Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5192079f-12ce-31a7-81a2-74f178528cee.roa
File:                     5192079f-12ce-31a7-81a2-74f178528cee.roa (raw, json)
Hash identifier:          LxzGgdKDQjSWuzIZYBPPapCHz71MM/iT6+q8sXaJIG4=
Subject key identifier:   80:89:53:94:B2:C8:3D:E1:B6:8A:4A:D4:B5:0E:A5:CA:CE:7A:1F:73
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848D6412D623467025D68885B40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5192079f-12ce-31a7-81a2-74f178528cee.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     212238
IP address blocks:        172.121.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:2d:62:34:67:02:5d:68:88:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=5509959e-7c7b-4f83-9506-8fe224e082a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:87:ac:5a:03:a9:aa:5a:6f:bf:20:2d:f4:60:
                    ea:ed:63:56:55:f9:87:81:45:05:66:cc:09:1e:8f:
                    fc:98:4d:f6:78:34:b8:db:f2:31:60:f5:52:43:44:
                    1f:00:db:b9:d8:18:95:b8:40:46:f3:e0:b8:73:1d:
                    63:9f:1c:5c:f6:fe:76:6b:7e:9c:bb:ce:cd:1a:a4:
                    f4:e3:aa:3e:12:3a:2d:bc:ee:88:92:81:6d:74:85:
                    7f:3f:f3:b9:9d:6f:28:80:b4:f0:f8:4d:fb:56:79:
                    a7:81:40:65:d1:da:e3:cf:84:c7:3a:2c:ac:9f:12:
                    1a:11:34:2f:70:bf:72:c2:d9:5a:63:f8:74:fe:ad:
                    c3:d3:b4:cd:0d:a2:d1:e7:fa:2d:eb:85:95:89:f2:
                    7d:3f:53:07:05:31:02:aa:ba:03:e6:83:e3:2d:a3:
                    d2:c0:a2:5b:4f:50:b6:87:20:dc:ca:75:a7:df:96:
                    92:0e:f1:93:f9:11:eb:e6:22:99:b0:fb:1b:7d:8b:
                    e4:f0:fa:1d:b7:22:a9:45:5f:d4:9a:8f:02:59:7e:
                    c4:27:58:4c:ea:a3:0c:96:88:33:bc:7f:68:ee:7d:
                    47:86:23:c6:58:18:d4:7e:1e:da:0c:db:8b:4f:ad:
                    30:be:d1:62:b9:f7:08:fd:96:39:55:a5:82:23:16:
                    dc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:89:53:94:B2:C8:3D:E1:B6:8A:4A:D4:B5:0E:A5:CA:CE:7A:1F:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5192079f-12ce-31a7-81a2-74f178528cee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:a0:ab:94:25:c1:0f:46:b6:04:39:27:42:72:c1:5c:7d:c6:
         3c:18:62:27:3f:9e:fd:a0:b5:c6:fe:4f:95:c9:7f:02:ec:5c:
         d5:8b:8c:b3:1a:25:9e:da:e9:91:ce:ae:fc:92:e1:b2:88:66:
         57:28:d0:74:88:f6:12:27:cc:a9:17:cc:3f:cd:81:00:dc:05:
         bb:2a:d2:d7:f7:48:8a:e6:5a:07:70:05:b1:75:c8:d2:2d:a0:
         ca:37:dd:5b:e7:90:6b:26:d5:82:ab:9d:f2:6e:c8:00:8b:a0:
         e6:62:4c:6f:dc:56:a8:7f:d2:41:8b:b5:b1:ab:33:9f:fa:82:
         e7:0f:1c:bd:d4:34:b8:77:62:3f:42:30:cf:08:ab:61:da:1e:
         45:91:50:e8:08:1a:05:18:17:d3:76:fc:91:cf:ce:4e:35:f3:
         fc:a0:eb:dc:47:95:d8:44:c0:49:4b:ae:e1:66:41:47:f2:1d:
         b6:c1:8b:6e:93:7c:f6:17:46:81:6e:f6:21:66:5e:18:b9:eb:
         89:74:8d:25:83:aa:e8:1b:36:79:7e:16:ee:44:13:06:0d:f3:
         b7:c5:36:82:05:2d:fd:ae:06:95:87:16:99:76:14:1d:b3:82:
         23:ce:c5:0d:a1:e8:b8:97:9a:ac:64:d5:49:c1:17:63:0f:a6:
         b1:cc:97:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:03 2025 by rpki-client