Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/513327ea-42c2-37f9-96f9-dd7cc88d906e.roa
File:                     513327ea-42c2-37f9-96f9-dd7cc88d906e.roa (raw, json)
Hash identifier:          02fH+h95ZNxbbl4+MqrAMm7o8MabbzezEOB58w5v2Z8=
Subject key identifier:   0D:FB:F0:B0:3E:F0:26:17:16:45:9A:FD:91:C9:76:A6:A6:18:3B:3C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849F85F1588E8E6BAFECB2A2FC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/513327ea-42c2-37f9-96f9-dd7cc88d906e.roa
Signing time:             Sun 25 May 2025 12:05:53 +0000
ROA not before:           Sun 25 May 2025 12:05:53 +0000
ROA not after:            Sat 23 Aug 2025 12:05:53 +0000
asID:                     214238
IP address blocks:        172.120.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:5f:15:88:e8:e6:ba:fe:cb:2a:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 25 12:05:53 2025 GMT
            Not After : Aug 23 12:05:53 2025 GMT
        Subject: CN=d61d04e3-2a4d-4dea-ab0d-88d4a78da760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e8:2b:8f:cb:ba:6f:03:49:ec:31:cd:58:36:
                    fd:12:d2:e5:79:66:33:7d:7d:c7:a4:72:29:c8:06:
                    82:c1:58:29:b0:89:9d:7f:0e:6c:82:de:67:0a:1c:
                    33:e2:eb:fb:b3:47:ae:49:bd:a9:49:59:89:82:1b:
                    5b:14:b4:f8:c9:d4:5b:09:a0:e8:cb:4b:da:c7:8b:
                    d5:b9:1b:3d:ac:d6:28:a2:50:e9:63:ac:8d:21:1f:
                    86:b6:df:22:9c:3b:eb:45:7e:ba:d0:64:fc:c7:bd:
                    05:16:63:07:28:1f:51:cc:ff:35:e7:40:31:72:d3:
                    1b:60:42:60:ec:5b:d1:ab:30:c4:01:ba:1f:44:92:
                    72:18:a3:a0:52:cd:a5:89:e1:83:a7:3c:1b:da:3a:
                    04:e6:d4:81:08:7a:6d:ed:3c:1a:1b:d3:b4:5d:46:
                    ef:85:53:be:c8:98:cd:aa:ac:7d:5b:d8:44:b6:ff:
                    dd:25:ed:d9:5e:53:69:9b:2c:0c:51:3c:41:9a:01:
                    03:c2:6c:3c:6d:65:4e:4d:24:78:8a:6a:a0:75:48:
                    cc:9d:01:9d:54:7f:63:35:d9:cc:be:e6:9b:a5:e3:
                    d3:8b:86:79:a3:28:ed:1c:c3:27:0a:95:84:33:01:
                    f8:29:7f:57:44:70:93:51:99:d0:f2:aa:1d:c2:1f:
                    28:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:FB:F0:B0:3E:F0:26:17:16:45:9A:FD:91:C9:76:A6:A6:18:3B:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/513327ea-42c2-37f9-96f9-dd7cc88d906e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:82:f7:c3:ae:33:07:81:49:e2:4b:e0:f7:49:52:36:45:0b:
         2e:d0:8d:0b:15:e6:98:3b:d1:df:4e:b0:6a:ed:02:b2:e6:83:
         8e:d3:54:e5:88:e6:2a:b2:44:ce:5f:8c:f4:7d:46:96:2d:1d:
         e6:a7:c4:2f:e0:9d:a6:bb:07:5f:14:c1:84:e7:e4:08:bd:fa:
         b9:1e:be:cd:93:36:84:de:30:a5:c8:27:c2:f0:99:c7:bb:fb:
         3a:c1:f4:2a:6d:e5:bd:ca:b6:2a:88:6d:4d:7c:4e:12:73:84:
         63:6a:f3:4d:c4:f3:c6:5e:fb:62:87:db:c8:0d:d5:ab:b9:2a:
         20:36:52:06:16:89:54:e1:f0:97:88:82:52:32:64:2f:d0:3e:
         49:5d:4b:f6:33:65:8e:fd:08:9a:bf:f3:88:d5:7d:6f:0d:64:
         54:83:b2:43:96:2a:47:a4:77:e9:32:80:d2:07:bf:1d:7b:23:
         ae:0f:46:d8:aa:5f:af:75:2a:b0:ee:d2:cb:19:54:3e:b3:cc:
         36:dc:44:11:10:ac:df:99:4a:dc:bc:cd:09:c6:9b:28:d4:6a:
         9e:75:ef:a9:81:d2:c7:09:66:38:5c:7a:71:a7:95:82:47:6e:
         81:eb:2a:a2:6e:32:26:32:fc:fa:43:76:9b:da:cb:02:94:34:
         0c:00:92:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:38:15 2025 by rpki-client