Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b1934b2-21d5-370c-84dd-93b234b13ca7.roa
File:                     3b1934b2-21d5-370c-84dd-93b234b13ca7.roa (raw, json)
Hash identifier:          LiyCQirtwxJXCiL3//k5EQjxGC98LxcxtGfWRIEqujw=
Subject key identifier:   89:F2:C3:9C:3A:39:AC:FD:ED:B3:16:2F:21:64:81:EC:93:F4:3E:CD
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848EC96ABA60299505B46B46B80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b1934b2-21d5-370c-84dd-93b234b13ca7.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     7029
IP address blocks:        172.121.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:ab:a6:02:99:50:5b:46:b4:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=7bf5cbaf-74b1-43c9-a4bb-9c4d0f7f7c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4f:01:bf:ad:2d:0e:e5:47:19:53:d1:88:67:
                    e9:fb:53:57:83:4f:c7:12:11:7d:79:89:bc:b3:66:
                    21:14:60:d1:1c:d2:ad:e0:b1:78:2a:36:d2:b7:d8:
                    70:cd:43:47:30:f6:86:24:ec:f4:c4:f7:6a:fa:e9:
                    1e:1f:c4:ec:d4:a1:55:de:42:5a:e8:1f:0e:cb:68:
                    fb:f2:a4:fb:31:35:b0:49:fd:5e:9e:e9:77:c9:ee:
                    6f:20:28:ec:e4:56:f8:5f:ba:23:ed:91:40:9f:fd:
                    0b:e1:26:57:e2:5c:e6:8e:ab:5b:60:ce:11:2a:fc:
                    0f:57:ab:31:66:4e:72:db:9f:18:e7:33:a8:66:7d:
                    b6:ed:7b:28:74:1d:05:a8:fd:f7:cd:b1:6d:bc:80:
                    d3:71:a7:0e:ff:b5:71:b0:28:0d:e5:3e:4e:48:d2:
                    fb:46:2c:48:2e:5a:31:b4:2a:82:95:2f:13:6c:e3:
                    5d:0f:04:99:fb:05:3d:10:cf:12:7c:a6:6d:89:cf:
                    83:ed:03:3a:13:84:91:fe:07:0f:23:f5:a2:1f:19:
                    89:91:cb:21:8b:ad:1b:ad:56:e5:8c:1d:5f:c8:e8:
                    ae:34:7e:26:c3:ca:bf:7a:64:e0:19:82:8d:3e:67:
                    f6:6a:c3:d2:fb:5a:bd:f3:de:a1:8d:7b:5d:78:3f:
                    21:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F2:C3:9C:3A:39:AC:FD:ED:B3:16:2F:21:64:81:EC:93:F4:3E:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b1934b2-21d5-370c-84dd-93b234b13ca7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:d4:78:db:a1:52:3d:86:a2:00:72:59:b3:d2:b1:55:4a:42:
         76:80:15:91:77:04:67:af:dd:89:9e:85:2d:59:70:c4:e1:0f:
         4c:8f:4c:e9:ec:f6:93:47:39:8f:38:02:03:12:8e:a9:fa:4b:
         93:91:3a:a7:57:98:72:ec:d5:52:e4:71:d1:1e:0c:49:11:ad:
         d0:cf:7b:c2:fd:dd:20:57:15:c3:6f:de:6f:30:c2:4f:b9:8d:
         51:0d:d4:36:c5:bb:cb:9a:d5:eb:b6:0e:cf:a6:5e:5d:6d:cf:
         f1:8a:a8:03:6e:b0:e8:56:8a:42:4d:5a:5f:7b:da:c3:b8:91:
         76:71:e7:03:5e:20:c7:c9:4f:d4:d6:7e:a4:88:80:e3:d5:39:
         e7:63:f7:ac:ea:ec:74:76:2a:41:0d:31:1f:a3:34:61:0e:1b:
         32:9b:3f:57:ac:ea:86:22:f5:2a:5d:8c:7a:e0:27:e6:55:31:
         f0:01:90:a1:a9:64:f7:0c:eb:a8:f7:bb:53:c4:3e:d3:c0:13:
         90:30:f4:c8:f5:4c:68:a2:df:bb:c6:32:11:6f:30:e7:0a:91:
         61:7a:f5:f1:08:fb:3c:71:30:f6:8e:10:94:04:a0:ed:8f:41:
         06:d0:f3:f5:a9:3e:ff:71:e2:44:32:30:c5:b5:5c:f8:61:7b:
         d5:df:c7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:19:46 2025 by rpki-client