Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/813fa125-f576-38b7-9650-4355031725c7.roa
File:                     813fa125-f576-38b7-9650-4355031725c7.roa (raw, json)
Hash identifier:          u+OaVA+7RiF4LltCacf9nRwyeSIMrJa5ctwKY8gECAA=
Subject key identifier:   40:29:C2:4B:70:88:E7:6C:43:BE:DC:5B:69:E0:E1:01:AF:F5:64:4B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858494BC442A67841207F49C01200
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/813fa125-f576-38b7-9650-4355031725c7.roa
Signing time:             Mon 24 Mar 2025 16:14:53 +0000
ROA not before:           Mon 24 Mar 2025 16:14:53 +0000
ROA not after:            Sun 22 Jun 2025 16:14:53 +0000
asID:                     5065
IP address blocks:        172.120.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:c4:42:a6:78:41:20:7f:49:c0:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 24 16:14:53 2025 GMT
            Not After : Jun 22 16:14:53 2025 GMT
        Subject: CN=fcce24f9-db5c-4161-9137-f0701d8609db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b6:bb:dc:8c:44:f3:91:e9:09:92:86:67:53:
                    75:71:60:3b:c7:7d:e2:43:c0:31:aa:6e:82:d1:88:
                    0c:ca:00:ea:29:5c:a8:49:28:52:51:e4:8a:4f:14:
                    f6:12:2f:c6:42:a2:6c:b9:92:89:e2:42:e2:fe:61:
                    e6:aa:32:a6:98:e3:95:5c:c0:ec:e0:30:ed:5d:41:
                    7a:54:9e:2b:7f:a6:56:ae:9f:a9:9e:43:a2:63:c8:
                    7d:57:0e:bd:d5:be:c0:1a:82:b4:b3:cc:39:ae:5f:
                    26:de:21:40:b7:24:59:f5:38:b6:72:9a:e8:e7:d8:
                    29:ad:52:b3:b1:18:02:9e:25:6d:e1:a4:f1:e1:05:
                    db:ae:fe:c4:86:62:7c:9f:26:5a:87:e5:07:c2:74:
                    5e:4b:b4:bc:58:66:b6:7b:28:0d:55:08:09:61:d8:
                    f3:07:78:ca:ba:ca:69:f5:26:07:7f:f9:c7:f1:3a:
                    ce:48:ca:68:ba:b8:ab:cc:21:d9:7e:ad:03:7e:11:
                    cd:ad:03:e3:a5:85:bc:08:3b:2c:92:12:b0:e1:b7:
                    d1:56:dd:3e:e1:fc:bb:ed:3e:cf:0b:25:52:31:c9:
                    87:d1:84:a7:90:0d:53:4c:83:3b:5e:2d:62:6f:38:
                    32:5e:71:3b:36:13:3f:22:3d:c3:7c:40:ae:74:fd:
                    f3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:29:C2:4B:70:88:E7:6C:43:BE:DC:5B:69:E0:E1:01:AF:F5:64:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/813fa125-f576-38b7-9650-4355031725c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:df:c1:5b:7d:01:02:b9:77:8d:65:7e:a3:53:93:82:09:bd:
         27:ba:14:1f:96:ab:cf:d6:f3:08:aa:60:65:2b:2e:34:83:54:
         31:9c:df:58:42:fa:b0:12:63:40:44:3e:69:da:45:78:7f:dd:
         30:b0:01:fc:ec:0f:13:e9:c1:e8:69:a3:27:a0:4d:f9:3c:72:
         6b:e5:fa:e6:0c:68:3d:0e:16:86:f1:c8:76:a3:0f:5b:84:a5:
         93:c9:e5:57:74:f0:0b:ec:c0:73:e1:b6:17:95:0c:75:90:b7:
         74:63:b5:05:d9:29:7e:b6:80:45:53:c2:cc:7b:84:28:12:e1:
         b7:b7:1f:a2:6a:f0:01:5e:c7:29:9f:bb:8c:f4:45:e9:c4:c0:
         15:0c:3a:0e:89:0a:bd:97:07:ff:90:d2:83:d7:56:ba:18:2b:
         d7:38:4a:8e:da:74:3a:7e:b0:c3:ee:da:ea:51:23:19:6d:80:
         b1:56:36:ed:cc:c5:05:3b:5e:63:99:3a:90:42:d0:73:82:f8:
         10:7d:ca:c9:4f:69:0a:cc:62:7f:27:de:af:1e:d7:38:df:ff:
         3c:bf:5c:a9:61:8c:fb:9d:ac:21:0d:5c:9c:4c:45:f8:e1:c7:
         d0:bf:14:fb:c5:5c:b4:7f:41:b3:69:f0:d4:6f:73:9c:62:e6:
         54:c9:b5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:52:45 2025 by rpki-client