Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/44e1104e-cc60-3e16-a445-badc3f69a729.roa
File:                     44e1104e-cc60-3e16-a445-badc3f69a729.roa (raw, json)
Hash identifier:          7OtwBsFksfwBdDiVUdnp4+8kWHyJbeStCAcTjTj2iTE=
Subject key identifier:   05:65:94:CA:7D:FC:9F:A7:C4:7B:B6:74:AD:21:BF:05:E3:5F:9B:AD
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858498A345B6AD2858D0C58908B00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/44e1104e-cc60-3e16-a445-badc3f69a729.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     18779
IP address blocks:        172.121.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:5b:6a:d2:85:8d:0c:58:90:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=08a52227-1eeb-4414-bec3-e1998e0e1f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:66:54:3a:f8:f8:e7:d6:bc:ea:5b:6c:9a:1e:
                    b5:3d:22:72:14:04:94:7f:72:14:a9:44:66:27:81:
                    d8:7b:43:0d:21:ec:97:db:92:77:94:75:d5:b2:33:
                    84:ff:c8:ea:53:8e:0b:26:62:ab:ff:a1:e7:82:41:
                    79:51:41:be:d6:98:56:35:60:ed:66:95:52:a6:ff:
                    dc:b5:34:6f:94:2e:78:ba:43:ca:41:a9:73:b8:85:
                    48:f6:b7:57:3d:06:01:1a:75:90:02:a2:98:c7:e9:
                    63:d5:d7:56:36:91:68:ee:68:5f:5e:1a:eb:37:fa:
                    47:d2:bb:cb:24:93:73:9f:55:9d:a4:82:e0:a0:50:
                    a4:72:31:e1:cc:ca:0c:45:2a:be:e4:8a:10:77:24:
                    9b:ea:21:25:cc:83:b5:6e:ae:cb:f4:29:c8:d7:66:
                    d9:e8:cb:9e:df:45:83:95:6f:0f:ad:39:b7:61:87:
                    bd:61:4b:3f:f5:bb:76:2e:1e:6a:ca:25:0c:b3:f4:
                    f5:25:d1:a1:ef:68:87:fb:3d:b1:db:53:fe:80:56:
                    18:53:21:41:4f:e1:b7:6c:ae:4b:e4:19:40:33:04:
                    7d:ee:f8:ed:9a:38:67:b8:27:88:e5:03:34:05:57:
                    79:16:4f:f9:27:cf:12:b0:4e:a7:9f:e4:9e:03:81:
                    17:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:65:94:CA:7D:FC:9F:A7:C4:7B:B6:74:AD:21:BF:05:E3:5F:9B:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/44e1104e-cc60-3e16-a445-badc3f69a729.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:d7:1c:64:80:07:ff:09:28:4d:64:8d:d8:5a:fe:da:ca:81:
         04:28:77:b7:92:50:69:53:55:08:a2:a5:ab:bd:85:b4:af:e0:
         d8:d6:c2:1e:bd:75:42:ef:da:4f:bc:3c:0a:a6:e0:51:1c:ca:
         5f:6d:f9:08:38:0e:b6:94:c1:ea:b2:a7:d8:26:bb:7f:ff:cd:
         b3:53:be:b2:ea:9c:d1:04:c3:67:39:6c:8d:c3:68:89:0f:98:
         e7:26:6b:25:1c:b9:4f:37:e2:2c:a7:b5:9c:38:51:17:81:b8:
         24:86:be:3b:51:9d:3b:d9:db:fd:38:41:c9:ad:c4:7d:15:3b:
         04:c2:0f:8b:6b:cc:80:c7:89:f8:04:75:c5:8f:fd:79:59:40:
         52:51:99:e8:f3:b0:49:00:48:7e:04:51:27:42:b2:14:40:ac:
         0e:3b:2d:a5:e7:35:83:44:fe:7c:10:74:f2:05:dc:44:a6:40:
         c1:de:4e:b2:91:20:68:94:c7:77:28:0d:4f:13:8e:3a:21:41:
         20:a0:e5:93:f0:f1:36:73:7a:94:fa:83:80:ce:84:ab:17:6e:
         24:04:23:01:c6:f3:6c:d1:cc:95:54:67:40:79:46:5d:1f:34:
         f9:e3:18:7b:74:94:42:7f:fd:3a:10:6a:05:21:bc:95:3a:b6:
         ba:6a:4d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:20:26 2025 by rpki-client