Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/98ba641d-ec77-33c8-ac30-bb9d946acfa6.roa
File:                     98ba641d-ec77-33c8-ac30-bb9d946acfa6.roa (raw, json)
Hash identifier:          K+wGD+7QAOFoI8LHXIvsE+AHg+5uxCpC3rzZBSGGOuE=
Subject key identifier:   D2:67:5C:9A:06:E5:17:E3:35:69:E7:DE:D4:DC:BC:F1:EB:41:90:2B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858498A3456047A033C7EC5298D00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/98ba641d-ec77-33c8-ac30-bb9d946acfa6.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     18779
IP address blocks:        172.120.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:56:04:7a:03:3c:7e:c5:29:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=fac553d5-05c1-4b3c-8d8c-c5e9e605d269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:44:56:54:c8:cb:aa:c5:b5:44:20:71:01:e5:
                    50:10:57:97:dd:40:15:90:ce:69:cb:65:03:4e:68:
                    69:d2:ae:a1:32:25:c8:d3:e2:fc:87:c3:0a:14:dd:
                    97:ec:d2:fa:18:ce:3a:68:ea:ae:30:7a:b2:06:6c:
                    25:7b:00:6a:55:93:38:54:d2:f9:5e:11:b5:25:6a:
                    a9:73:71:62:d3:7d:b5:5b:b0:49:19:a4:3c:6a:f8:
                    5a:44:b6:e1:34:99:4d:26:54:db:7a:16:05:ee:6a:
                    de:13:75:b1:fb:67:ac:1a:d8:17:18:ae:bc:86:6a:
                    6f:c0:1e:5e:65:9f:98:42:cd:49:2c:04:5c:45:c4:
                    19:15:1d:16:2c:27:53:40:b2:1f:cc:2f:ec:25:87:
                    bf:6c:de:a5:5c:2e:56:f9:2f:37:da:be:6c:96:3b:
                    35:fb:4a:2a:34:c5:80:af:e2:74:4e:57:d2:4f:68:
                    d2:1b:30:ef:04:98:c6:ef:71:69:10:29:f7:70:23:
                    25:a5:09:11:2e:89:6b:3f:56:d2:71:6a:ae:6b:52:
                    34:74:d1:1c:8b:0b:e0:40:f3:0b:15:8f:33:5c:76:
                    28:95:08:86:cd:a9:3f:d2:06:97:c4:ee:57:32:76:
                    cf:27:d4:e0:98:1b:7d:13:12:e0:cb:24:56:4b:aa:
                    14:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:67:5C:9A:06:E5:17:E3:35:69:E7:DE:D4:DC:BC:F1:EB:41:90:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/98ba641d-ec77-33c8-ac30-bb9d946acfa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:81:98:1a:d2:e8:d7:f9:93:68:0c:2e:10:d5:c6:ae:47:60:
         08:8d:6b:7a:9d:09:a0:e9:8d:95:a1:54:b7:0f:87:76:bf:6f:
         63:24:7b:02:57:04:89:5b:5a:ca:20:9c:02:f2:95:4e:58:f4:
         db:25:19:6d:0a:8c:ea:12:2f:10:22:06:cc:a0:e2:9d:d6:0b:
         87:09:9d:bf:f8:2f:27:cb:0f:da:f1:eb:b7:c5:20:92:f4:56:
         bb:ca:43:f5:c3:13:57:a0:33:40:b7:52:4f:00:6f:37:fb:1d:
         62:b2:a7:58:e4:22:f9:9d:07:ab:22:c1:d2:e7:ee:21:cb:50:
         63:56:59:63:29:e0:e7:86:26:37:7d:61:a7:a4:f4:22:0d:91:
         19:48:62:4e:e3:e2:e7:04:c1:8d:6c:84:92:22:e7:f9:07:93:
         71:94:44:21:93:e5:21:44:1c:99:c9:97:3f:ab:ca:40:11:9c:
         c1:35:ec:06:08:2f:09:86:0e:44:dd:a7:48:8e:a5:c6:e9:2b:
         c5:e3:85:a3:02:a5:ad:96:d4:aa:87:a2:12:8c:51:19:f0:8c:
         06:7c:77:f0:54:98:b2:f4:17:11:13:d9:05:30:1b:9f:9d:5d:
         54:d4:fe:8c:eb:bf:04:49:1d:02:5b:e2:66:f4:eb:93:94:75:
         db:f3:ca:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:07:26 2025 by rpki-client