Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8eba5d3d-0e4f-332b-9c79-c7098a308d08.roa
File:                     8eba5d3d-0e4f-332b-9c79-c7098a308d08.roa (raw, json)
Hash identifier:          AdqTbQH+VWfrLMZR5+vIXBT7uWJUkl3+kJqinJWpnJ8=
Subject key identifier:   43:D4:F5:2A:66:D7:13:96:40:81:FA:71:AD:68:4B:A8:97:8B:32:FB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858498A3455EA77C428C46732D100
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8eba5d3d-0e4f-332b-9c79-c7098a308d08.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     18779
IP address blocks:        172.120.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:55:ea:77:c4:28:c4:67:32:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=4141e9ec-6782-4ede-9bd3-80b0d6a7a170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:60:18:ee:ba:a8:2c:a2:fd:5d:f3:19:2b:9a:
                    8e:ed:a2:9c:c9:b5:db:42:c5:bd:5a:e6:72:64:91:
                    20:7f:33:fb:97:8b:72:aa:c3:3e:b1:5b:ea:3d:e9:
                    5f:06:38:d4:57:af:20:fa:3b:99:11:b3:4b:eb:d0:
                    0b:44:cc:58:75:95:74:65:7d:50:d6:a8:4c:f3:b1:
                    21:55:06:43:b0:5f:e1:93:a8:bf:83:74:39:43:0c:
                    72:97:4a:01:0e:79:2a:51:2c:64:9d:a4:2c:d1:4a:
                    25:e8:83:ac:10:64:85:ff:5b:5e:1a:e8:8d:4f:b8:
                    af:48:3a:d9:e1:94:ab:df:eb:6a:51:91:f3:e2:5c:
                    5a:e2:df:d1:7b:f6:83:34:c2:8d:c2:a7:d9:62:df:
                    f9:61:43:ea:ae:53:05:b1:72:49:65:fd:7f:49:c7:
                    d6:00:5d:ad:30:b3:51:fc:01:e5:b1:30:b1:4d:22:
                    b2:78:17:88:54:7a:09:8b:86:56:f7:0d:bd:e8:d5:
                    95:f1:67:ca:e8:2b:4c:57:33:ec:40:d7:3d:0a:8d:
                    67:c1:23:f6:68:da:22:4d:7c:13:de:ba:76:d2:40:
                    5c:21:ba:28:21:e9:c4:a8:44:93:a0:6b:02:2c:4d:
                    ab:68:b0:1e:87:8e:9c:39:48:4a:48:f9:33:b2:a6:
                    3b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D4:F5:2A:66:D7:13:96:40:81:FA:71:AD:68:4B:A8:97:8B:32:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8eba5d3d-0e4f-332b-9c79-c7098a308d08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:60:03:28:62:07:b1:46:7c:38:ca:cb:20:b9:d9:a1:53:05:
         4e:4a:1d:ad:58:0e:1b:3c:22:06:18:86:d6:0b:10:a5:27:08:
         da:b4:fb:83:f7:91:32:22:7f:f2:23:37:f3:15:19:0a:cf:ca:
         37:bd:bc:1d:fd:b8:2a:c9:d7:c5:69:e4:70:2b:aa:db:ab:66:
         2f:dc:8f:f0:a7:a6:75:78:e4:bf:27:fb:64:e0:32:a7:75:08:
         f7:a1:94:5b:18:51:16:ea:da:0a:bc:4d:b5:19:81:78:7e:97:
         ce:0a:b0:d9:21:7e:cf:fe:9c:4f:10:a5:a5:2f:9f:01:2a:15:
         8a:ef:b1:f2:db:cd:a5:94:06:02:03:26:f0:25:ff:22:16:c5:
         38:d1:3d:4b:d7:ad:79:43:1a:a9:79:fd:f4:74:52:30:ec:60:
         71:84:99:1f:ba:cc:8c:7a:24:11:9f:6a:16:0d:8d:99:e6:76:
         4b:77:55:3a:7b:de:25:b4:31:4d:7b:67:f2:aa:80:12:de:14:
         e3:28:59:42:2a:e3:22:f3:d0:dc:94:3e:51:ad:06:86:32:31:
         14:3c:5c:1c:ac:41:fc:cd:08:e4:75:ed:14:2d:14:9b:b1:bc:
         bb:96:76:d6:25:59:24:61:ac:c5:66:8d:8c:67:ca:a1:21:fb:
         c4:b2:b2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:35:08 2025 by rpki-client