Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c357fa46-0a6d-38a1-a063-03f45406614f.roa
File:                     c357fa46-0a6d-38a1-a063-03f45406614f.roa (raw, json)
Hash identifier:          BmuXZC9pMUNgWTO4zqvf87bJHZZt+iW5f3liYxk+Kc8=
Subject key identifier:   EB:86:2C:70:1E:26:5E:04:D4:B1:49:5F:E8:40:E3:E6:F4:0F:74:6B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845AADF8C446687ECBD6D891DA0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c357fa46-0a6d-38a1-a063-03f45406614f.roa
Signing time:             Thu 25 Apr 2024 22:43:55 +0000
ROA not before:           Thu 25 Apr 2024 22:43:55 +0000
ROA not after:            Wed 24 Jul 2024 22:43:55 +0000
asID:                     204957
IP address blocks:        172.120.130.0/24 maxlen: 24
                          172.120.137.0/24 maxlen: 24
                          172.120.138.0/24 maxlen: 24
                          172.120.141.0/24 maxlen: 24
                          172.120.148.0/24 maxlen: 24
                          172.120.155.0/24 maxlen: 24
                          172.120.157.0/24 maxlen: 24
                          172.120.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:aa:df:8c:44:66:87:ec:bd:6d:89:1d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 25 22:43:55 2024 GMT
            Not After : Jul 24 22:43:55 2024 GMT
        Subject: CN=194e0143-fe68-49db-ae45-112fd7062f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3d:a2:4c:da:83:c7:fb:fe:08:42:a8:b0:dd:
                    cd:dc:91:26:34:0b:a9:d6:31:43:08:8f:93:75:2f:
                    f2:9c:80:6b:cf:66:45:cb:56:48:37:99:ad:52:0a:
                    3a:7a:4a:8c:83:58:d8:a4:7b:6b:df:c0:bb:a8:68:
                    42:23:0a:99:e4:5c:c0:e8:28:1d:4d:a1:c6:ad:89:
                    0a:1d:3e:2c:cf:2d:24:db:2d:c1:02:e7:db:ee:5d:
                    93:86:2f:29:05:8c:28:6c:c5:2d:cb:ba:65:e8:61:
                    97:ef:cc:4f:97:a6:76:15:71:18:28:f6:71:7c:4c:
                    71:c0:66:46:5a:69:06:2b:5d:c1:2b:df:58:3d:96:
                    fd:aa:5c:34:bb:00:ab:cd:91:26:6d:a7:94:d0:8b:
                    da:9f:bd:73:10:a9:9b:f7:ac:9e:fb:9a:c7:c2:17:
                    b8:e4:ec:80:20:95:56:12:10:e8:ab:ff:cd:e8:ea:
                    60:f2:b5:08:53:3b:fa:33:67:82:24:a5:48:42:a5:
                    2d:13:33:65:8e:78:91:1d:a1:2e:c6:a9:f8:12:9a:
                    de:40:46:6c:30:48:e4:ae:b0:5d:98:9f:a9:2a:6e:
                    1f:a1:df:78:50:5e:ae:ee:73:21:77:c9:e3:cb:ea:
                    38:f7:80:70:60:90:c8:f6:47:e7:0e:35:d9:22:7f:
                    29:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:86:2C:70:1E:26:5E:04:D4:B1:49:5F:E8:40:E3:E6:F4:0F:74:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c357fa46-0a6d-38a1-a063-03f45406614f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.130.0/24
                  172.120.137.0-172.120.138.255
                  172.120.141.0/24
                  172.120.148.0/24
                  172.120.155.0/24
                  172.120.157.0-172.120.158.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:2f:22:58:ad:ce:d7:e2:a5:f9:30:be:d7:43:03:38:85:1e:
         49:2d:85:b5:b8:ea:33:eb:2f:61:0f:e0:4f:90:67:92:14:31:
         f1:c5:2c:af:e5:20:59:a6:6f:ac:ce:ee:6e:b7:90:51:cc:aa:
         97:86:1e:52:07:5c:56:31:0d:b7:b7:f1:94:46:63:70:c3:fb:
         5a:a5:f8:b5:66:28:25:c9:20:dc:2c:46:6e:11:14:99:66:34:
         58:cc:de:23:08:e8:ce:9a:f9:99:e0:e0:d9:c2:a9:1b:3e:14:
         70:9a:68:f3:f4:17:33:f0:47:fb:d8:e3:21:b7:e3:9c:c2:81:
         a1:c3:5d:5e:f4:d5:14:5a:64:74:9a:a3:b6:1d:1f:70:b9:33:
         10:f0:13:83:ec:0f:a4:75:ba:d4:e2:7e:95:1a:62:6e:0a:13:
         57:34:f3:20:e8:95:bf:a8:05:e7:80:35:74:03:e8:26:fc:71:
         36:06:88:a3:62:5c:3b:84:7a:f1:c2:c5:62:43:07:21:43:34:
         13:b6:7e:c9:01:c3:f4:96:cc:42:85:d1:09:22:9d:8d:df:9a:
         1b:02:80:fd:c9:a8:5a:3d:1d:18:03:93:0d:90:66:14:30:e0:
         bf:cb:f0:b5:a3:9d:12:50:3c:b2:b9:91:a3:4e:dd:ab:13:47:
         d9:4d:5b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 06:27:16 2024 by rpki-client on console-fra.rpki-client.org