Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/68c03fb5-f2da-32db-88e6-3abdebe6dc21.roa
File:                     68c03fb5-f2da-32db-88e6-3abdebe6dc21.roa (raw, json)
Hash identifier:          DBoPSIJEL9U81qeltGuLmslfu6CZp3VfHY979IHfSRw=
Subject key identifier:   D9:FB:4A:6B:4E:20:85:9A:02:72:B0:E3:11:A2:F6:15:DA:10:7F:BD
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A84A0817C7F1E5EEB5BB41280
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/68c03fb5-f2da-32db-88e6-3abdebe6dc21.roa
Signing time:             Mon 14 Jul 2025 17:50:52 +0000
ROA not before:           Mon 14 Jul 2025 17:50:52 +0000
ROA not after:            Sun 12 Oct 2025 17:50:52 +0000
asID:                     44559
IP address blocks:        172.121.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:a0:81:7c:7f:1e:5e:eb:5b:b4:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 14 17:50:52 2025 GMT
            Not After : Oct 12 17:50:52 2025 GMT
        Subject: CN=ba4911b1-e115-4acb-a1a5-407ebd103643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:57:49:39:5d:ed:e5:8a:b1:ad:6d:f9:59:fa:
                    86:eb:34:01:61:06:2f:b9:6c:e9:6f:e2:1d:b5:b8:
                    3b:1d:26:77:18:af:1b:c8:c5:75:91:cb:6f:93:42:
                    c0:9b:c2:e7:1c:dc:aa:1f:88:86:e0:3c:76:64:c9:
                    81:82:81:9f:05:5c:f8:a2:a9:2f:15:0a:2d:c9:9b:
                    f6:62:05:62:11:28:5c:64:ae:92:c5:9d:d7:7a:ec:
                    cb:c7:bd:dd:e9:dd:fc:f2:63:fe:a3:db:29:e8:80:
                    8c:8d:99:0e:53:c5:87:71:e5:fe:00:1c:27:23:8d:
                    40:2c:d6:bc:cb:58:43:c2:75:e1:c2:5b:67:bb:99:
                    7b:a9:b7:24:9f:15:d8:d8:0f:e7:67:a5:d0:fa:1e:
                    49:15:30:2d:a3:74:f1:a0:7f:8e:26:e8:f1:09:17:
                    1d:9d:e3:3a:08:3e:98:da:11:1d:37:80:49:2d:0f:
                    0c:88:3e:93:c9:cd:bb:b4:a1:52:e6:41:f8:bd:89:
                    b8:54:bb:53:02:de:39:4e:96:7d:63:a4:c8:f4:71:
                    40:11:c5:d7:da:47:dc:14:a8:b8:13:96:12:2c:7e:
                    cd:96:76:81:43:30:f3:84:db:dd:a8:e0:12:b7:29:
                    ee:c9:46:69:bf:03:24:db:6c:f2:4d:bc:8f:2a:36:
                    79:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FB:4A:6B:4E:20:85:9A:02:72:B0:E3:11:A2:F6:15:DA:10:7F:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/68c03fb5-f2da-32db-88e6-3abdebe6dc21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:07:e7:f7:4d:45:aa:09:da:31:d8:ee:a1:91:09:27:89:9d:
         52:37:f2:a6:0e:fa:64:b1:65:36:4d:ea:9b:06:41:c3:9f:f3:
         b0:0d:92:c4:0f:52:48:92:a5:c5:b3:49:67:af:a1:ef:c6:57:
         97:2b:8f:76:87:0f:89:90:6e:1d:24:88:fe:35:62:59:a7:e6:
         72:89:7a:d4:4a:d2:aa:19:68:b1:ff:e9:35:55:3e:d1:d2:13:
         e8:e7:a4:59:0c:e5:4c:46:06:f1:33:f3:4e:a7:59:1e:d2:d7:
         ba:c1:10:aa:b4:65:3e:17:bd:7e:a2:86:45:55:ea:4f:56:45:
         1f:b5:87:1e:c5:9b:56:12:e7:04:80:f5:a2:c1:93:87:8c:5f:
         14:bc:0e:85:4f:fa:52:55:c4:6e:27:e9:1d:ea:18:fd:1d:cf:
         6c:48:2f:01:de:03:1d:df:5f:88:cf:5a:58:17:53:4e:8e:07:
         ce:78:a4:45:83:13:7e:ae:7f:bd:20:fb:e1:7b:d1:af:6d:94:
         99:88:f0:b8:4d:86:0d:37:6a:e2:85:7b:d8:89:e3:6a:1d:44:
         8b:8d:0c:c4:2b:00:88:87:b5:f3:e8:8e:ce:fa:7a:32:04:ec:
         77:4c:18:d4:06:59:38:f9:65:67:00:6b:3e:af:12:d9:a3:fd:
         90:6a:59:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:09:24 2025 by rpki-client