Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ac769227-e328-3ef7-a7d7-099e129a190c.roa
File:                     ac769227-e328-3ef7-a7d7-099e129a190c.roa (raw, json)
Hash identifier:          QPbTzU08YGfvJCF5y1iJX8ZHr4ttVMJwmD6vH/GTcEU=
Subject key identifier:   30:1E:EC:95:F7:AC:69:59:CD:83:7C:EF:4C:1A:04:AF:A7:0A:99:A3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848D6412D4834FFC30177657500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ac769227-e328-3ef7-a7d7-099e129a190c.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     212238
IP address blocks:        172.121.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:2d:48:34:ff:c3:01:77:65:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=6d3c8c17-3afb-4bcb-b1c4-6062773816a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:90:33:73:24:ca:7f:f1:dd:02:d4:d2:8f:00:
                    da:fd:49:4d:39:8d:9a:35:f6:16:88:d5:23:eb:43:
                    0a:0f:a5:0c:f2:a6:57:b5:55:81:e1:76:90:88:fe:
                    23:06:66:57:f0:71:cd:db:b8:ed:28:11:f1:be:22:
                    85:63:e1:28:c3:f2:23:b6:81:bd:bf:cd:ea:86:35:
                    91:fe:aa:e8:82:95:82:7d:b8:f6:27:47:22:e6:41:
                    fe:ef:a1:28:b9:88:ae:cf:a1:99:24:9b:60:3b:bf:
                    dd:00:78:60:2d:b1:c3:22:31:75:73:54:14:b2:40:
                    b2:fd:24:5b:54:32:7c:50:20:b5:16:39:46:75:fe:
                    45:40:3d:0a:e4:4c:9d:7b:9e:86:0c:73:04:e1:4f:
                    3e:5e:7b:66:72:70:87:a9:13:5b:6d:3d:35:12:56:
                    84:49:97:88:b8:1c:83:20:14:d6:b5:cd:71:40:79:
                    7a:c8:6c:ea:dd:67:44:7a:75:db:9b:ac:c8:6e:45:
                    35:23:b2:fe:c2:43:e3:31:f3:1e:6d:21:b7:7b:df:
                    e4:0b:52:56:bc:cb:b0:63:ad:8b:64:3e:b0:e2:79:
                    49:4c:78:30:66:3f:88:c3:7a:f2:4a:0e:49:9d:ba:
                    88:25:ec:eb:0f:9d:f8:6d:ed:01:77:fe:2d:92:e7:
                    bb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1E:EC:95:F7:AC:69:59:CD:83:7C:EF:4C:1A:04:AF:A7:0A:99:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ac769227-e328-3ef7-a7d7-099e129a190c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:9c:11:4d:d3:ea:c9:53:e5:ab:53:f4:eb:ec:25:2f:33:e5:
         cf:8c:bb:b2:63:fb:d8:16:ae:e4:aa:4d:57:0b:23:b8:98:fa:
         83:47:41:ee:69:86:df:4d:05:af:cf:60:60:39:2e:00:e6:e5:
         32:fd:68:2d:ec:f3:9c:d2:39:54:2d:06:95:d4:42:15:9c:7d:
         a9:a0:41:b7:16:cd:29:f0:36:24:cf:61:f9:af:17:12:a4:47:
         a1:24:da:22:ca:23:38:90:01:28:e2:d6:da:b7:8b:9e:aa:b6:
         e0:8a:c5:61:42:63:6f:4e:a6:e4:5c:b8:a0:1f:12:59:e5:c9:
         d3:4a:69:4e:5f:2e:0e:bf:b6:40:0e:74:f3:c3:d8:42:4b:d8:
         10:3d:57:ec:b8:86:5a:d5:af:37:1d:ba:75:ab:8b:5a:c3:6b:
         6e:e8:2b:a3:db:f3:97:02:34:9b:c5:5e:42:99:de:37:7b:10:
         d4:68:de:b4:49:ab:8b:8a:da:ec:42:4d:27:92:0a:8a:21:00:
         71:51:9b:9b:b7:e9:ad:40:ca:9e:00:6d:f5:4a:87:d4:c5:e2:
         32:83:e2:f7:54:1e:98:dc:a4:ee:82:7a:16:b6:c9:f1:1d:c9:
         9f:6e:e5:80:16:8f:7e:f1:bf:3f:65:78:77:7f:ca:ad:26:6b:
         98:91:17:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:56:36 2025 by rpki-client