Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/21e4531b-8ebd-3ddc-bc3a-f811abec07c0.roa
File:                     21e4531b-8ebd-3ddc-bc3a-f811abec07c0.roa (raw, json)
Hash identifier:          HZjs90FSj7HmCn6lAf6wkOHevYEI63R2ut1TE+MdC18=
Subject key identifier:   BD:2F:52:CF:71:9C:FF:EB:FC:4E:86:EA:FA:8D:B5:6B:A2:31:BC:30
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A8DC1A47A2897CDC9FC23CA00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/21e4531b-8ebd-3ddc-bc3a-f811abec07c0.roa
Signing time:             Fri 18 Jul 2025 00:19:54 +0000
ROA not before:           Fri 18 Jul 2025 00:19:54 +0000
ROA not after:            Thu 16 Oct 2025 00:19:54 +0000
asID:                     6939
IP address blocks:        172.121.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:c1:a4:7a:28:97:cd:c9:fc:23:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 18 00:19:54 2025 GMT
            Not After : Oct 16 00:19:54 2025 GMT
        Subject: CN=d261d562-f59d-4947-a143-e27200b01b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4c:d1:da:af:2e:97:ed:f7:63:04:75:06:4b:
                    a8:93:65:62:5e:8d:21:9c:26:c3:40:83:d4:9c:4c:
                    c5:10:92:5a:8b:1d:44:24:6f:65:64:d0:4b:dd:2a:
                    c9:23:1a:5b:99:fc:73:91:6f:c6:81:9a:ce:89:1f:
                    61:47:6d:81:a0:38:4a:1a:67:58:4c:4e:a4:39:3e:
                    33:ab:94:39:9a:2b:c8:b9:e3:07:3b:ea:f8:b0:20:
                    66:7d:55:7e:7a:e1:0b:ba:9a:45:a4:66:3a:e4:ac:
                    c8:fe:dd:85:9f:e8:6f:94:19:84:cf:b5:84:8c:29:
                    c7:72:0c:6d:48:36:2c:f2:db:b4:10:12:e4:13:0a:
                    20:4d:51:46:e1:df:59:4e:52:71:12:3f:0c:62:8f:
                    e8:5d:a4:df:d0:ec:2e:6a:43:2d:48:3d:f3:a3:79:
                    60:ad:4e:e6:f0:1d:1e:7e:c2:61:2d:42:a7:b0:44:
                    bb:cb:76:34:50:97:12:74:5c:e7:63:11:58:35:10:
                    0a:04:42:cd:7e:a6:51:a8:bd:6e:83:e5:86:fa:1b:
                    fd:0b:7b:b9:5c:75:c8:fc:f5:1e:7c:65:b2:47:5a:
                    4e:dd:71:60:9b:e9:2c:b3:4a:bc:4d:4c:82:3d:2c:
                    df:b1:1f:dd:d7:ee:82:0e:ad:4d:e7:fb:13:de:37:
                    5a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2F:52:CF:71:9C:FF:EB:FC:4E:86:EA:FA:8D:B5:6B:A2:31:BC:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/21e4531b-8ebd-3ddc-bc3a-f811abec07c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:77:a0:c3:09:15:0a:c4:62:91:11:51:35:ca:10:37:b9:8c:
         97:74:2c:8d:60:69:88:08:9f:90:cc:fc:95:b3:11:7a:bc:2b:
         a3:58:5a:e4:61:ef:06:18:33:88:1a:16:56:f1:a6:0e:ce:63:
         84:23:ec:c1:60:65:3d:d7:4e:c6:32:e9:7c:93:b4:47:c0:d4:
         80:74:3e:2a:9b:63:77:2c:a7:14:6c:91:3b:a7:1a:58:53:f1:
         bd:b7:b4:e6:0a:c8:03:83:25:31:95:21:82:87:a6:f8:1b:98:
         7f:be:07:e5:af:bd:59:43:a7:1a:e3:28:11:1a:03:d8:ff:93:
         2c:ce:79:a6:ea:93:53:bf:01:6c:f4:20:ac:14:ae:ec:09:5f:
         11:a5:9a:27:36:5b:fe:06:23:2c:45:86:c7:1f:4d:f2:fe:e9:
         f0:22:a8:80:85:0c:ea:b7:d3:60:1a:08:df:07:08:f9:ca:b3:
         59:b9:b4:22:6b:83:ec:f3:ed:81:66:fa:36:c8:34:da:14:ec:
         ea:81:45:3a:96:91:83:69:9a:ac:a8:25:f1:db:2a:1e:15:29:
         7f:03:0c:a6:84:fa:af:18:f3:8e:92:cb:fd:15:34:92:55:cb:
         1e:06:1d:19:57:45:11:35:98:74:cc:87:5e:89:2b:40:4b:af:
         1a:c6:0b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:47:36 2025 by rpki-client