Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/10cfd57e-b4b9-39cd-824a-f42b8c6f63f2.roa
File:                     10cfd57e-b4b9-39cd-824a-f42b8c6f63f2.roa (raw, json)
Hash identifier:          lpjzwr69uM4k8RGHFfrdvSoySoa4bRcOiVBR0GHAhVg=
Subject key identifier:   45:AA:D7:7B:F5:73:67:94:8B:6E:CB:E0:C1:4D:09:85:BF:3D:55:F7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845AADF8C9280BC346AAB17B800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/10cfd57e-b4b9-39cd-824a-f42b8c6f63f2.roa
Signing time:             Thu 25 Apr 2024 22:43:55 +0000
ROA not before:           Thu 25 Apr 2024 22:43:55 +0000
ROA not after:            Wed 24 Jul 2024 22:43:55 +0000
asID:                     204957
IP address blocks:        172.121.42.0/24 maxlen: 24
                          172.121.48.0/24 maxlen: 24
                          172.121.52.0/24 maxlen: 24
                          172.121.58.0/24 maxlen: 24
                          172.121.59.0/24 maxlen: 24
                          172.121.67.0/24 maxlen: 24
                          172.121.77.0/24 maxlen: 24
                          172.121.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:aa:df:8c:92:80:bc:34:6a:ab:17:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 25 22:43:55 2024 GMT
            Not After : Jul 24 22:43:55 2024 GMT
        Subject: CN=494cc37e-0aef-4b8d-96ae-50f7193ce1b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:11:d4:c0:cd:8f:05:e4:dc:62:e8:ce:16:0c:
                    b3:d7:db:9f:50:00:bd:2a:41:46:d3:6c:08:17:87:
                    09:fa:11:97:7e:e3:33:75:d7:8c:2a:dc:df:ee:af:
                    5e:6c:11:4a:3f:a4:0f:41:96:25:82:15:32:d4:81:
                    d3:63:12:d3:15:b6:f1:33:68:22:e0:ad:fa:1b:a1:
                    ee:99:6f:95:ed:d0:64:51:e6:ab:41:6f:20:fe:be:
                    5f:13:76:9c:f7:fa:87:cb:7f:47:77:ec:70:b3:76:
                    87:60:65:1a:eb:b1:4e:f3:32:6e:31:fd:2f:09:65:
                    3e:f2:59:d2:55:0a:be:fb:f8:57:38:4c:ce:d6:56:
                    31:1d:e4:fa:76:2d:ed:da:15:13:0a:b1:c1:19:09:
                    d6:c5:54:e3:5f:10:81:14:a2:7c:c6:30:ef:ad:62:
                    4d:25:aa:87:31:10:1c:f0:73:69:77:0f:9f:62:c0:
                    32:ad:a0:52:1c:fb:4a:90:db:ac:5d:01:ab:0e:d8:
                    7b:7d:0e:3d:a8:65:3d:2d:7b:cd:d8:1b:ab:f2:73:
                    7a:cc:7b:72:2f:c9:92:98:5f:b1:f1:d7:d6:bb:f2:
                    03:4a:29:17:2d:39:18:d6:7a:83:68:53:10:b0:8f:
                    59:ea:5e:73:80:98:5a:37:f9:26:52:7b:59:b7:bf:
                    da:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AA:D7:7B:F5:73:67:94:8B:6E:CB:E0:C1:4D:09:85:BF:3D:55:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/10cfd57e-b4b9-39cd-824a-f42b8c6f63f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.42.0/24
                  172.121.48.0/24
                  172.121.52.0/24
                  172.121.58.0/23
                  172.121.67.0/24
                  172.121.77.0/24
                  172.121.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:24:49:31:5c:2b:80:4b:4e:23:e4:32:13:ae:e2:44:a8:2f:
         f8:76:f4:c0:5b:e0:8b:6a:fd:e1:be:f2:87:bf:60:b3:7b:22:
         5a:67:16:69:a0:d1:f7:69:de:fa:74:6d:84:e5:b8:39:75:d1:
         f8:3a:16:fc:a4:9d:4b:34:ef:5f:d6:a3:61:ea:03:69:1a:d8:
         01:75:9d:0f:72:e4:97:fe:88:a4:cb:b7:9d:ec:18:44:36:20:
         6d:3a:61:28:59:bf:97:a3:08:90:04:ff:53:18:dc:c6:13:c2:
         20:31:fa:bc:5c:fe:99:2b:6f:a4:a0:09:98:5e:45:a5:7a:75:
         1a:b6:90:76:d4:90:61:1d:2a:26:61:0c:cb:98:cd:aa:99:ff:
         e5:db:e2:55:60:fb:20:de:68:db:40:65:24:51:05:5c:07:50:
         10:74:af:30:0f:98:d3:60:1d:51:6f:42:f4:75:ed:35:86:16:
         96:93:9c:f7:78:70:0d:b7:23:cb:69:67:92:10:5e:87:a2:a4:
         6c:e7:74:bb:b3:2f:39:9d:34:1e:7d:32:53:0a:3b:c5:f7:c5:
         06:6f:f8:54:77:3a:45:fd:43:75:b9:9e:3f:8d:6a:7f:27:16:
         dc:59:1a:01:36:bc:eb:aa:2b:91:8f:08:5d:f1:38:c1:d3:5f:
         12:53:50:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:00:07 2024 by rpki-client on console-fra.rpki-client.org