Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ee6232c8-533c-303c-81d5-a13764019bac.roa
File:                     ee6232c8-533c-303c-81d5-a13764019bac.roa (raw, json)
Hash identifier:          3NC7yvsiTwjwVgwXQxVVv/H/HSNe/WBvHyEKaN6mCZY=
Subject key identifier:   7B:A9:4B:EA:3C:BA:BA:74:41:91:94:F0:56:76:7E:6A:17:B5:6C:29
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B149FD63D4B8F491DC889100
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ee6232c8-533c-303c-81d5-a13764019bac.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     44893
IP address blocks:        172.121.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:fd:63:d4:b8:f4:91:dc:88:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=1043e9ea-8222-411b-82af-1c9dfb607dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4e:8c:5c:1b:f2:9f:a4:5e:da:b5:3f:84:9c:
                    a9:64:fd:a6:67:c9:6b:08:64:c4:54:66:08:b1:e0:
                    8c:ae:b0:a0:1f:83:48:7d:c2:a9:c9:7c:40:04:51:
                    6c:9b:1b:e3:13:37:ec:35:d2:6d:57:21:fc:04:a9:
                    89:1c:02:04:23:00:3f:57:50:fe:7f:f7:4b:3d:29:
                    94:fe:16:76:11:6d:77:aa:24:23:c2:ec:5f:78:48:
                    09:6f:34:4e:33:e6:14:7b:45:58:e7:4d:b6:42:c1:
                    b6:cd:78:de:90:a9:68:a2:51:24:e1:2e:c7:7b:59:
                    9e:13:5d:1c:82:e1:80:f7:b3:88:6d:08:20:e7:81:
                    8b:a4:e2:8f:d3:54:c2:bf:76:29:e0:77:c2:7f:89:
                    f7:53:17:f9:03:70:17:71:ee:0a:11:2c:db:6b:63:
                    e8:b8:bd:e9:9f:bd:32:9d:3d:7a:28:3e:65:3a:22:
                    66:95:ab:74:f0:c6:4c:ce:4c:f5:83:d3:ac:77:0d:
                    d3:bd:bd:ec:05:e4:09:46:a8:5e:b6:c3:dc:ac:d5:
                    7b:a4:85:e9:50:04:c0:39:67:b3:a1:db:74:63:72:
                    33:25:25:f5:5e:1d:dd:c0:f9:03:12:2d:c6:e4:d1:
                    20:73:5c:e1:a5:7c:16:20:b5:12:57:8a:32:03:80:
                    d9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A9:4B:EA:3C:BA:BA:74:41:91:94:F0:56:76:7E:6A:17:B5:6C:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ee6232c8-533c-303c-81d5-a13764019bac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:95:65:e7:9f:13:8d:58:04:8d:1f:87:e8:54:01:3d:fd:f6:
         a1:2e:c5:2a:1e:e1:f2:e1:13:6a:a7:7a:77:f4:f5:5e:6a:5e:
         48:fb:8e:ef:9f:17:ce:0c:8c:7b:47:7b:64:51:33:b4:ab:53:
         e7:10:85:6e:38:a7:7d:90:fd:4e:72:ed:20:de:30:e2:96:6f:
         3c:b2:aa:72:64:2b:d0:c3:66:b7:9e:73:92:c3:b4:b1:09:50:
         21:46:6e:df:bc:b3:90:41:ef:12:15:c9:a9:0a:55:1c:6b:39:
         28:c9:eb:66:0a:49:92:5b:45:cf:0e:dd:72:b9:dc:a8:92:78:
         fa:96:33:f5:11:40:1e:9f:bf:91:6a:7c:c5:af:2f:71:c9:e8:
         34:83:23:7e:4e:87:db:ad:f2:55:62:c1:96:cf:60:6f:02:09:
         f1:78:78:fc:8f:54:06:a7:63:83:27:ab:59:22:a7:b4:4c:d3:
         0e:75:3b:3e:9c:60:49:15:04:b7:a0:ee:b7:ba:21:8d:7c:c1:
         10:b7:15:c5:2e:55:ab:b9:20:b8:dd:6f:0b:1a:e2:4f:e5:3a:
         92:43:5d:7d:76:9f:b8:eb:08:d9:7a:03:27:75:4e:69:e5:15:
         7c:47:3e:c5:19:9d:6f:61:8c:1a:4a:68:58:da:5e:c5:4c:37:
         2a:fb:ed:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:40:49 2025 by rpki-client