Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/eccbf9b7-14cd-353f-9761-74583822e0ed.roa
File:                     eccbf9b7-14cd-353f-9761-74583822e0ed.roa (raw, json)
Hash identifier:          qntAjhLmOQMIglhu42LikHL8DJaXdplWM7If3xBqib0=
Subject key identifier:   96:15:A9:D2:E2:07:96:9A:D2:6D:2A:D7:C2:69:2C:A1:8A:DE:90:EA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849F85E6947B4DB857085398C00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/eccbf9b7-14cd-353f-9761-74583822e0ed.roa
Signing time:             Sun 25 May 2025 12:04:31 +0000
ROA not before:           Sun 25 May 2025 12:04:31 +0000
ROA not after:            Sat 23 Aug 2025 12:04:31 +0000
asID:                     214238
IP address blocks:        172.121.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:5e:69:47:b4:db:85:70:85:39:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 25 12:04:31 2025 GMT
            Not After : Aug 23 12:04:31 2025 GMT
        Subject: CN=81c13d14-e958-4b6f-9aae-7c373917123e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c6:be:e1:85:ea:bb:d4:57:a9:43:4b:31:d7:
                    ae:ac:43:c1:f8:d5:c6:6a:e4:96:6c:5d:f3:34:4f:
                    c4:66:18:df:ad:66:81:d7:e8:46:9f:88:d0:d6:bb:
                    43:32:58:9e:50:1b:67:26:9e:70:c3:e0:da:23:90:
                    71:6a:c4:fb:a3:45:c4:b0:f3:ee:7b:62:d1:2c:22:
                    ca:8a:fd:3f:d7:6b:cf:7a:c6:65:be:ec:69:e2:37:
                    ef:a2:37:db:53:65:38:86:5c:e7:ef:af:23:1b:26:
                    66:95:07:d9:5b:78:36:eb:f4:7d:4b:80:f5:7b:4f:
                    c3:c3:c9:74:7a:ca:65:6e:57:49:93:8d:e2:7e:87:
                    40:27:3c:88:aa:f6:26:89:d9:f3:23:bf:da:2c:b9:
                    af:4f:27:74:1f:e1:3f:dc:c5:ce:56:48:dd:59:af:
                    30:87:63:3b:23:db:3b:8f:9e:d5:e0:56:f3:d3:c4:
                    db:6a:94:06:0d:e1:40:35:56:0c:dc:cf:e5:4e:1a:
                    f3:11:31:44:a2:50:ba:f9:88:fa:2b:1a:5e:04:46:
                    10:e7:df:b1:26:d4:2e:73:36:71:51:da:b7:ed:d5:
                    c3:24:87:07:e4:6c:bd:3c:cf:9e:10:5e:a3:da:df:
                    c4:b7:da:62:a9:ec:c7:be:ec:93:40:d0:4d:e1:26:
                    bf:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:15:A9:D2:E2:07:96:9A:D2:6D:2A:D7:C2:69:2C:A1:8A:DE:90:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/eccbf9b7-14cd-353f-9761-74583822e0ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:99:ba:26:3f:fb:14:ea:16:d3:9c:51:e4:42:89:e1:99:e3:
         1b:ec:9f:bf:e3:99:16:88:28:77:7d:ee:0d:7d:f2:05:c1:9d:
         3e:22:23:ac:07:31:7c:33:4b:66:5b:c8:99:c0:b8:63:e4:8a:
         49:1d:91:82:bc:81:87:8e:d8:00:4d:64:ab:a4:b4:e6:b8:23:
         68:af:3b:4b:bb:50:d5:e1:93:23:74:51:50:da:60:5b:9d:2d:
         2d:ff:13:a3:11:61:2c:20:28:16:9a:6e:a9:0b:db:a7:6e:4f:
         fb:aa:e6:34:82:8e:3e:94:00:1c:94:25:33:87:f5:be:cc:19:
         2d:3a:fd:73:83:21:b5:65:cf:24:ae:88:73:8a:81:34:63:8f:
         75:72:fc:a0:cf:43:87:0c:4a:8d:d8:d9:c5:bf:2a:3b:8d:e6:
         84:d7:07:e1:f3:e3:54:36:9f:b9:ee:ca:5f:80:79:1e:44:10:
         24:c2:2d:86:4f:33:05:be:88:40:37:be:50:d8:34:bd:00:c7:
         c8:44:f2:68:e8:58:23:4f:bc:7d:11:e8:d3:ad:46:71:32:85:
         66:8f:cf:5f:32:3a:e5:62:8b:b6:f5:5f:62:03:f4:27:42:95:
         d3:b5:21:fb:0b:31:6d:ab:46:3a:29:f0:d5:95:bf:8f:85:b3:
         16:0b:ed:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:48:15 2025 by rpki-client