Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/394c3db6-6a1b-32c1-9027-a122bb2287b4.roa
File:                     394c3db6-6a1b-32c1-9027-a122bb2287b4.roa (raw, json)
Hash identifier:          iOnEydJkoUB4+a5OAlQzMyr0m8/i8iXm5ReJT5rNQYk=
Subject key identifier:   24:E6:2F:AD:D2:58:72:46:B2:FC:9F:07:C3:C0:3B:32:8C:65:B9:17
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A10353863CD2C284C509F1700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/394c3db6-6a1b-32c1-9027-a122bb2287b4.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     55201
IP address blocks:        172.120.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:38:63:cd:2c:28:4c:50:9f:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=e5f4fde4-0221-4dd7-8b18-587cc6678413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:78:ba:1a:0e:88:d5:a3:70:65:e4:42:4d:5f:
                    71:d0:35:72:d4:c1:ca:7c:57:ee:c5:42:79:d8:99:
                    9a:a7:c0:0c:41:79:a4:c7:91:9a:8b:a7:6d:7d:9f:
                    7b:8e:ff:09:59:08:8e:8f:0a:79:e3:64:90:56:e1:
                    5e:a2:67:c4:c7:ea:3f:75:c2:31:06:59:5a:a7:a5:
                    1d:bb:95:43:d5:d2:bb:d0:e1:36:03:08:4b:e7:1f:
                    5e:8d:63:14:74:34:4a:2a:62:3b:cf:c4:59:e2:7c:
                    6b:ff:ec:91:b6:1f:77:37:f7:00:9f:59:27:a3:4a:
                    ce:a3:bb:c3:a5:62:21:80:85:71:0f:0c:75:2c:7e:
                    b8:2d:ed:95:c2:ec:3d:58:e6:0d:2c:bd:e0:d1:7a:
                    4d:97:30:5f:42:4a:7c:54:15:ec:1a:d9:5c:a1:ab:
                    e2:04:68:6e:50:32:aa:6c:5f:eb:42:ee:21:92:6f:
                    0f:c3:9f:a1:f2:34:22:6a:16:d0:d6:26:5f:33:a0:
                    7f:f9:e1:82:b5:a9:c0:f9:80:0a:28:fa:43:00:49:
                    70:92:31:b7:e0:03:6f:df:49:fc:ce:ac:44:4e:b9:
                    05:e9:2a:c3:7c:c6:4d:fb:6b:ed:8d:ee:59:ef:37:
                    6e:b8:7a:60:c2:1c:88:fb:e7:0d:13:3d:0c:51:99:
                    76:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E6:2F:AD:D2:58:72:46:B2:FC:9F:07:C3:C0:3B:32:8C:65:B9:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/394c3db6-6a1b-32c1-9027-a122bb2287b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:53:35:35:6d:8b:bd:11:1d:93:17:6d:87:c6:c3:87:9b:ab:
         8b:20:cf:1c:d2:d1:83:5a:9b:ba:79:91:da:cc:d0:2e:67:a3:
         e4:41:d2:13:7a:23:3a:cf:8b:00:82:ce:5d:24:88:f6:de:4c:
         ef:20:55:a2:d6:c2:53:a3:45:a4:49:f2:da:1d:19:aa:30:55:
         80:14:1d:9d:19:b3:0f:6d:a8:d4:ee:f8:b9:2f:71:25:29:3c:
         a6:12:03:53:e3:3e:88:23:c4:71:ee:6d:92:80:ba:bc:0d:e4:
         da:06:51:ba:4c:e0:c6:e5:90:25:71:cd:d6:65:86:c6:95:65:
         b1:a5:4f:2f:2c:4d:4d:1c:68:1f:38:52:bd:dd:a7:b4:f6:5c:
         da:46:e9:63:94:72:aa:98:c2:e5:8a:47:80:f1:3c:d9:47:3c:
         2e:5c:e5:15:8a:c3:f1:d9:2e:75:10:10:9a:9b:06:8e:8a:b2:
         21:e1:af:30:57:4e:46:15:21:8f:3a:9d:ec:dc:47:76:fa:65:
         8d:92:71:aa:41:69:c3:56:ae:63:71:9b:10:b2:72:40:8d:f0:
         28:57:3c:33:0c:b1:11:59:b5:2e:31:4e:72:51:8b:58:9b:82:
         a6:5c:39:78:87:17:f9:6c:0c:9e:09:3d:5f:dc:66:8e:6f:c9:
         e0:80:7b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:50:34 2025 by rpki-client