Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9fc16ddf-cefc-36bf-9a3a-719cb5f209e6.roa
File:                     9fc16ddf-cefc-36bf-9a3a-719cb5f209e6.roa (raw, json)
Hash identifier:          Q5UKfbgB4lKusMvyV/OwQ1PEycur19QgUS1lVJHbeyM=
Subject key identifier:   67:58:58:8E:5B:9F:E0:43:B7:2B:60:1E:FA:93:D5:F5:34:15:3C:39
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584953578AA7D5541B533DF91400
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9fc16ddf-cefc-36bf-9a3a-719cb5f209e6.roa
Signing time:             Thu 27 Mar 2025 09:22:18 +0000
ROA not before:           Thu 27 Mar 2025 09:22:18 +0000
ROA not after:            Wed 25 Jun 2025 09:22:18 +0000
asID:                     48266
IP address blocks:        172.120.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:57:8a:a7:d5:54:1b:53:3d:f9:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 27 09:22:18 2025 GMT
            Not After : Jun 25 09:22:18 2025 GMT
        Subject: CN=9d904565-45cf-4667-9fb6-068d29b2a56b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:87:2f:93:c2:25:02:ce:93:0f:b3:45:d6:c7:
                    1d:49:85:ce:6a:c6:57:5c:c5:a3:fc:0f:20:ce:f7:
                    3f:bc:88:86:d8:f5:5a:fd:97:a2:c4:f4:52:08:b0:
                    0c:e6:cf:5b:46:82:57:72:84:c9:06:a0:c0:c3:72:
                    ab:74:05:c2:2a:08:0a:8c:0e:9d:a8:6a:d6:bb:a5:
                    0d:20:f7:54:e6:af:6e:3d:37:bf:f4:cb:3e:00:30:
                    59:8a:ce:e0:a9:15:43:77:ee:81:37:e7:b7:31:be:
                    3c:d8:ac:85:dc:49:de:4b:17:31:4c:ba:0e:bd:66:
                    b2:dd:eb:1c:06:f4:2b:c0:c4:57:b7:84:1a:6c:5a:
                    e7:65:02:98:df:f2:d4:fc:1e:b1:1b:95:45:74:4a:
                    58:58:12:2d:40:50:42:47:c6:f9:45:23:a7:11:48:
                    2c:68:f3:a5:74:fc:d0:9a:ef:f8:11:65:ca:18:f3:
                    b2:5f:bd:d6:5e:20:7f:09:43:4c:b3:ad:4d:f1:78:
                    31:39:bc:f9:af:5e:c6:f8:71:b2:3a:8e:0c:33:45:
                    9f:34:72:9b:79:07:27:43:87:48:94:82:5b:9d:b2:
                    0c:16:37:a9:47:bb:fb:05:30:41:de:04:70:bd:5a:
                    ad:bb:0b:be:8c:dd:14:3d:95:6c:4c:bc:79:09:9f:
                    f9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:58:58:8E:5B:9F:E0:43:B7:2B:60:1E:FA:93:D5:F5:34:15:3C:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9fc16ddf-cefc-36bf-9a3a-719cb5f209e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:b2:b5:ad:64:7f:73:c9:9d:f9:7e:69:af:fa:d2:ff:88:e0:
         ab:c9:8a:31:1c:25:a1:99:7d:79:39:a9:7c:2c:6f:41:de:ef:
         fc:06:9e:b5:2a:4e:30:77:02:ad:eb:42:63:78:18:62:ff:cb:
         52:b4:4b:f2:c1:ee:ff:b4:ae:76:8e:1d:93:a4:a0:60:60:3d:
         82:09:3c:e9:53:c6:2e:6e:e3:76:04:e9:bc:58:05:31:9b:58:
         39:60:3b:0a:4f:92:5a:d9:ca:36:be:9b:3e:cb:c0:0a:fc:06:
         69:8a:9c:e9:c2:29:ae:a3:25:bd:45:3d:83:54:b3:1a:9c:0b:
         8b:4a:23:52:75:70:34:a2:1a:b6:0b:54:c6:fa:31:36:4e:36:
         86:25:aa:0e:0a:96:e0:5b:00:1f:f0:05:63:5e:88:a0:38:4b:
         3c:00:af:da:11:77:f8:a3:34:13:25:37:94:57:f3:7b:9b:8c:
         40:10:d6:f1:43:f4:78:d3:4f:1d:df:5c:cf:e1:c2:93:8f:3b:
         7d:11:ea:4f:3f:c1:7f:62:8f:e2:a2:af:1e:a9:05:f2:29:a0:
         03:fe:52:49:6d:62:90:d4:9b:83:de:26:80:ed:33:df:50:54:
         14:ea:85:04:db:82:22:49:2d:cd:65:9a:c2:a9:3b:24:03:f5:
         58:5a:ec:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:36:51 2025 by rpki-client