Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a7c09d73-bc81-3afb-b13f-68ff3919f7f4.roa
File:                     a7c09d73-bc81-3afb-b13f-68ff3919f7f4.roa (raw, json)
Hash identifier:          bbm790zsrAlSxe5TJcO9rej/KbZn0h/lgBAFnhx1C+U=
Subject key identifier:   6F:77:3F:60:37:2B:E0:78:FB:AF:3F:33:F4:4F:38:FE:91:E6:FF:99
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849A1EF78C7E9461F1572768B80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a7c09d73-bc81-3afb-b13f-68ff3919f7f4.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     6939
IP address blocks:        172.120.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:78:c7:e9:46:1f:15:72:76:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=4f56c552-786b-4e64-b5fc-d7b2893fbad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c9:2c:47:08:e7:53:3c:e6:05:7f:c9:e1:fa:
                    bd:9a:ec:18:35:9a:92:49:5a:85:25:02:b0:6a:73:
                    02:17:3c:1d:06:d7:bc:d2:b8:3c:3c:e9:7a:f0:bd:
                    ae:6b:18:43:42:cf:6d:cb:c9:9e:67:62:59:5f:a0:
                    33:e2:5b:51:43:ae:85:57:92:4d:60:95:61:ed:8f:
                    90:42:96:15:05:71:b4:b7:87:04:b1:f3:d5:a7:4c:
                    8c:fa:25:94:24:2b:1e:a0:02:49:6c:86:51:7e:7b:
                    4a:6d:f1:7d:77:aa:08:f6:13:28:4c:2f:1b:94:f7:
                    c5:09:34:82:22:ee:1b:ce:20:01:65:ec:b9:2e:f9:
                    9d:66:a2:53:19:42:62:77:df:6b:03:50:95:74:f6:
                    37:8b:58:4c:9d:64:83:69:e3:3a:c5:4c:28:c2:c4:
                    d8:bc:8e:71:93:5e:c0:41:15:89:7d:24:a2:80:d9:
                    f9:31:59:fe:81:2b:29:b6:8a:a3:54:32:3d:55:eb:
                    6c:37:28:0d:6f:8c:fb:c9:61:6e:d2:5b:dd:d0:98:
                    25:55:60:7e:dd:60:f5:41:59:b1:b4:5f:16:4d:1c:
                    58:5f:5e:98:ed:6a:cc:91:d2:ee:b3:16:7d:9e:71:
                    69:d5:5f:17:a6:09:21:08:80:e0:27:4c:98:d6:62:
                    9a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:77:3F:60:37:2B:E0:78:FB:AF:3F:33:F4:4F:38:FE:91:E6:FF:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a7c09d73-bc81-3afb-b13f-68ff3919f7f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:e3:49:6d:d7:3c:dc:a1:5a:84:06:97:4f:8a:60:ec:66:91:
         da:11:0e:be:6e:81:4e:a9:c7:8a:09:4d:83:cd:a4:28:d9:32:
         4f:9e:32:ec:2b:c5:20:c7:9c:02:fc:a2:a4:09:b7:51:ed:62:
         e5:e6:24:65:0e:1d:8f:8a:94:ca:0d:d0:31:89:95:2b:19:23:
         7f:7c:73:c1:ba:78:2f:4e:03:51:31:ca:48:28:f0:ec:23:de:
         43:6b:be:be:0e:8a:f5:77:e1:64:4c:7f:85:7d:bd:df:40:41:
         bf:88:8d:fc:80:12:ce:ec:5e:cc:75:2c:3b:a5:03:68:ea:9a:
         c5:b0:83:ff:c8:95:0e:17:da:94:59:38:ba:11:73:c6:9c:8e:
         ab:a2:0f:21:c7:aa:6e:cb:df:b9:c2:8b:b1:01:05:7e:fe:b4:
         62:9c:1b:09:b8:91:59:01:8b:41:f8:fa:66:f5:e1:68:94:e3:
         cb:d1:0f:78:60:86:42:f1:bb:1e:7a:73:a1:b5:3c:51:07:06:
         2a:56:13:e1:ae:a3:49:57:af:96:e8:96:93:62:62:13:ff:9a:
         96:41:0f:2c:77:d4:34:1b:d6:f5:15:4d:64:2b:6c:60:21:81:
         d8:a2:3e:90:9f:18:26:82:d1:06:e0:1b:50:2b:67:01:b5:16:
         ef:b9:a9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:01:17 2025 by rpki-client