Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/98ba641d-ec77-33c8-ac30-bb9d946acfa6.roa
File:                     98ba641d-ec77-33c8-ac30-bb9d946acfa6.roa (raw, json)
Hash identifier:          2gSOipLmbSWpMb1HfG0qUk5p3okRij6SZb84j+/totg=
Subject key identifier:   25:E3:65:43:D2:E5:C9:9D:D8:3B:65:EF:81:44:7A:CD:EB:58:D8:28
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848AA05A3C60BA0570E25722B20
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/98ba641d-ec77-33c8-ac30-bb9d946acfa6.roa
Signing time:             Sat 25 Jan 2025 17:45:40 +0000
ROA not before:           Sat 25 Jan 2025 17:45:40 +0000
ROA not after:            Fri 25 Apr 2025 16:45:40 +0000
asID:                     18779
IP address blocks:        172.120.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:05:a3:c6:0b:a0:57:0e:25:72:2b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 25 17:45:40 2025 GMT
            Not After : Apr 25 16:45:40 2025 GMT
        Subject: CN=04232986-cd81-49df-850e-0af65e6531c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ed:ef:5c:aa:73:ab:a1:00:80:7d:a1:8b:00:
                    9b:b9:75:91:92:ff:02:cf:04:ae:9c:d8:5c:06:fe:
                    32:77:e0:43:b5:1c:a2:4f:a1:6a:92:59:1c:e5:2f:
                    fc:f0:5c:73:31:57:ad:9b:bc:34:fd:23:88:d4:8f:
                    e2:1b:3a:13:7a:ee:cf:b9:2e:a7:f2:ef:be:69:d9:
                    b5:3a:5c:f5:77:ff:ec:28:c4:77:7d:1a:6a:bd:7c:
                    ec:57:a5:46:93:1e:02:ce:d2:e0:50:d0:2c:55:2f:
                    81:96:a5:4b:61:20:41:ef:2d:8f:27:6c:41:9e:ab:
                    c8:ba:48:f7:65:4b:53:9c:e4:a1:00:30:57:1b:1f:
                    96:53:b2:7e:74:e8:7b:92:e2:0d:c4:52:14:d5:69:
                    79:0f:0e:06:65:14:73:7b:89:51:ec:a8:8c:c5:be:
                    eb:83:e1:4a:55:a8:97:6a:e4:53:4d:46:0e:7a:98:
                    f9:97:75:78:44:44:6b:10:84:91:0f:48:65:ab:70:
                    6e:13:cb:42:02:76:3e:0b:56:25:89:0f:3d:1a:b7:
                    56:6e:38:dc:c9:6a:58:d7:f5:bc:d0:b5:99:77:61:
                    ab:f7:44:d3:1c:92:11:c4:61:00:c4:c9:ed:10:38:
                    73:cc:16:33:9b:df:74:2f:9f:6a:fc:cb:6a:b8:2c:
                    97:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E3:65:43:D2:E5:C9:9D:D8:3B:65:EF:81:44:7A:CD:EB:58:D8:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/98ba641d-ec77-33c8-ac30-bb9d946acfa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:2b:af:28:cc:30:40:0f:6e:7d:13:82:30:7f:09:db:a7:d8:
         71:7a:fc:4e:14:64:56:c7:52:10:cd:e9:f4:67:ce:b6:52:64:
         63:c5:78:a5:5f:e2:b5:66:d9:6e:ab:14:71:43:67:dc:6b:f0:
         99:60:99:bc:e3:d1:11:15:77:ee:fc:be:50:88:0c:4b:56:90:
         fc:fb:ca:be:c4:94:ca:30:fe:7c:bd:ef:94:23:6c:98:60:23:
         bf:f6:ae:9c:c6:d8:22:c6:bd:25:b7:a3:3d:be:ad:35:d1:67:
         90:cb:62:d0:1e:25:5c:4e:85:b8:35:86:ce:0f:ff:5c:d3:45:
         57:57:fb:b8:e2:80:92:41:87:d5:cd:4b:b4:e0:2a:9d:1f:76:
         2b:f8:9d:bf:5a:41:31:9a:10:d5:e0:6c:4d:4b:4a:9c:e3:d5:
         19:e3:19:40:af:37:39:06:cd:d6:cb:c8:4d:ba:4b:50:48:0c:
         d1:8a:e6:73:75:24:f3:2e:15:67:f9:1d:13:7f:71:f6:da:3f:
         20:e2:cc:bb:c9:0c:b7:8f:90:11:c4:8c:12:b3:e3:40:0b:6c:
         c4:49:87:81:2e:99:ce:ec:a6:b0:86:5d:ec:24:41:d7:d6:81:
         c1:5d:eb:63:ed:a1:25:cd:31:3c:4d:d8:0a:74:e0:88:92:d1:
         b4:3a:2b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:26 2025 by rpki-client