Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6a9a31d8-ae10-3bbe-abc8-f210dc9802bd.roa
File:                     6a9a31d8-ae10-3bbe-abc8-f210dc9802bd.roa (raw, json)
Hash identifier:          VpKy5wauoT840xEOZmjaJPOSmA/RnHg7CuCypnil2Mc=
Subject key identifier:   E1:0C:A0:2D:E9:66:93:9D:CE:FB:E3:2E:98:EC:04:2E:AB:4B:5D:28
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858498A345B0F2E9B7DE64F8E98B8
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6a9a31d8-ae10-3bbe-abc8-f210dc9802bd.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     18779
IP address blocks:        172.121.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:5b:0f:2e:9b:7d:e6:4f:8e:98:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=73def766-bf5f-4bd8-9b9c-e1f7f4db1937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:25:7f:ad:bb:9e:3b:96:f9:b9:6a:c9:df:4e:
                    db:17:8b:1e:72:34:4a:d4:06:79:8e:6f:6c:7f:1e:
                    40:4b:da:e9:5b:db:be:f4:1f:d1:b0:e5:44:dc:38:
                    ef:10:ea:50:af:ca:82:90:77:c0:b8:d1:b1:e0:44:
                    62:ab:b3:e0:61:d3:d4:20:a0:a2:26:e3:78:7a:f5:
                    ee:6c:5f:19:69:6c:e3:40:80:fa:f6:74:09:c8:ff:
                    f7:97:97:9b:eb:c3:d2:6a:54:f4:55:7c:3a:41:66:
                    b7:86:98:12:ae:e5:15:b8:59:ba:06:0d:4e:17:94:
                    27:04:c9:c2:94:12:9a:c8:1c:1c:b6:d3:b7:d2:1f:
                    87:f4:7f:39:09:b9:0b:b6:de:17:55:c7:8b:d8:3c:
                    89:6d:67:8b:e6:ff:62:f0:3b:ba:be:4a:b8:c7:b2:
                    3c:f0:4e:2d:3b:f7:35:78:1c:a9:0b:71:ac:92:54:
                    52:84:b3:28:fe:73:6b:0f:c2:c7:76:a7:fc:2a:14:
                    3b:be:a6:93:7a:d1:26:05:10:84:a1:c5:02:fd:f7:
                    c0:8d:e4:5a:d5:f9:56:07:62:97:54:ec:5e:31:57:
                    06:c5:5a:eb:c8:e6:f4:90:7f:1e:2b:43:6e:d6:b8:
                    57:84:bc:27:ff:ba:0f:75:a7:d9:0d:a1:06:b5:ec:
                    0a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0C:A0:2D:E9:66:93:9D:CE:FB:E3:2E:98:EC:04:2E:AB:4B:5D:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6a9a31d8-ae10-3bbe-abc8-f210dc9802bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:f9:1b:17:41:8f:0d:00:15:21:cf:ca:c8:50:6c:b6:99:30:
         30:35:fd:a1:52:fa:14:77:2a:4f:6c:aa:c6:52:f8:4c:5b:ca:
         e1:8a:2f:1e:36:6a:11:13:c8:8d:df:8a:ea:15:57:3a:50:e2:
         6e:8b:d2:8b:5a:fb:e6:21:df:50:11:c7:ab:77:32:a1:d7:1c:
         c5:21:b5:db:25:cf:51:41:24:fd:ff:dc:19:2d:fe:b6:21:6a:
         20:14:e1:d8:e3:a6:02:52:70:55:fb:a4:21:72:c3:1a:d0:fd:
         2a:36:f1:c4:94:ac:6c:5f:e1:04:f0:93:7f:b8:9e:e9:fc:6a:
         a0:79:de:fa:b0:de:b3:62:db:4d:f3:84:94:e8:c9:58:36:c8:
         0e:30:e9:34:2a:e3:06:68:d4:95:55:e6:88:36:f7:56:d6:4a:
         5a:62:c6:30:ee:14:61:31:4f:da:62:bb:b3:3d:3e:61:ef:2e:
         80:01:83:80:a0:47:24:95:e2:d1:0b:a4:67:8e:49:bb:13:cf:
         21:95:3a:c2:a8:5e:4d:e3:ae:8a:0c:a6:65:37:24:61:6a:e7:
         92:5e:a0:b7:ce:ab:b1:e4:f2:99:26:3a:00:2d:c9:c1:21:22:
         54:87:94:4d:db:9c:39:d7:5d:6b:7b:a2:3e:46:5b:10:fb:c4:
         6b:aa:c3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:48 2025 by rpki-client