Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c054a159-4461-3adc-acb4-0989bb9efe88.roa
File:                     c054a159-4461-3adc-acb4-0989bb9efe88.roa (raw, json)
Hash identifier:          lbDMoUX2gvWJkfytvGacflSdrPSFAE1kOLTGfEvK/dc=
Subject key identifier:   43:D3:9C:65:7E:7D:87:75:DA:37:4C:BA:20:DE:B4:D3:19:0A:47:A3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849F85F70D61E81DD7F429F56F0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c054a159-4461-3adc-acb4-0989bb9efe88.roa
Signing time:             Sun 25 May 2025 12:06:36 +0000
ROA not before:           Sun 25 May 2025 12:06:36 +0000
ROA not after:            Sat 23 Aug 2025 12:06:36 +0000
asID:                     214238
IP address blocks:        172.120.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:5f:70:d6:1e:81:dd:7f:42:9f:56:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 25 12:06:36 2025 GMT
            Not After : Aug 23 12:06:36 2025 GMT
        Subject: CN=4170ef9e-8cff-4200-8f00-5d707aa27adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6e:90:19:15:6c:4d:ce:8d:bc:3a:a5:07:0f:
                    77:7a:76:72:3d:4e:f8:43:d6:53:4e:ef:c5:35:2e:
                    d5:2b:fa:5b:11:cc:d4:32:f8:93:aa:84:91:07:09:
                    32:67:c3:12:f4:33:d6:bb:3b:c9:13:b3:76:52:d1:
                    f3:ea:f0:f0:8e:90:ae:0f:e2:48:04:40:13:a3:2c:
                    34:ab:cc:02:50:33:78:95:8a:b3:71:3f:c9:2a:a8:
                    5d:b9:53:ee:e2:d8:76:50:53:30:f1:e6:fe:38:8f:
                    36:ea:e9:5f:47:3f:9e:00:0a:0b:83:7c:5a:f2:ef:
                    f9:88:df:ab:d1:dc:7f:67:55:55:65:a7:3f:e4:2f:
                    91:d2:04:f0:fd:eb:ae:8a:a7:96:e9:1e:db:c5:94:
                    7b:45:1b:ea:fa:37:15:6e:7a:ab:80:89:69:7b:fc:
                    c0:d7:70:ed:72:32:70:21:74:50:cc:4f:5e:26:df:
                    2d:df:de:c2:1b:25:f3:d2:cc:b8:ce:96:59:91:24:
                    fb:84:b4:e7:85:37:51:c1:b6:76:0e:00:55:65:ab:
                    00:9b:d0:30:e0:23:f2:68:d3:9e:f6:53:a8:fb:41:
                    f6:7f:a6:e9:0d:a0:8b:c6:2f:ac:59:5d:80:d1:b8:
                    74:f8:10:52:63:2b:3a:b8:8b:f0:e7:63:ee:ec:fd:
                    5b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D3:9C:65:7E:7D:87:75:DA:37:4C:BA:20:DE:B4:D3:19:0A:47:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c054a159-4461-3adc-acb4-0989bb9efe88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:75:24:09:ab:52:b9:39:2e:e1:81:88:15:64:1c:81:a2:0e:
         9c:d8:c4:ef:6b:d5:69:15:3d:4b:7c:b2:9d:59:ea:54:61:fa:
         69:4f:49:fc:8f:d3:ee:94:e9:cb:77:02:92:72:37:75:f5:8c:
         b5:b1:11:84:06:2f:69:14:ef:f8:01:4e:ad:80:ae:ce:38:30:
         9e:a9:18:7e:ea:67:24:16:79:68:4c:b7:b2:e6:ad:94:d2:61:
         8f:3d:7a:1c:9f:1f:40:f1:76:28:83:71:df:20:9d:20:f0:e5:
         56:5e:01:53:f0:58:78:13:4d:d0:75:96:8c:8a:c8:7f:e1:25:
         b6:45:93:95:01:0c:cb:e2:42:70:1c:31:69:fd:58:6d:23:1a:
         38:8f:be:1f:22:0b:44:e8:da:7e:be:9e:24:b1:b8:bf:5b:98:
         73:26:27:d4:bb:29:a6:03:d4:fc:fb:35:0b:56:40:61:6d:5f:
         73:93:02:17:6f:6a:cd:78:9c:30:12:9d:8b:2a:a1:2b:c6:85:
         0d:8a:00:80:ed:98:68:7f:a8:bd:50:f5:7b:9f:f9:c6:43:3a:
         19:a7:b0:a6:59:8f:b7:d3:48:d8:85:72:02:60:96:a4:b6:d7:
         12:c7:f3:ea:bd:8d:89:58:86:4c:e0:c1:14:b2:b7:ae:aa:a4:
         16:15:35:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:34:44 2025 by rpki-client