Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0cf94de9-2eba-3125-b171-c0960dca26f7.roa
File:                     0cf94de9-2eba-3125-b171-c0960dca26f7.roa (raw, json)
Hash identifier:          Uy9BSyae03jLtTLvy877wW3rs4ZS+GUOKlIOtHSi5Ic=
Subject key identifier:   1D:9D:B7:56:78:04:79:17:3E:F2:76:1E:FC:E2:53:5C:53:99:BF:82
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858494BC58829AEB67549F8EFFA40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0cf94de9-2eba-3125-b171-c0960dca26f7.roa
Signing time:             Mon 24 Mar 2025 16:17:27 +0000
ROA not before:           Mon 24 Mar 2025 16:17:27 +0000
ROA not after:            Sun 22 Jun 2025 16:17:27 +0000
asID:                     5065
IP address blocks:        172.121.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:c5:88:29:ae:b6:75:49:f8:ef:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 24 16:17:27 2025 GMT
            Not After : Jun 22 16:17:27 2025 GMT
        Subject: CN=d4097b6a-8194-493b-954b-8dfe3af5e35c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3b:a1:32:e4:d1:54:f4:f9:6d:d3:82:f7:9c:
                    63:2f:97:3a:3c:0a:77:9f:ce:ff:9e:36:86:15:c3:
                    d4:3e:87:39:0c:84:c1:91:b2:8e:3f:13:07:ac:2c:
                    49:25:ef:a5:de:39:b4:08:8c:5d:30:af:57:d2:4b:
                    65:f7:a3:4b:82:aa:d0:55:0c:35:ff:44:ac:6e:2b:
                    a3:9d:ec:4e:5c:df:0d:bf:c7:f7:ab:b2:73:2f:a2:
                    18:ff:ad:15:88:ed:cd:f0:82:38:c2:52:45:ee:81:
                    eb:bc:9a:d3:33:00:29:2d:b6:e3:5e:90:66:f8:8e:
                    b9:da:4e:40:98:b3:82:15:90:80:68:e3:ad:ab:97:
                    1c:09:7e:28:60:c2:e0:5a:d9:c0:aa:58:cf:3a:da:
                    f8:3a:53:24:47:87:4d:18:cb:d2:92:7e:4d:09:c3:
                    9e:05:e6:b8:7e:94:46:47:52:5c:bc:63:9d:a0:8c:
                    e0:38:4e:3c:37:ed:e5:c1:64:e6:a7:3c:0e:38:bd:
                    16:b3:ac:a2:08:e0:a1:2c:bf:00:61:f2:f0:36:67:
                    19:26:93:fa:f6:0c:93:e1:04:a8:64:3a:52:04:3c:
                    bc:6d:7a:b4:38:35:ee:ff:31:53:c3:d8:aa:1a:e9:
                    6b:57:92:af:a8:2e:10:93:e9:7a:9e:50:77:ec:17:
                    db:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:9D:B7:56:78:04:79:17:3E:F2:76:1E:FC:E2:53:5C:53:99:BF:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0cf94de9-2eba-3125-b171-c0960dca26f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:c7:91:29:72:aa:5b:ef:31:47:3b:1a:d5:5b:ea:69:f6:d6:
         0d:4f:e9:6d:47:f6:5c:c2:db:6e:45:4b:80:69:49:e4:71:bc:
         1f:27:67:dd:97:30:d8:74:fa:c0:fa:63:27:d0:55:ad:23:35:
         46:c2:76:77:4d:60:28:8c:96:9f:a3:03:b6:eb:89:aa:00:34:
         cc:d2:30:c8:f2:4c:81:94:1e:d1:5b:3a:b4:22:ec:dd:66:19:
         79:32:bc:08:32:17:a0:96:2e:11:7f:45:af:99:b9:db:5f:52:
         9c:08:90:ae:06:52:97:fa:df:c0:9b:7e:79:29:92:5c:a4:35:
         46:af:3a:4c:91:75:8e:61:63:7a:9e:5a:71:da:bd:9f:70:01:
         5d:9c:cd:48:3f:dc:0b:27:a6:f2:bf:33:20:64:d2:16:74:00:
         a0:f6:f8:e5:16:42:3a:4d:25:49:cc:61:c2:42:80:21:00:73:
         83:f3:a9:43:c2:35:15:11:c2:69:61:f2:6e:be:4a:53:23:21:
         98:31:ba:ed:3b:f0:d1:bd:d2:84:8c:c7:43:17:21:24:84:36:
         8e:23:12:7c:58:b8:f8:35:3e:2a:30:25:39:67:ff:c2:14:05:
         e6:db:8f:11:0c:4e:5c:a6:c6:06:73:9e:68:b0:7d:e6:83:22:
         21:4e:6a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:23:13 2025 by rpki-client