Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/980d288b-f803-3203-9c5d-61f382f54dc1.roa
File:                     980d288b-f803-3203-9c5d-61f382f54dc1.roa (raw, json)
Hash identifier:          1+JP/GIl4CBYCKvBmKG3y8vwhV/kSZxs8wTicUolfKE=
Subject key identifier:   9A:5B:14:49:67:55:2A:09:EB:86:49:2B:32:3A:CB:0A:E5:1C:7A:4C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858498A3455589B9C4CF08183C1C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/980d288b-f803-3203-9c5d-61f382f54dc1.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     18779
IP address blocks:        172.120.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:55:58:9b:9c:4c:f0:81:83:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=a62ffecc-537a-499d-a0b0-b86d485195c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:de:4e:56:2b:5b:30:8d:53:e3:97:8c:b2:43:
                    07:f2:77:b0:2d:95:45:a4:a9:13:aa:d5:19:ca:14:
                    d0:55:44:d0:11:bb:7c:c2:79:d2:4a:04:e9:7e:80:
                    b5:f3:8d:62:9b:99:da:b0:c4:2b:a6:1f:46:67:1b:
                    25:10:da:52:ef:42:7d:21:7d:2f:39:3f:a3:d3:30:
                    dc:bd:f8:67:d5:96:12:13:02:ac:f1:74:46:91:31:
                    e7:4a:3c:97:4e:1c:91:79:a9:d5:5f:17:02:86:76:
                    43:ae:79:74:2d:c5:a0:15:96:e1:a1:30:18:65:4f:
                    c1:49:34:38:38:3c:df:2f:b9:85:9e:f2:25:e9:cc:
                    9c:aa:86:c6:5b:a6:ad:c1:40:64:dc:17:33:d1:19:
                    84:b3:7d:c6:aa:2b:1f:f5:3d:dc:52:df:70:ed:05:
                    d8:cc:b1:2b:dc:70:a1:c9:9f:bb:12:59:8e:a4:d0:
                    f1:20:7c:2b:8f:70:64:74:b0:84:47:0d:7a:c3:08:
                    92:77:59:0e:c0:22:87:b8:b0:55:56:de:86:1f:dd:
                    78:05:25:33:4d:e5:54:01:6c:6b:b7:d2:91:ee:d1:
                    ef:4c:b4:8a:34:ac:73:3f:f8:25:7a:a9:1d:03:82:
                    dd:6e:87:6b:c3:e7:e1:eb:19:c7:31:93:69:bd:2f:
                    69:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5B:14:49:67:55:2A:09:EB:86:49:2B:32:3A:CB:0A:E5:1C:7A:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/980d288b-f803-3203-9c5d-61f382f54dc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:8c:18:49:e7:7b:ab:5f:5b:75:30:74:19:13:31:93:2a:c8:
         5b:65:8b:19:4c:a5:3f:f3:ef:ca:e7:b5:ab:32:bb:5b:aa:94:
         91:96:ab:cb:63:3c:64:b4:0e:98:5f:92:4f:d5:3d:50:e7:94:
         ef:44:ae:95:5c:ae:11:c0:3b:71:7e:ff:2c:a5:a5:d7:aa:39:
         6a:f6:73:81:82:cf:b7:b9:ea:a8:d4:7e:1f:68:02:43:06:f7:
         c2:45:3a:e4:e2:a1:4a:75:69:da:0a:bb:24:6a:4c:0a:5d:5e:
         30:a0:e1:39:40:34:b8:04:bd:aa:99:12:4d:58:64:28:70:2c:
         a9:ff:e3:b4:45:f5:a1:86:6a:c0:86:02:bc:9a:4c:5c:a9:6d:
         dc:cc:51:81:d4:64:84:76:11:bf:db:3b:ff:fa:1f:63:31:a7:
         60:8b:2c:d7:fb:30:03:13:00:1d:c0:b9:f6:94:33:c9:6a:23:
         f5:88:52:24:59:00:a2:29:a7:58:0b:cd:4a:d1:d9:19:9f:04:
         72:a2:35:a8:3f:16:36:66:a8:25:ff:94:f5:9f:8c:1b:9f:b0:
         c8:86:60:41:eb:73:35:03:e4:95:3b:f6:2a:95:d2:13:10:a4:
         8a:c0:5f:92:86:03:dd:b9:da:c7:8e:ee:2f:b1:69:26:26:aa:
         9e:c3:84:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:31:17 2025 by rpki-client