Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df22234d-8114-3a66-9c62-76365fa61f95.roa
File:                     df22234d-8114-3a66-9c62-76365fa61f95.roa (raw, json)
Hash identifier:          kOuWRtCgEDmJYQ6EUPA8tKM2IaFLD7rQ6EBiY4MOMXw=
Subject key identifier:   47:8F:9A:E5:AD:F9:4D:73:BD:F3:D2:01:D5:7C:13:EE:D7:10:7F:7F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849CA6A0FEA9C9655AE7B1F2000
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df22234d-8114-3a66-9c62-76365fa61f95.roa
Signing time:             Fri 09 May 2025 01:00:47 +0000
ROA not before:           Fri 09 May 2025 01:00:47 +0000
ROA not after:            Thu 07 Aug 2025 01:00:47 +0000
asID:                     55201
IP address blocks:        172.121.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ca:6a:0f:ea:9c:96:55:ae:7b:1f:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May  9 01:00:47 2025 GMT
            Not After : Aug  7 01:00:47 2025 GMT
        Subject: CN=2a62b3b2-5efd-4ba6-b83b-9b7ab1732ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:18:34:e6:c5:ef:c3:b1:84:c3:aa:f3:6b:96:
                    4d:ca:b6:ca:fc:25:cb:04:09:cc:b8:74:88:7d:0f:
                    e2:8b:a8:fc:52:59:d6:3e:9a:33:be:af:1b:55:18:
                    7a:90:af:00:52:ae:d3:da:99:4c:ae:d4:5c:46:29:
                    81:ec:10:c0:4f:7f:2a:6f:15:ac:9d:62:5a:f2:2c:
                    47:d0:c7:fe:23:04:1b:c6:ae:f0:c5:eb:d4:84:0f:
                    9e:e9:ad:3d:40:a2:4c:20:ee:12:bc:8f:bd:19:c4:
                    6a:15:ee:91:42:99:93:d5:cc:7f:2b:72:08:f7:6e:
                    6a:b8:d2:df:cf:a3:84:7f:67:f2:89:eb:2a:27:52:
                    de:d2:04:af:5c:72:d7:96:6e:12:31:88:4e:ec:d5:
                    2b:a3:3d:30:30:f6:06:29:f1:c4:cc:f7:8a:00:03:
                    de:e0:11:97:ff:e5:85:c1:a0:c8:0c:d4:b8:e3:7d:
                    c5:41:1c:b6:4e:6c:2f:02:85:5f:6d:a4:d8:ad:c7:
                    09:97:ab:2c:f9:73:f8:1f:3e:d2:9c:5d:ec:95:d9:
                    4c:07:f7:7e:c8:30:c0:1a:78:86:59:11:bf:7d:61:
                    b3:05:e3:c3:7c:92:a7:e1:4c:4b:96:96:85:8a:8c:
                    ce:75:1b:6b:4b:a1:e1:33:23:75:32:fb:06:ca:37:
                    1e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8F:9A:E5:AD:F9:4D:73:BD:F3:D2:01:D5:7C:13:EE:D7:10:7F:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df22234d-8114-3a66-9c62-76365fa61f95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:13:6f:24:ae:0b:cc:92:be:c9:7b:db:f6:2f:b8:21:1f:13:
         02:90:38:94:2a:c0:38:18:32:a6:8b:18:2d:78:90:d3:6e:71:
         d5:eb:90:98:b1:bd:6c:1d:9e:9a:6e:98:9a:48:24:b5:70:bb:
         50:88:20:2e:a4:81:7a:bf:12:25:7a:8a:28:cb:e6:0e:3d:3d:
         1e:f4:37:81:7c:b9:31:92:1d:c0:5b:52:14:10:e9:b8:de:de:
         9e:fa:64:1d:b7:ad:92:7b:ce:80:ec:e8:d8:bd:c5:c3:d0:d3:
         bc:20:aa:5f:b3:81:52:82:b6:bc:e4:45:27:be:c4:ae:8f:21:
         b9:c9:7e:a3:03:74:bb:fd:f9:41:9a:ae:78:b0:ff:dd:14:c7:
         54:77:56:4c:52:53:f4:58:54:22:44:d1:5a:07:8f:57:3a:6a:
         7b:b3:39:62:2c:17:75:60:9c:49:b9:ca:ab:ae:7c:d1:db:7f:
         75:a1:f2:62:da:ac:dd:9e:21:42:e4:e2:9d:fb:05:6f:59:e7:
         9d:c9:a7:96:07:2d:f3:3b:e9:7e:30:3f:36:6c:13:3b:c7:ec:
         a1:7d:f5:b5:dd:41:dc:6f:fe:5a:2b:43:ab:94:a3:35:c3:2d:
         61:cf:d0:11:00:24:24:ee:9b:9d:4c:31:fe:6e:7a:29:9e:e7:
         c6:c3:5f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:00:14 2025 by rpki-client