Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f5ff4c4a-b3e3-350d-9e8b-9482142f2004.roa
File:                     f5ff4c4a-b3e3-350d-9e8b-9482142f2004.roa (raw, json)
Hash identifier:          1d67x6EX3i7TKXvQfGJ3oqf2a9krOEFerkiqW2DfRNs=
Subject key identifier:   E9:81:A9:4B:48:B8:28:74:13:F5:BE:72:94:AE:45:A8:1C:C6:71:24
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848D6412D3B292D3D6D7D6D1040
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f5ff4c4a-b3e3-350d-9e8b-9482142f2004.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     212238
IP address blocks:        172.121.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:2d:3b:29:2d:3d:6d:7d:6d:10:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=745e46be-36e5-476e-8c2c-a59db6c1c4c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:01:fb:29:59:17:57:ca:39:c2:f0:d9:1c:0c:
                    0b:4a:a5:b8:1c:c8:4c:60:da:b2:21:2e:26:85:4a:
                    2a:ef:55:cc:5a:00:99:f9:42:f6:3a:db:43:cd:ef:
                    09:5a:8e:f5:dd:bb:b8:29:50:53:07:19:7b:28:57:
                    7b:12:f5:03:db:f4:d0:b0:b4:15:ad:bb:3f:25:b2:
                    8d:1f:65:f5:bf:24:bf:ab:ba:16:29:44:7c:87:23:
                    bf:ad:63:24:af:69:80:93:18:16:52:61:cb:fe:e4:
                    c8:5f:6f:3f:8a:a8:9d:55:c6:72:e6:76:82:3a:c7:
                    c6:f3:f3:a6:33:81:7c:59:eb:30:bb:d9:16:a4:8a:
                    a9:a3:20:88:d5:c8:23:9f:f9:63:7b:1b:8e:64:b1:
                    82:24:5c:aa:56:d9:3b:80:47:dd:db:2b:5b:3e:af:
                    45:8a:52:8c:00:a4:03:7e:eb:c1:6b:8e:6f:98:ab:
                    33:03:8e:e0:2c:d3:81:70:cf:17:f1:f7:7a:b2:4b:
                    8c:91:5f:63:3d:50:b8:76:00:68:9b:cb:4d:da:d2:
                    ad:52:6e:2e:f4:cf:7c:cc:8c:dd:92:dc:3d:dc:be:
                    3e:ec:49:86:3b:91:52:38:b3:94:13:de:f9:8b:c6:
                    8d:2a:ff:07:97:fe:bb:05:dc:34:e5:cc:77:a6:dd:
                    78:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:81:A9:4B:48:B8:28:74:13:F5:BE:72:94:AE:45:A8:1C:C6:71:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f5ff4c4a-b3e3-350d-9e8b-9482142f2004.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:11:57:63:1f:27:0f:b8:5c:3e:76:5a:9a:87:5f:67:99:0d:
         4a:dc:d8:72:ab:fa:62:58:b3:90:77:0e:68:ca:7a:31:c5:1d:
         a9:3c:89:d3:85:5d:9e:a1:52:c8:85:c6:a5:bf:86:90:25:60:
         38:aa:48:79:a3:e1:1d:34:f5:02:9b:93:b3:06:59:53:8d:2f:
         38:2b:3f:c0:8b:89:fc:fe:4a:b9:0d:b7:8d:b8:12:e6:bb:d6:
         e0:28:99:c3:9f:68:29:a8:f9:3d:5f:70:ff:c6:7d:22:5c:68:
         17:18:49:c2:6b:8e:b3:d6:0e:13:91:30:15:c5:2e:18:a8:5c:
         fd:39:3c:9c:3a:6f:bf:27:4f:48:74:56:6e:97:2c:d8:2d:de:
         67:75:57:b1:00:69:48:1e:10:8e:1a:26:70:d5:7f:5d:92:39:
         1e:bf:9f:e6:98:a2:19:6d:91:a6:7e:87:be:42:cd:e4:ef:93:
         08:a4:4b:99:4e:da:d4:a6:79:02:ea:f8:fc:cb:be:41:4d:72:
         0b:b1:8c:3e:e4:7b:a5:67:e0:93:92:2d:36:f7:79:fc:d9:8d:
         7c:e2:8f:ea:a1:cd:43:b8:1e:f9:82:d6:d6:1b:41:89:53:e4:
         3a:68:92:91:92:da:84:74:5a:4f:6e:49:03:5d:9e:01:e7:6e:
         79:d9:9a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:17 2025 by rpki-client