Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/51e8d47a-1382-3267-b0c7-6fb09f42cdcc.roa
File:                     51e8d47a-1382-3267-b0c7-6fb09f42cdcc.roa (raw, json)
Hash identifier:          BDbjHCBB881CvvmREKGeELRsNxCOCl+/Ygw/5N41AtQ=
Subject key identifier:   E9:76:32:9F:76:B4:DD:DB:32:7C:26:CB:D2:D6:34:26:C4:2A:AA:E2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845AADF8C342D5738B00BFC8300
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/51e8d47a-1382-3267-b0c7-6fb09f42cdcc.roa
Signing time:             Thu 25 Apr 2024 22:43:55 +0000
ROA not before:           Thu 25 Apr 2024 22:43:55 +0000
ROA not after:            Wed 24 Jul 2024 22:43:55 +0000
asID:                     204957
IP address blocks:        172.120.63.0/24 maxlen: 24
                          172.120.71.0/24 maxlen: 24
                          172.120.81.0/24 maxlen: 24
                          172.120.82.0/24 maxlen: 24
                          172.120.83.0/24 maxlen: 24
                          172.120.117.0/24 maxlen: 24
                          172.120.118.0/24 maxlen: 24
                          172.120.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:aa:df:8c:34:2d:57:38:b0:0b:fc:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 25 22:43:55 2024 GMT
            Not After : Jul 24 22:43:55 2024 GMT
        Subject: CN=3194d302-d850-4a77-8891-6d69d5bc3352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:92:62:8a:86:c9:d6:30:c3:a9:16:71:5f:20:
                    99:30:ed:ee:52:7a:32:7e:aa:a1:b6:d1:4b:46:fe:
                    6e:45:8c:a7:33:17:c4:3e:8e:cd:5a:a1:84:a3:28:
                    6f:c8:d2:9d:07:15:4c:f5:46:7f:e4:dc:6e:07:1b:
                    59:61:5e:fe:e6:70:67:2e:3d:43:fe:bb:63:bb:ff:
                    2c:ee:2e:70:0f:31:57:1d:75:d4:6f:6f:5f:3a:9a:
                    44:33:3d:21:cd:9a:f9:01:37:c3:6f:50:8a:47:65:
                    28:2f:c2:55:94:f2:77:df:b0:53:9f:69:4b:06:e9:
                    e7:07:b4:8d:03:ad:8f:20:be:f2:61:b2:38:82:97:
                    83:c2:22:64:b6:f4:0a:77:ac:c5:ff:ab:73:33:33:
                    e6:a5:4d:25:7a:25:f1:ec:66:75:9c:cd:74:0c:87:
                    2c:e9:ee:8c:b8:45:40:32:4d:d6:fb:77:a8:b3:90:
                    97:56:7a:f9:3c:c0:cb:ae:56:7b:3a:2c:b3:5c:d0:
                    60:02:52:c0:3a:29:69:c4:1e:7e:c9:38:d0:bc:9d:
                    b7:5a:58:20:b8:de:ec:40:a2:bd:e9:d1:56:b0:87:
                    58:02:42:9f:43:1c:53:90:e4:60:fc:78:cf:02:40:
                    90:4c:b8:b8:3d:db:00:7b:8b:89:35:e0:a7:2c:5d:
                    8d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:76:32:9F:76:B4:DD:DB:32:7C:26:CB:D2:D6:34:26:C4:2A:AA:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/51e8d47a-1382-3267-b0c7-6fb09f42cdcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.63.0/24
                  172.120.71.0/24
                  172.120.81.0-172.120.83.255
                  172.120.117.0-172.120.118.255
                  172.120.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:c6:dc:69:3c:21:b2:8b:40:78:7d:d2:05:d6:6a:a3:7a:fd:
         3a:a6:9d:9f:33:dc:3e:42:76:c7:3a:c6:a8:72:0b:f5:30:b2:
         a0:33:96:1e:4b:c8:ac:c2:92:58:0f:32:66:20:05:db:df:ea:
         31:6d:80:88:4a:8a:b9:db:09:7f:a2:2e:a8:ec:89:e2:b1:d4:
         fc:35:01:36:e7:0e:58:e3:91:a0:fc:db:83:fb:aa:c3:3a:f7:
         27:d8:4c:4c:bb:23:1b:de:96:6a:4d:ae:0e:ae:bc:45:56:64:
         02:d1:e9:8e:45:12:5b:be:7a:c5:53:dd:da:25:db:a5:68:c5:
         12:27:f4:de:0a:22:a2:78:3f:66:a6:aa:ac:0a:0a:eb:49:b2:
         f8:cf:b8:99:a7:ef:a9:44:57:b8:f1:dc:e5:a6:cb:56:f9:a7:
         bd:0d:86:63:c9:a0:8a:81:47:f9:7e:c1:8a:f9:9b:4f:d4:34:
         7a:cb:3e:de:c3:07:2c:9c:bd:f2:23:b6:10:1c:60:69:cf:6b:
         d6:87:6d:61:c1:1f:31:f0:c8:29:92:70:c5:48:b8:d6:9d:f9:
         bf:4e:98:62:41:bc:cb:97:62:ac:c0:40:bc:11:a4:5e:0d:c4:
         8a:33:07:02:dc:da:cc:62:0e:a9:51:55:4f:bb:1a:2e:fb:d9:
         10:fa:d6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 15:56:27 2024 by rpki-client on console-ams.rpki-client.org