Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0dfc332a-36bb-3c68-8305-281152e24e09.roa
File:                     0dfc332a-36bb-3c68-8305-281152e24e09.roa (raw, json)
Hash identifier:          G4pMeBierXK5diMu2eJuNbpZxYRbNzx8VhLyLMzF+KQ=
Subject key identifier:   60:9C:C7:32:55:FC:99:5C:B4:2C:B3:F2:A5:67:CB:98:8F:03:8F:BF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849F85E9AB22F527AF45AA1A600
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0dfc332a-36bb-3c68-8305-281152e24e09.roa
Signing time:             Sun 25 May 2025 12:04:55 +0000
ROA not before:           Sun 25 May 2025 12:04:55 +0000
ROA not after:            Sat 23 Aug 2025 12:04:55 +0000
asID:                     214238
IP address blocks:        172.121.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:5e:9a:b2:2f:52:7a:f4:5a:a1:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 25 12:04:55 2025 GMT
            Not After : Aug 23 12:04:55 2025 GMT
        Subject: CN=94ea4ed6-48f0-4bab-8223-0c28e2a951de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:83:5f:28:77:38:93:2f:b3:9f:71:92:8d:ff:
                    2d:ec:3a:4a:f4:66:bd:af:76:c6:05:3d:f7:6f:02:
                    a0:8a:d7:92:e5:00:52:58:a5:cf:48:7d:43:eb:03:
                    65:98:89:07:59:04:5f:49:99:a7:77:3e:2d:d6:0e:
                    ff:43:c5:81:2f:db:90:70:13:e6:1c:c4:7d:1a:9e:
                    ab:74:bc:95:a8:12:1d:43:a2:52:c7:ba:9c:51:c4:
                    6a:6f:e6:e7:e4:7a:5c:d2:7c:39:86:cc:c3:05:08:
                    d0:c1:2a:fb:5d:fa:ab:57:ad:10:ff:30:f2:b3:97:
                    ca:2d:e4:02:e4:5a:46:87:5f:50:fd:bb:5f:de:7d:
                    ac:2c:46:30:ac:ce:6b:85:e6:51:b8:ba:99:7e:4a:
                    8f:2f:31:2d:db:82:68:9d:e9:f1:79:0c:e0:75:54:
                    ec:85:80:22:ab:5c:c2:bf:8e:4d:cb:7d:5a:63:3a:
                    54:c7:ae:ab:f1:30:39:bc:6c:77:ea:27:e3:90:95:
                    96:80:c1:5c:3a:34:ec:4d:87:de:7b:32:5e:9f:2c:
                    a5:c5:d4:de:3d:b3:2c:d9:a3:d0:38:69:5f:c1:86:
                    95:86:f6:32:80:5b:64:42:d3:ab:64:f8:a3:cb:af:
                    94:23:42:ca:e1:a2:c0:5b:8b:5d:d2:0b:d1:cc:d0:
                    e5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9C:C7:32:55:FC:99:5C:B4:2C:B3:F2:A5:67:CB:98:8F:03:8F:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0dfc332a-36bb-3c68-8305-281152e24e09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:c0:18:8d:9d:52:b7:a0:27:af:20:55:21:58:d7:03:c8:a7:
         40:86:25:3c:dd:d0:5f:ec:4b:62:13:61:c5:a2:26:3f:ac:f3:
         37:0b:6a:69:00:e8:60:63:7e:a1:4d:2c:8e:ff:cd:23:84:25:
         ab:f4:c4:8e:a6:8f:ad:6c:91:90:4d:f9:4a:77:ca:ae:2b:64:
         dc:a4:81:6d:b9:23:82:97:4c:a6:bc:58:87:66:2c:01:4a:01:
         77:34:3f:eb:6b:c4:98:31:92:ef:c4:ed:02:ae:02:b4:c8:55:
         7c:e9:29:1e:1a:2f:a9:d7:1f:9a:56:e8:63:77:15:d6:9a:f4:
         8d:a1:cd:b2:a9:c0:a9:9b:52:44:4d:2a:a1:ae:0e:3e:c5:ca:
         75:c9:a2:5b:55:41:82:4c:c5:5e:e5:81:c1:40:4f:57:51:5c:
         3d:d0:36:f2:6c:23:e6:84:09:ea:6b:0a:ad:af:dd:93:1f:18:
         f9:bc:46:4c:9d:6e:8b:72:66:a2:6e:ad:ca:f3:d9:22:7f:36:
         74:77:c4:de:17:a2:55:aa:67:81:36:bf:a6:0f:72:87:3e:08:
         1f:40:9b:f8:5a:fe:b7:12:9c:4e:85:58:b4:eb:0e:f4:4e:ed:
         e4:11:5e:9e:2e:7c:a9:a2:55:c9:fc:3c:41:5c:c1:3b:ed:02:
         2e:cb:b8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:50:28 2025 by rpki-client