Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9ecb50e2-94e6-3b2c-8d1a-a5040ee34e89.roa
File:                     9ecb50e2-94e6-3b2c-8d1a-a5040ee34e89.roa (raw, json)
Hash identifier:          g8AH06GcKURgUWItjufV9hKtsGJkBbI0/L+5Rdz1K94=
Subject key identifier:   03:66:77:05:FE:6F:A4:AE:47:9F:4D:10:56:80:FF:B0:C8:EB:57:F2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B57A3239DD5E582BC0A148F0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9ecb50e2-94e6-3b2c-8d1a-a5040ee34e89.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     62240
IP address blocks:        172.121.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:32:39:dd:5e:58:2b:c0:a1:48:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=e2248ddd-98cc-4e75-9394-007aeb33e0b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2f:2b:62:e2:04:ff:40:9c:c4:4d:c1:84:fd:
                    ad:e7:9f:a8:47:bd:96:0a:20:fe:2e:d5:9a:72:60:
                    6d:f7:d0:92:ad:83:ab:ea:66:7f:97:5c:a1:23:3c:
                    d1:ac:a2:d5:7a:2b:79:a2:05:9b:93:c9:d5:da:57:
                    99:be:c8:ca:f9:ee:d9:9c:1d:da:34:30:06:ed:b7:
                    4a:6c:47:67:ae:01:3f:1a:4b:d7:3d:d2:24:a9:78:
                    90:e8:90:ae:f8:b4:dd:3a:61:7f:05:a5:7a:86:d1:
                    bc:17:9d:db:c4:a9:10:e9:ec:6f:61:dc:d4:1c:ce:
                    4d:5d:3d:ca:68:11:ad:47:84:b3:02:4e:4c:e0:d4:
                    42:a3:96:33:c6:93:23:30:48:0c:57:f5:f7:d0:77:
                    81:65:95:6f:1d:31:c0:84:37:29:49:98:b3:71:ee:
                    92:bb:a7:d0:e8:5b:b1:bf:e1:4b:ef:6b:de:54:c0:
                    69:50:5d:74:95:3c:41:8a:33:ed:43:db:94:9a:c6:
                    95:50:4f:fd:ee:72:17:72:ec:01:04:a0:af:2a:a8:
                    cc:68:23:21:60:fe:66:58:48:de:f2:f2:aa:a6:22:
                    81:52:c3:d3:77:6c:a7:2b:9d:41:64:7e:01:51:3e:
                    e5:15:d1:b6:f3:46:1b:27:c5:b4:91:68:e8:5c:3e:
                    1a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:66:77:05:FE:6F:A4:AE:47:9F:4D:10:56:80:FF:B0:C8:EB:57:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9ecb50e2-94e6-3b2c-8d1a-a5040ee34e89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:a8:28:0d:46:b1:7a:70:29:dd:ff:a5:bc:09:7d:45:81:ba:
         24:df:69:bc:83:3d:92:cf:1d:1f:15:4a:0e:ff:da:5a:13:fd:
         ee:ee:43:6a:fd:c6:9e:c8:e5:c9:ba:e2:5c:33:60:9f:c8:91:
         6c:d9:4f:29:46:58:cd:2f:9d:77:35:0b:00:c8:0e:f1:2e:9d:
         d5:98:0d:87:95:36:50:82:4e:25:74:31:db:63:1f:31:28:45:
         c3:f9:ad:6c:67:2b:65:5d:57:db:d4:8a:2c:ee:f1:ed:bb:1d:
         7e:32:93:05:5a:6d:e6:23:84:ba:ec:9b:2a:f2:e3:a4:28:5e:
         b1:74:9a:6c:6b:69:5f:c4:76:c2:94:c7:58:01:97:0c:d6:ef:
         dc:0a:f6:d6:4c:e1:96:df:ba:ce:f8:17:0a:5d:0c:a1:e3:51:
         22:f0:61:5c:63:c5:a4:12:02:bd:be:09:9c:e3:07:00:00:f3:
         ed:e9:3a:80:76:a0:4b:72:99:db:3c:33:67:9d:a5:97:86:1e:
         3d:e5:59:6c:3f:1f:86:56:e3:80:2c:0f:43:86:eb:77:da:16:
         8a:85:ae:d5:e2:1c:3f:7e:ac:28:66:de:c3:8c:8c:fd:be:99:
         0b:1a:58:31:71:fe:c9:86:68:53:6c:49:8f:03:6c:e0:1f:7c:
         f9:fa:57:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:49:03 2025 by rpki-client