Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6f4e82bc-034d-3fef-9aab-90b824364de7.roa
File:                     6f4e82bc-034d-3fef-9aab-90b824364de7.roa (raw, json)
Hash identifier:          f02nvT+agpxIt0E0UE+oiIAiUlzxh8nhttJeMBMVGzM=
Subject key identifier:   8F:35:7C:6C:A5:D0:1D:49:E4:27:26:10:27:89:02:BF:ED:45:BD:92
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845AAE1D85A8F37CCD09FD8EBC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6f4e82bc-034d-3fef-9aab-90b824364de7.roa
Signing time:             Thu 25 Apr 2024 22:48:33 +0000
ROA not before:           Thu 25 Apr 2024 22:48:33 +0000
ROA not after:            Wed 24 Jul 2024 22:48:33 +0000
asID:                     212238
IP address blocks:        172.121.15.0/24 maxlen: 24
                          172.121.22.0/24 maxlen: 24
                          172.121.26.0/24 maxlen: 24
                          172.121.29.0/24 maxlen: 24
                          172.121.31.0/24 maxlen: 24
                          172.121.96.0/24 maxlen: 24
                          172.121.128.0/24 maxlen: 24
                          172.121.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:aa:e1:d8:5a:8f:37:cc:d0:9f:d8:eb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 25 22:48:33 2024 GMT
            Not After : Jul 24 22:48:33 2024 GMT
        Subject: CN=a456aaca-dc03-4513-b1da-33c6bac961dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e7:bf:81:11:7d:b5:8f:cf:62:ac:50:c2:8a:
                    17:3d:3e:11:3a:92:78:f9:34:3d:23:b9:a7:44:ae:
                    0b:e1:a2:dc:22:de:a2:77:9b:f7:3b:5d:ef:90:d3:
                    f5:12:94:9b:f7:6c:8a:b1:4d:82:ba:7e:1a:f0:83:
                    97:f5:24:df:97:e8:91:d8:e5:a0:c1:eb:20:f7:cf:
                    1b:f3:9d:40:83:81:8b:2e:a8:bb:1d:64:9d:8b:99:
                    28:d4:27:4b:1c:d9:06:d6:19:11:38:c0:90:38:c8:
                    e4:2b:b5:cb:79:a9:23:5d:8a:04:c2:42:a5:3a:45:
                    85:5a:14:ba:b5:94:61:7c:3f:09:3b:d1:78:07:86:
                    99:cc:12:49:ae:33:39:51:7f:a6:ff:0c:39:52:2b:
                    bf:cd:c6:aa:6d:d2:63:46:0f:1e:3c:b6:bd:0e:05:
                    06:d7:02:8f:17:b4:dd:97:33:71:77:ab:11:da:c0:
                    67:4f:b0:17:71:7b:cb:4e:81:c6:52:4f:71:3f:e9:
                    1e:28:7e:84:69:e1:02:e6:1c:e7:7a:79:26:86:e2:
                    d8:1e:2e:c1:d0:83:b7:5a:b0:be:5a:7d:3c:40:71:
                    59:54:12:04:23:37:34:4d:a1:3d:e3:28:a3:25:3f:
                    47:2c:91:1d:f3:6d:6e:09:32:bd:d6:a0:f5:38:2e:
                    f4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:35:7C:6C:A5:D0:1D:49:E4:27:26:10:27:89:02:BF:ED:45:BD:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6f4e82bc-034d-3fef-9aab-90b824364de7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.15.0/24
                  172.121.22.0/24
                  172.121.26.0/24
                  172.121.29.0/24
                  172.121.31.0/24
                  172.121.96.0/24
                  172.121.128.0/24
                  172.121.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:4d:81:a0:5d:0e:cc:39:18:8f:21:a0:3e:f1:bd:d8:87:09:
         c1:08:6a:4a:32:d3:d5:ce:73:79:43:62:f1:3e:27:9f:6b:25:
         69:93:da:bd:10:0a:23:af:5e:94:5f:26:df:1e:92:6c:f8:75:
         a4:58:b4:6a:e8:b0:cd:eb:47:dd:ee:48:3b:c8:c9:6a:55:89:
         38:f8:40:e7:8a:6d:c5:ee:9f:7f:ad:83:7d:82:4d:e8:21:62:
         92:9f:7c:f0:c2:a3:b5:3f:d9:cb:0d:7e:ab:0a:8e:58:49:8a:
         80:6c:81:79:2b:c6:a2:7c:10:01:96:7d:36:54:74:95:1b:48:
         26:e3:d8:1e:67:2f:d6:1e:ce:a3:34:e7:0e:d7:e8:74:1a:4b:
         79:99:ed:8b:db:42:b2:6d:79:63:10:d9:14:13:e3:45:06:f6:
         19:0c:0a:c3:44:3b:2c:ef:5e:60:2e:35:47:92:36:02:49:ad:
         77:10:8b:79:1a:d1:6d:a5:22:93:8f:36:c1:22:d3:29:3c:0f:
         aa:3b:45:6d:26:30:bf:96:37:27:a3:53:d0:15:66:87:f1:a2:
         40:98:aa:87:63:a0:1d:90:13:c9:2f:1f:8e:a0:0e:b3:73:6c:
         05:4d:7e:ac:73:bb:d0:e5:c5:a4:50:0d:4f:c2:28:ff:03:6b:
         94:11:54:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 07:23:44 2024 by rpki-client on console-ams.rpki-client.org