:30:74:db:9d:b2:77:e3:bb:6b:35:6b:8b:2c:d4:bb:90:97:
         ec:79:44:55:cc:23:17:c8:ea:6b:44:cc:af:16:8a:b1:cc:51:
         69:1f:f5:6b:4c:94:21:38:16:ca:ca:f3:01:31:79:41:f3:be:
         3f:40:b3:6f:fc:9f:fb:6f:d7:90:92:2c:b7:1c:73:3d:ce:21:
         75:ed:99:0a:d8:f5:f0:37:31:e6:9c:eb:57:bb:c2:6a:e4:60:
         ed:c6:c4:5c:74:0d:fa:f5:32:70:eb:4a:24:f3:69:cf:59:b9:
         e1:ab:00:e9:c1:34:f2:cd:ae:ef:ab:0d:77:18:9a:30:79:7c:
         53:7b:43:a4:4d:39:eb:69:18:7c:15:7f:8e:f7:a6:db:cd:33:
         c8:86:84:7d:60:73:67:0a:dd:37:b7:8c:c2:c5:33:d4:67:be:
         37:2a:c1:fd:0b:b5:f4:3d:e8:1e:b2:83:03:7b:28:68:4e:41:
         1c:a2:47:a6:fc:6a:64:c4:4c:af:9f:59:49:99:2b:e5:14:eb:
         7a:ac:5b:20:b1:00:75:40:3c:46:87:72:87:4f:79:05:68:c0:
         95:8c:62:d2:64:b7:85:e6:18:f8:c0:ed:a0:63:2f:ef:fc:a9:
         a8:94:40:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:20:21 2025 by rpki-client