Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4664b117-9b75-3e17-a1a3-0f5cd4735209.roa
File:                     4664b117-9b75-3e17-a1a3-0f5cd4735209.roa (raw, json)
Hash identifier:          XcJvsjnNCoFHhhcFN4o1447n7nOc81VtuowxviWzkaw=
Subject key identifier:   0E:4A:DD:0C:94:EA:A0:14:9E:D2:89:DB:59:0E:C1:16:0E:10:82:36
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848D0ABCA835393865994C3C800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4664b117-9b75-3e17-a1a3-0f5cd4735209.roa
Signing time:             Sat 08 Feb 2025 14:00:52 +0000
ROA not before:           Sat 08 Feb 2025 14:00:52 +0000
ROA not after:            Fri 09 May 2025 13:00:52 +0000
asID:                     44893
IP address blocks:        172.121.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d0:ab:ca:83:53:93:86:59:94:c3:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  8 14:00:52 2025 GMT
            Not After : May  9 13:00:52 2025 GMT
        Subject: CN=9a3eaac7-20d2-4651-9027-482998d7de5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a0:34:ea:58:79:e3:df:1a:34:f2:27:28:c0:
                    c1:63:27:d0:6a:a1:c2:87:a3:af:0c:75:d4:a2:7f:
                    ac:e8:53:ca:0f:68:30:14:69:92:e8:14:1b:f6:4b:
                    f0:07:a3:fe:d0:7e:fb:93:ea:78:2d:68:6c:e2:f7:
                    d4:9f:1d:76:2c:d3:e9:d8:a9:a4:a7:09:c2:ff:45:
                    bf:c5:70:3a:68:65:ec:89:72:b3:25:56:48:c2:44:
                    57:6b:74:43:98:31:62:a6:ef:7d:0d:55:73:bf:72:
                    12:01:80:01:80:5f:56:e0:df:cf:76:c4:d9:2c:40:
                    21:56:7e:e2:9b:41:a0:73:a2:d0:8a:25:81:e6:97:
                    90:30:fa:6d:91:0a:45:40:16:e0:ec:d7:8f:3b:6b:
                    1c:7c:47:13:6a:a9:e9:f5:21:12:f6:64:09:ae:dd:
                    7c:79:0f:29:a2:1e:1e:3f:66:f0:9e:9c:d3:d1:f8:
                    4c:ed:24:a4:c6:cf:9b:28:4a:c0:20:62:74:c6:15:
                    07:55:1f:38:96:be:ff:eb:0b:c3:8e:b3:db:51:93:
                    0e:db:53:e8:08:6e:5b:71:47:5e:09:84:0e:a0:f7:
                    58:e5:72:aa:d0:58:f7:a7:95:32:96:6a:96:33:f8:
                    01:10:af:89:44:3c:45:1f:c1:67:1a:c8:4d:28:9e:
                    de:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4A:DD:0C:94:EA:A0:14:9E:D2:89:DB:59:0E:C1:16:0E:10:82:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4664b117-9b75-3e17-a1a3-0f5cd4735209.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:4f:f9:2b:b5:e4:d8:f0:1e:a8:f9:de:13:e9:56:0e:6f:4f:
         8b:ed:0c:51:4b:05:d8:0d:92:c6:58:82:cc:3f:0f:82:75:6e:
         e0:63:64:0d:3b:7f:64:a7:18:b7:4d:f1:f9:5e:70:b4:29:0c:
         6c:8b:97:0e:0d:3b:41:7f:d0:eb:31:3f:b8:99:23:f8:fa:1a:
         99:cf:9d:37:22:44:d2:d3:9b:c5:28:69:48:c8:0c:56:4d:a8:
         68:2f:1d:8e:ca:1c:13:f2:8e:34:07:54:b0:4f:6a:3b:11:99:
         cd:67:17:90:aa:06:ba:17:d9:2d:b9:cc:05:56:08:12:7c:7e:
         e9:b3:c9:98:a5:f5:34:fe:1c:b2:77:75:60:65:04:b5:0b:e7:
         4c:35:86:c5:b9:97:8f:6f:e7:ed:e5:cb:2d:34:ff:91:ad:03:
         22:35:79:4c:40:db:0b:b5:12:c2:20:4d:0d:da:82:e8:c6:0f:
         30:de:49:3e:87:96:a3:eb:88:73:4c:0f:ab:a7:ba:da:3b:f9:
         60:f2:d1:5c:fa:ac:48:c0:f6:57:a9:39:99:e1:b5:b6:dc:99:
         2a:5a:96:96:14:5e:cf:1e:85:fb:ba:25:26:e5:72:f5:82:c0:
         5a:f1:59:5c:1f:94:bf:92:61:7e:71:2d:da:b8:c0:78:d3:7e:
         31:3e:5c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:06:18 2025 by rpki-client