Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bf31a503-22e3-31bb-9673-5e2012cffa6c.roa
File:                     bf31a503-22e3-31bb-9673-5e2012cffa6c.roa (raw, json)
Hash identifier:          6469J7A9So2KnxgMeM1S47EPA5QHhJC3fl5MhTvnAv8=
Subject key identifier:   1E:B5:97:CF:6C:E3:E9:F3:A5:68:52:ED:EE:E6:9D:4A:A0:5A:58:E2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858498A345A75C9605B3DAE14B6C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bf31a503-22e3-31bb-9673-5e2012cffa6c.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     18779
IP address blocks:        172.121.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:5a:75:c9:60:5b:3d:ae:14:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=e9fe092b-0e2f-48fd-a7dc-398e64761131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ec:12:9c:89:62:b2:98:d4:49:1b:c1:2f:ef:
                    55:61:e7:16:56:0a:fe:af:1f:8b:cc:cb:65:b2:af:
                    48:7e:6b:57:b5:41:f0:ff:48:59:66:f5:92:25:ce:
                    ea:ef:ee:ef:9b:22:08:af:d4:a9:54:ca:d0:ba:5a:
                    3b:06:31:74:e2:11:2c:5e:89:b8:ab:68:06:b2:d4:
                    92:63:e6:ae:23:fc:eb:7e:26:2a:a2:2f:ff:d1:d6:
                    4f:1f:c5:e9:fd:15:cf:0b:b9:b5:c8:b7:8b:1d:78:
                    62:dd:23:54:e5:8f:24:96:f7:87:b0:46:41:d4:fc:
                    4b:d9:a5:ef:84:7b:4f:fc:4f:4e:28:9f:34:70:59:
                    bd:97:99:11:9c:75:ed:31:0d:b0:11:bf:7e:17:a5:
                    ff:90:7c:6a:05:b2:20:b2:f7:ac:e3:a8:18:81:53:
                    ee:77:8a:db:56:bb:02:2a:3e:0d:35:b4:bd:f8:58:
                    31:d4:62:fe:ac:45:24:45:49:14:22:b0:41:16:d0:
                    45:47:33:87:da:db:55:1c:e5:61:54:3b:8e:58:c6:
                    4d:5d:23:d9:ff:1c:dc:b1:7c:b7:24:9a:59:65:52:
                    3b:59:4c:b6:1b:2f:9b:2f:7f:46:b6:69:df:53:eb:
                    62:71:78:f7:24:29:f0:3c:8e:07:89:72:a5:b0:d5:
                    02:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B5:97:CF:6C:E3:E9:F3:A5:68:52:ED:EE:E6:9D:4A:A0:5A:58:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bf31a503-22e3-31bb-9673-5e2012cffa6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:e7:19:ba:aa:4e:40:22:14:48:0f:d2:4f:b2:62:ca:53:94:
         98:ba:3c:38:e6:c9:de:0b:6f:2c:ff:1e:f3:5c:0d:ec:33:39:
         95:9e:86:26:b7:40:f0:5e:bb:d0:90:7e:38:2b:f1:f1:2c:80:
         d8:d2:ff:0f:96:cc:73:0b:6c:6d:71:1a:ed:19:4f:4e:75:9b:
         62:23:54:ef:fe:a7:ad:6c:5f:d5:eb:81:dc:83:2b:82:26:a2:
         3a:b3:77:05:4f:02:d7:e5:ad:2f:fa:9e:7d:4d:df:bf:94:73:
         a5:cc:8f:57:b3:cd:ec:e7:d7:d6:5a:c7:64:29:02:e6:63:45:
         42:9a:75:9e:0d:90:22:58:91:ea:59:82:e5:9e:e3:ef:8a:14:
         01:e7:0f:29:49:13:88:01:13:06:81:35:be:53:f3:46:2f:91:
         84:98:bf:09:0f:59:0e:30:33:52:97:7c:58:75:ac:a7:dd:09:
         ea:89:8f:e3:b8:5c:71:54:dc:a2:37:cb:9c:a3:49:f2:c9:ef:
         e7:fa:da:ee:80:72:cf:b3:ad:34:3b:07:51:82:a6:ca:1e:2b:
         38:7a:95:94:4b:55:53:ad:54:40:94:d0:6c:9d:05:cb:69:9d:
         6a:4b:ab:47:35:bf:e7:e3:b0:33:06:f7:32:ed:a9:75:29:3f:
         4b:e1:63:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:55:35 2025 by rpki-client