Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec30ddc2-8c93-3656-805f-8924db00fa68.roa
File:                     ec30ddc2-8c93-3656-805f-8924db00fa68.roa (raw, json)
Hash identifier:          A+aEKpBONeRoCYE8u7c+1DNRP9J6llx7aG655PyuF54=
Subject key identifier:   1C:64:7C:B4:89:B6:DA:9F:94:85:60:13:6F:5E:54:1D:EF:91:FF:51
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849CBCFADEB1330E5E81D692180
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec30ddc2-8c93-3656-805f-8924db00fa68.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     7029
IP address blocks:        172.120.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:ad:eb:13:30:e5:e8:1d:69:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=bd36474f-50aa-4059-9fe1-7cf379621fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:da:16:8d:9a:58:b9:59:a3:27:2e:36:81:49:
                    95:c4:5f:ba:8f:7a:d9:64:90:42:ea:54:1a:a3:0b:
                    d6:80:90:8f:ef:b9:f0:c6:d7:98:04:38:6b:fa:08:
                    0c:2e:49:57:35:10:b7:a7:b3:42:36:20:4a:ca:16:
                    63:e4:b8:40:59:68:09:97:3f:23:d7:67:b2:af:fd:
                    ff:11:4c:e9:6a:67:06:84:ca:c5:7e:00:7f:16:0d:
                    a4:f3:7d:3a:63:4f:94:1b:c6:0f:e8:85:f2:eb:d2:
                    af:f2:d1:8e:50:46:6b:5e:9b:60:a8:dd:52:42:a0:
                    30:f8:cb:16:c5:73:53:ab:da:dd:a0:85:06:17:6e:
                    e0:0d:77:df:16:62:5d:b3:e8:75:b4:b6:83:ad:06:
                    49:53:13:96:47:cc:00:3c:54:90:63:ff:bd:9a:89:
                    a6:ae:1d:ac:4d:ba:81:c0:ba:0b:4c:4f:10:9e:08:
                    6f:57:81:b8:af:81:05:06:0d:c1:7e:71:1f:0d:52:
                    c4:cb:87:eb:54:70:32:5d:d9:be:e2:10:95:9e:32:
                    61:83:83:6a:74:4e:4b:dd:6e:8c:a1:b5:12:80:d3:
                    66:26:71:2d:2c:89:ab:fe:c3:f6:b7:07:76:66:6e:
                    a4:06:5e:70:ff:c1:69:3b:8d:ff:bb:f0:f8:f4:5f:
                    54:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:64:7C:B4:89:B6:DA:9F:94:85:60:13:6F:5E:54:1D:EF:91:FF:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec30ddc2-8c93-3656-805f-8924db00fa68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:57:c3:f6:5a:0b:4f:98:7a:9a:ff:ee:c2:84:8f:04:45:b7:
         e6:74:a2:1f:29:65:40:f3:79:b4:7b:a6:f5:1a:de:28:51:d9:
         a6:e8:1a:f1:9e:89:a9:9d:51:64:40:31:08:40:ff:cb:58:57:
         5e:a4:bd:75:42:6f:df:d2:e5:6b:5a:0b:12:8b:7c:f3:84:77:
         e4:be:3c:6d:34:0f:54:79:9e:a9:0c:5d:52:f1:89:87:56:ea:
         a2:94:d9:33:25:ac:61:21:a8:59:b0:ed:34:e5:c2:b1:d1:23:
         24:de:45:b2:24:2b:55:99:e6:4d:d4:ea:bd:6e:d2:3d:36:5a:
         82:f7:cf:83:4f:c3:71:91:cf:82:e8:0e:1b:3f:a3:5f:20:13:
         5f:68:f3:35:dd:84:c4:77:07:61:4e:f8:b5:2f:47:d0:f3:21:
         ee:31:26:33:c4:00:13:f0:7d:e2:6e:1f:42:89:5c:49:20:6f:
         c7:7a:64:24:74:88:1d:70:fb:54:ae:2f:b5:65:3f:1a:f9:e4:
         9f:62:c9:da:8a:7a:a9:f0:cc:04:6b:4c:a7:e0:b4:5c:55:dc:
         52:45:39:83:68:05:e1:8a:7d:b7:b8:b5:23:13:9b:33:02:15:
         ed:e6:96:56:15:32:5b:b3:ba:06:f8:58:49:a1:fd:0f:23:cd:
         0d:80:33:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:07:26 2025 by rpki-client