Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8e1729a1-1fab-398a-8b5d-2d8556b949b9.roa
File:                     8e1729a1-1fab-398a-8b5d-2d8556b949b9.roa (raw, json)
Hash identifier:          UvOYLuGN2blaNbaRxUmgigErZIlV0qc2wxH9EYP+scM=
Subject key identifier:   97:C2:20:14:53:7C:D8:AD:96:86:09:A7:36:FD:39:E3:D0:82:79:53
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858498A3456CF3C36160D3BC0D780
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8e1729a1-1fab-398a-8b5d-2d8556b949b9.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     18779
IP address blocks:        172.120.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:56:cf:3c:36:16:0d:3b:c0:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=964ed6f9-93e2-457e-a166-3bf01f65e861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:56:6f:75:62:16:8a:e5:79:ad:a6:5b:11:68:
                    87:4f:67:e4:fa:44:71:67:dd:44:06:6a:94:b2:5f:
                    87:ca:26:f7:48:a8:2a:bf:21:60:36:5d:c5:13:2f:
                    01:9a:80:f0:82:dc:ee:3f:d2:3f:ef:da:69:f6:35:
                    78:11:8a:6d:cc:45:b6:24:98:f5:98:43:0b:74:2c:
                    db:19:ea:b1:50:5f:07:f0:14:70:c8:98:e7:91:b1:
                    87:8b:11:f2:14:61:34:d2:ce:dd:d9:7f:74:a7:cf:
                    5e:07:04:8c:70:dd:f2:81:8d:14:b1:be:6b:4e:96:
                    cb:d5:08:2c:d2:da:3d:91:fc:64:93:7a:33:69:ee:
                    ca:00:f1:0f:f2:ed:b3:94:7a:d8:ed:47:af:75:10:
                    01:28:65:45:a7:7e:1e:7b:a9:88:b6:52:b4:7d:bf:
                    0e:81:fb:04:9d:97:9d:8b:f0:d7:94:04:7c:cc:c7:
                    d9:9c:f6:65:48:c2:91:aa:d6:d9:7f:e5:19:af:c7:
                    60:39:0a:30:51:06:06:24:35:d0:a2:7a:ad:cb:ab:
                    f2:18:04:f6:59:a7:76:bb:72:57:08:73:f6:50:1a:
                    26:a3:5a:c5:7a:c3:c8:ff:02:22:a1:2e:8c:f5:9f:
                    74:17:be:ee:7a:6c:30:63:e5:22:9f:80:e0:95:b6:
                    43:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C2:20:14:53:7C:D8:AD:96:86:09:A7:36:FD:39:E3:D0:82:79:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8e1729a1-1fab-398a-8b5d-2d8556b949b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:97:c1:cb:4b:9b:db:45:9d:24:c0:de:c1:1a:83:93:66:d9:
         19:d9:eb:7d:c7:fb:d5:f7:35:2d:b3:15:9a:78:5d:d2:93:cb:
         03:df:ad:fe:e3:80:77:0a:3e:c9:70:43:f5:60:10:13:ec:e2:
         f8:f3:41:e0:c7:cd:e1:be:3f:68:0c:3e:58:14:25:49:5e:8c:
         bb:0a:48:83:c5:c3:58:0b:26:a2:11:06:58:3a:ff:a8:01:64:
         a6:d2:03:55:8a:04:03:36:08:02:c1:4f:22:0c:e6:92:5e:a9:
         1a:c3:59:b1:a9:28:d5:38:5d:7c:c9:1c:fd:d4:2b:ad:e7:2e:
         0b:7d:54:55:fa:2d:33:22:e3:ed:9f:c6:3d:13:4e:05:2e:fc:
         a8:e3:7c:90:56:e9:70:b8:25:0f:2a:f4:20:21:89:af:8c:e1:
         04:8b:e2:1e:20:5d:61:c0:60:98:af:64:5e:34:35:1a:fa:71:
         14:c3:a9:57:a8:0f:52:03:89:80:ef:dd:91:53:85:e5:61:ef:
         bc:b2:68:fd:2d:41:63:7f:32:9e:4b:b0:6b:77:18:43:87:15:
         86:14:04:f4:2b:69:6d:6a:6f:cb:c9:60:c8:41:72:65:49:96:
         7c:36:cb:99:cc:14:5f:c0:1f:95:a3:95:e4:9c:f8:eb:41:c9:
         02:7d:b1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:47:57 2025 by rpki-client