Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0388b98f-e554-326f-a1b5-08592c3b7669.roa
File:                     0388b98f-e554-326f-a1b5-08592c3b7669.roa (raw, json)
Hash identifier:          apVc7lfPoEPrwQ883XRVta+R1CtGjoE1XhTjFhti7B8=
Subject key identifier:   97:35:8B:A2:ED:0D:13:35:8A:58:5D:7D:24:CC:BC:64:D9:67:9E:CC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858499F24BC85CE98D137D1EBF880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0388b98f-e554-326f-a1b5-08592c3b7669.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     3257
IP address blocks:        172.121.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:bc:85:ce:98:d1:37:d1:eb:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=e01b688a-ac69-4208-b0fb-251c0ef994b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9a:6c:b0:b6:18:b2:2c:0c:6d:6f:6f:3e:ed:
                    45:ed:64:a5:91:2a:a6:1b:39:e7:6c:01:7a:51:cf:
                    8e:35:96:41:b3:45:4b:9b:cd:40:15:90:db:5c:03:
                    df:7a:6a:2e:1d:f3:af:63:cd:bc:db:81:50:f6:fe:
                    07:8c:66:94:e0:4f:d6:30:ef:8d:d3:75:c9:53:18:
                    75:bc:36:71:ae:8c:fd:c3:f8:09:71:b3:ed:a0:01:
                    5f:85:ba:bf:97:b8:c8:ed:90:d7:8e:c1:d2:1a:55:
                    15:21:03:ba:ad:ca:4b:10:28:dc:d2:ca:af:cb:f5:
                    9c:e3:e7:06:9c:9a:f1:a9:77:ea:59:28:18:70:8d:
                    46:0b:aa:fb:2d:29:d2:90:61:8c:d2:72:fb:1b:23:
                    5e:bb:7a:e8:69:ac:ac:c1:ca:d4:07:0f:58:00:5e:
                    de:94:74:58:e1:b8:19:bc:6c:7f:c7:52:78:00:a4:
                    60:2c:82:da:87:8d:a9:4a:c6:5a:9d:b5:eb:5d:50:
                    fa:0b:5b:55:ec:2f:a2:17:9c:fc:ac:f0:0d:a9:41:
                    de:43:e6:fa:0b:e2:67:9c:2f:2e:f8:76:87:06:76:
                    bc:a5:35:40:2b:50:5a:1f:91:c7:55:9f:f3:b5:88:
                    59:5e:66:14:5c:f5:31:ac:60:e5:50:cd:93:ed:3b:
                    de:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:35:8B:A2:ED:0D:13:35:8A:58:5D:7D:24:CC:BC:64:D9:67:9E:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0388b98f-e554-326f-a1b5-08592c3b7669.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:ee:20:c6:57:ae:54:98:c1:ee:7b:e4:fe:51:08:43:af:d9:
         19:85:48:88:71:e8:e0:4c:8c:83:04:4a:47:5f:24:b9:68:f6:
         85:01:00:64:4e:50:62:66:a2:2d:ba:3d:0c:84:a1:3f:b2:95:
         2a:07:93:c7:54:8d:67:37:e9:0b:23:4c:4c:d7:7d:f9:b4:c3:
         45:a3:b9:b6:35:71:ec:a0:ed:c0:4a:16:06:9c:86:29:9d:fd:
         a0:4f:be:31:3d:2e:4c:d6:5f:75:58:d6:29:8c:94:01:2f:58:
         76:80:23:d4:91:95:c9:90:fb:1e:83:dc:6a:e9:d8:84:cc:7b:
         fd:0b:c6:3e:84:38:d0:3a:82:6b:fc:99:1a:f5:8a:f2:9a:ea:
         0e:ea:6b:de:42:a4:2b:f3:e7:93:98:24:6a:f2:44:6e:64:74:
         8a:5b:3d:fc:81:7f:ad:e4:d5:ab:c5:ee:87:e6:9e:4f:d9:21:
         d3:aa:73:8c:36:b7:98:5e:83:3a:cb:5e:99:34:db:48:66:62:
         16:f0:e6:0b:b1:69:f2:6b:33:18:57:13:3c:c6:de:74:6a:ff:
         8e:ae:9c:b2:cc:b7:9c:87:98:86:1b:2e:cb:47:42:3e:5a:03:
         34:2d:d5:c5:02:f2:ec:41:89:28:97:7e:6f:d2:c4:80:9f:25:
         95:6a:e9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:48:15 2025 by rpki-client