Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3619be61-f11d-3fe6-b5af-6dc1adf3225c.roa
File:                     3619be61-f11d-3fe6-b5af-6dc1adf3225c.roa (raw, json)
Hash identifier:          U0w6kGWgC1JUKBFfBxNd4QaCgY8c0jGN4lRrZvBnCe8=
Subject key identifier:   FC:81:6C:F9:01:C9:34:14:3F:A5:3A:15:82:62:CA:A6:D0:A0:FB:58
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584943E2881ED396A29644DA9180
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3619be61-f11d-3fe6-b5af-6dc1adf3225c.roa
Signing time:             Fri 21 Mar 2025 20:29:25 +0000
ROA not before:           Fri 21 Mar 2025 20:29:25 +0000
ROA not after:            Thu 19 Jun 2025 20:29:25 +0000
asID:                     272149
IP address blocks:        172.121.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:43:e2:88:1e:d3:96:a2:96:44:da:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 21 20:29:25 2025 GMT
            Not After : Jun 19 20:29:25 2025 GMT
        Subject: CN=f8b3931a-9c96-4117-9868-df48421044d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b4:34:4b:c2:a1:28:f7:11:d7:e3:a9:31:fb:
                    6b:83:46:8a:8a:f3:d1:1d:a3:1c:6a:c5:a3:e2:f6:
                    a1:ba:8a:74:aa:f7:31:ce:9d:86:fc:21:7e:76:7b:
                    19:ce:9a:89:81:8e:48:bd:66:db:b2:ef:4d:cb:b9:
                    f3:b4:4e:fa:71:c4:13:33:32:73:e4:de:7a:3b:f4:
                    91:23:58:66:1a:73:bd:61:94:55:5f:50:95:b8:28:
                    65:72:d5:66:9a:42:28:89:45:60:02:d1:98:af:87:
                    ad:f6:9a:ba:17:cf:7c:09:87:2c:05:fe:1e:28:12:
                    1e:fc:94:44:1b:2e:7b:4a:10:66:75:49:07:4c:0e:
                    fd:ba:a3:63:6a:9d:ba:ec:53:0b:73:2e:70:78:4a:
                    47:d5:d7:13:32:65:97:7d:ed:e8:d6:3b:71:53:e3:
                    7a:97:32:d0:21:bb:5e:65:f2:d4:aa:cb:e3:48:4e:
                    14:28:71:c0:62:b9:34:ef:e4:d9:ce:a2:91:12:12:
                    d5:2b:58:ef:5c:50:1f:c6:f3:62:b0:be:5e:96:c9:
                    10:f1:78:af:c5:24:4f:7b:99:93:bd:1d:89:e8:c0:
                    50:e5:97:1e:90:82:cb:2c:1b:a1:d3:a4:9b:e5:f8:
                    68:72:42:c6:f3:24:a2:79:fd:56:7e:59:85:4d:57:
                    55:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:81:6C:F9:01:C9:34:14:3F:A5:3A:15:82:62:CA:A6:D0:A0:FB:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3619be61-f11d-3fe6-b5af-6dc1adf3225c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:aa:31:ba:1f:74:15:18:1c:69:f7:9d:3c:54:85:3d:89:61:
         ae:33:0d:5b:cc:ee:7d:81:f8:cb:0f:c0:cb:2f:30:77:3b:c0:
         ae:4d:82:8e:50:ca:0e:d3:1a:db:c6:ea:e1:c4:1d:f9:c7:12:
         d1:78:cd:74:71:a6:b7:aa:60:7b:2b:da:1e:ae:17:70:1f:c1:
         f8:24:5b:b7:1c:a6:2f:6d:b5:bc:45:18:1b:45:01:03:c6:05:
         6f:4a:cc:e0:ee:7c:3d:12:e6:33:8e:12:e4:a4:b2:e2:df:25:
         fc:e9:c5:85:ef:aa:0f:86:fb:c4:76:41:d3:9f:34:a4:66:67:
         65:14:4c:be:20:8b:55:5c:42:a7:29:a5:36:f6:5f:58:10:98:
         8c:cb:e7:97:16:df:95:a4:66:a9:42:09:7e:b6:25:2c:00:4e:
         b4:b3:69:09:39:da:3e:23:c3:3d:6a:53:05:07:84:bb:08:e2:
         ef:5e:9c:0b:e4:30:43:1c:9c:27:17:de:5e:d3:07:c1:49:ac:
         f2:43:c4:69:62:24:a2:00:19:8b:9a:07:c2:c3:77:6d:c5:7b:
         9f:b6:79:54:a9:29:a6:d1:a2:7a:b7:e0:3c:de:57:fe:a0:6e:
         3f:ab:6e:8e:a1:2c:de:17:49:4c:5e:ab:74:4e:70:f4:6d:e1:
         95:19:ef:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:49:04 2025 by rpki-client