Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fd064b82-0d25-32b5-b66c-38307f92f0d2.roa
File:                     fd064b82-0d25-32b5-b66c-38307f92f0d2.roa (raw, json)
Hash identifier:          G0gj6OUEak89AOyObJOy0eKPNJCsOHkggwH7BHN4ZlU=
Subject key identifier:   2B:5F:8D:23:F5:86:04:68:53:C0:5C:3A:3C:69:4F:8E:15:0F:AE:BA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B57A34DCCABFB3C50D6E1B80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fd064b82-0d25-32b5-b66c-38307f92f0d2.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     204957
IP address blocks:        172.121.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:34:dc:ca:bf:b3:c5:0d:6e:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=765e8e37-d55d-4dbb-bac9-2b24f5a814fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b4:37:63:17:9b:5c:31:d7:fa:9f:26:68:72:
                    f4:41:c3:69:24:bc:09:82:1a:bd:a0:86:3b:a3:70:
                    d2:49:cc:0f:ec:98:6e:74:76:b9:1f:27:87:55:87:
                    a0:e0:e0:90:d9:a6:a6:5f:e1:0e:e5:7b:75:47:d9:
                    f9:66:c2:05:8f:31:3f:81:21:ed:3b:8f:6a:e0:a6:
                    e2:d6:5f:c2:c9:2d:b5:37:07:38:5b:1e:f0:a0:84:
                    e1:16:c8:86:cf:93:dd:42:06:c9:02:ac:9b:70:e4:
                    83:19:2d:db:0c:c9:69:7a:ed:e3:02:2c:d8:6e:f6:
                    f4:7f:18:f9:16:05:98:2f:b4:d5:c3:a3:1d:48:2f:
                    45:69:45:52:b4:fd:13:ba:58:75:32:a0:a3:59:39:
                    58:57:69:73:55:a0:02:64:97:7b:d7:8a:85:a1:ef:
                    e7:85:30:dd:28:7b:48:c9:5c:f5:6b:36:63:6d:f6:
                    b8:30:08:7f:39:e4:16:a4:21:b3:2c:0b:53:ff:a6:
                    e8:7a:d6:19:f2:83:63:27:e8:5b:d3:f0:e5:c8:e5:
                    3a:10:0b:93:7b:8d:e0:ae:77:7f:4b:8f:fe:81:9e:
                    5d:0b:8b:64:a0:f3:bb:d4:b7:d8:91:78:15:f6:5b:
                    2c:da:8a:78:9f:f8:a4:b9:e0:b4:af:58:5c:66:ac:
                    d1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:5F:8D:23:F5:86:04:68:53:C0:5C:3A:3C:69:4F:8E:15:0F:AE:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fd064b82-0d25-32b5-b66c-38307f92f0d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:32:3d:0c:ec:ab:6e:8e:74:fe:30:c7:5b:49:1b:3a:cd:6e:
         9e:22:e5:b6:1d:c5:b4:d6:61:e5:d4:4d:55:ea:48:19:b0:34:
         99:25:4d:43:32:e5:ee:14:f6:28:fe:da:43:bd:23:21:c3:02:
         82:2b:b2:d9:98:88:7d:83:f5:ca:3a:e4:94:f9:3b:ee:45:aa:
         0e:6b:e6:63:26:b9:ac:20:3f:54:f9:47:91:b6:75:e2:d5:c3:
         c4:90:8c:72:de:95:e4:40:2a:17:12:1e:9d:a4:ce:48:3b:17:
         25:95:5f:dc:f1:1d:cf:0a:c0:2f:66:3c:7e:7b:11:d9:ff:48:
         21:47:51:47:9f:73:22:7a:3d:d2:2a:b8:54:ba:fa:b5:39:aa:
         4b:18:33:68:67:c0:bf:79:e5:b5:1a:cc:a9:89:fe:b1:b2:bd:
         9c:d8:b5:b9:fc:47:40:77:03:39:70:31:30:32:9b:f2:38:6e:
         d6:85:08:b4:35:39:0f:b2:1b:55:bc:d5:4b:75:c9:6b:f8:72:
         e5:e5:5c:9d:e7:31:6a:44:39:8a:f4:07:e4:21:59:a3:e2:9c:
         16:37:66:f1:ec:23:b7:46:0b:4a:87:eb:79:5d:c7:ca:a8:36:
         bb:1c:6d:63:d5:94:80:22:e9:02:92:3f:ba:90:45:84:70:83:
         c5:c2:2d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:35:13 2025 by rpki-client