Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f0c012b0-e5a4-36a0-b6e0-83f231881337.roa
File:                     f0c012b0-e5a4-36a0-b6e0-83f231881337.roa (raw, json)
Hash identifier:          LNuWL8F4sg2i/vJP+GFouZcd/eOzYDE7pCT9GBpQD0k=
Subject key identifier:   15:EF:B1:EE:53:D3:7B:0E:1C:72:CF:2C:9C:11:99:04:4E:1A:5D:03
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848AA0779A704760D9D9EA985B0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f0c012b0-e5a4-36a0-b6e0-83f231881337.roa
Signing time:             Sat 25 Jan 2025 17:49:22 +0000
ROA not before:           Sat 25 Jan 2025 17:49:22 +0000
ROA not after:            Fri 25 Apr 2025 16:49:22 +0000
asID:                     18779
IP address blocks:        172.121.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:07:79:a7:04:76:0d:9d:9e:a9:85:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 25 17:49:22 2025 GMT
            Not After : Apr 25 16:49:22 2025 GMT
        Subject: CN=b26919b8-88ee-4016-8769-30112d6ccdb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fa:c8:8f:13:9c:c9:75:a8:4c:74:24:bb:da:
                    97:6c:c1:26:0a:a9:11:08:a3:fb:fc:6e:a2:d0:39:
                    d2:36:2d:a1:c9:21:87:1f:32:bc:bb:00:49:d0:12:
                    95:58:fa:ab:c3:b3:90:9c:52:77:31:48:c2:59:16:
                    a4:32:9a:ec:e3:cb:aa:8c:34:2f:f9:d9:17:ba:68:
                    26:d4:c2:c9:38:03:2d:f8:e9:54:2a:0c:ed:e7:aa:
                    5e:1f:57:bc:7c:45:9b:0f:9f:1c:14:8e:e5:fc:39:
                    aa:96:8f:51:5f:50:05:cc:c5:8a:26:28:ff:a5:b5:
                    2f:ce:b0:29:9c:65:06:b5:89:33:65:79:d5:1d:d8:
                    59:ca:82:65:a4:f0:ff:7a:e9:d9:b2:b1:73:71:6c:
                    6f:5a:bf:d2:56:87:08:e4:39:88:9e:82:cb:b9:c8:
                    ff:1e:f8:18:bc:69:21:da:6a:70:6b:6e:97:b6:18:
                    b6:c1:ed:0c:db:85:f8:4a:c9:27:d7:62:9b:51:a2:
                    f7:06:6c:67:4c:d4:cc:8f:f6:6a:ee:d9:06:b3:85:
                    76:b0:b3:ec:26:38:62:7f:ed:6e:02:4e:39:a2:1e:
                    b6:7a:f6:12:0c:b6:76:0c:21:71:57:21:bf:2a:b5:
                    c2:d2:24:0c:2c:5c:9d:a6:3e:f6:82:e1:af:1d:ca:
                    ad:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:EF:B1:EE:53:D3:7B:0E:1C:72:CF:2C:9C:11:99:04:4E:1A:5D:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f0c012b0-e5a4-36a0-b6e0-83f231881337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:8b:fa:d2:ee:03:0c:83:bd:a1:ad:4a:60:45:65:ba:a6:af:
         3e:15:de:46:b3:7d:0b:a5:7e:ff:c6:83:16:33:be:66:c0:7e:
         68:94:cd:0a:69:e7:8a:5a:ab:d7:d8:77:99:9f:c1:a8:13:d5:
         58:2f:65:b4:91:ea:5f:27:54:87:19:49:85:de:bd:e9:f0:ed:
         b2:37:60:19:68:08:6e:8e:4b:02:df:ef:e0:34:32:54:52:8c:
         ae:a8:f7:52:fa:33:ab:85:bd:ce:52:bd:16:4d:88:d3:a5:bd:
         d8:e7:06:e2:97:41:68:ae:9b:66:3c:6d:58:a0:b7:97:28:49:
         b7:54:55:53:d0:7a:ae:e3:e0:25:4f:b6:e9:6f:f1:ab:5b:fa:
         be:2e:61:6f:07:d9:d5:95:1d:f3:85:c5:59:da:c3:1f:eb:5f:
         a6:07:9d:cf:65:7b:ed:aa:d3:d1:e1:b0:df:ed:de:a1:bd:f5:
         82:38:f9:8d:4d:31:bc:36:16:50:e2:11:be:ce:34:2b:01:8e:
         2d:a0:3d:10:69:f5:9a:5c:33:d4:70:86:f4:32:12:7f:e8:0d:
         cb:48:52:1b:50:a2:7b:7e:a9:84:ac:d5:11:bc:d3:49:f1:40:
         ff:3e:52:8d:e5:bd:f2:c7:48:ae:41:44:ed:3a:16:ed:05:df:
         87:81:48:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:34:49 2025 by rpki-client