Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3fcf953c-f3ee-3527-9770-b10cc6f5a9a3.roa
File:                     3fcf953c-f3ee-3527-9770-b10cc6f5a9a3.roa (raw, json)
Hash identifier:          58s+cUHsdZjb/fQ145GoCfWZyIacMHTAzJEVu2S024s=
Subject key identifier:   7D:8B:9A:30:37:5B:90:61:93:3E:FD:9D:CF:84:BF:8D:C9:2B:C4:FC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849F8608CC27FCEC20A03295540
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3fcf953c-f3ee-3527-9770-b10cc6f5a9a3.roa
Signing time:             Sun 25 May 2025 12:08:50 +0000
ROA not before:           Sun 25 May 2025 12:08:50 +0000
ROA not after:            Sat 23 Aug 2025 12:08:50 +0000
asID:                     214238
IP address blocks:        172.120.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:60:8c:c2:7f:ce:c2:0a:03:29:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 25 12:08:50 2025 GMT
            Not After : Aug 23 12:08:50 2025 GMT
        Subject: CN=b366927d-016e-4870-a0b6-c76af7831526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d2:89:b9:83:e3:e0:04:c8:15:96:dd:ec:08:
                    f1:04:a7:d6:6a:62:7a:b2:02:43:cb:85:8e:5b:bc:
                    4c:71:00:ba:b5:dc:c9:a1:62:06:2e:21:bd:2e:b9:
                    56:37:4f:6e:1b:8d:96:1a:b6:5e:9f:66:97:dc:10:
                    0c:0f:ad:38:94:ff:4b:4e:ca:f6:be:06:04:39:30:
                    db:e2:5e:9d:e8:64:1b:cd:75:12:72:2b:89:8d:e8:
                    0a:55:e4:85:18:83:f4:09:eb:a0:60:09:02:04:c9:
                    74:d4:d7:98:8b:40:72:c7:4e:57:4a:fa:b6:b3:b6:
                    33:e7:8e:a5:6e:22:2f:c3:a4:f6:fc:53:7d:67:02:
                    3f:3c:16:83:02:0d:57:d6:0b:72:6a:81:a5:3d:37:
                    94:0d:c6:70:b7:fd:ec:37:97:2e:a6:2d:8d:cf:8c:
                    9a:86:3b:44:07:fe:83:88:a0:31:d4:dc:c1:15:07:
                    6c:50:ef:bb:d3:50:28:12:91:07:09:e8:20:7c:6b:
                    fc:44:b6:35:5b:03:bf:42:ce:a8:45:b0:3c:b3:13:
                    30:54:ae:ab:c1:c1:7c:f3:91:97:cc:20:e1:47:9b:
                    28:a7:b8:63:70:35:9e:02:ee:e7:16:4b:65:0f:48:
                    03:a2:09:04:68:bc:8d:55:0a:00:8a:8c:39:f6:a7:
                    05:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8B:9A:30:37:5B:90:61:93:3E:FD:9D:CF:84:BF:8D:C9:2B:C4:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3fcf953c-f3ee-3527-9770-b10cc6f5a9a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:ad:e0:d7:65:9b:76:bf:ac:fc:b5:a4:53:4b:21:03:8d:20:
         44:e5:3e:3a:fb:41:b0:51:7c:ae:d9:11:eb:26:1b:b9:10:6e:
         1a:35:bd:53:5c:1e:e4:e4:ec:23:25:bd:18:05:6c:61:f8:2f:
         45:7b:ee:96:47:fa:4f:21:ed:79:e9:ca:e8:96:c7:b8:17:0b:
         24:37:68:c4:91:c6:a5:ff:9d:7b:b3:06:cf:94:46:a8:b6:92:
         a5:4c:ed:1a:7a:0c:f8:9c:1a:03:7a:95:d6:9e:4e:27:34:81:
         50:20:41:23:92:36:27:66:46:a8:25:96:94:a8:da:7f:d3:d0:
         96:4a:bc:fc:96:1d:4d:8f:1b:d0:8f:8b:67:e2:ca:4a:fe:15:
         a1:a6:6f:a9:63:b5:e9:23:b3:dc:80:1d:4d:9c:6c:1b:7d:d4:
         d3:05:e9:5c:40:b0:54:ab:1e:f9:a5:35:e4:9b:11:8d:e9:a3:
         77:d4:e7:39:e9:46:58:e8:23:63:12:db:6b:55:2e:76:33:7a:
         a6:fc:c4:01:ae:45:59:14:96:90:bf:69:d3:92:43:09:ea:bd:
         54:72:fc:8b:94:97:a0:0b:f9:52:ed:d5:5f:05:71:c0:6b:3a:
         8a:bc:86:75:5c:c0:a2:1b:99:98:46:2d:7e:b2:97:a3:3d:ec:
         7a:ec:69:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:29:51 2025 by rpki-client