Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b099ed77-e77b-3f8e-bea2-d032593071e5.roa
File:                     b099ed77-e77b-3f8e-bea2-d032593071e5.roa (raw, json)
Hash identifier:          j299SQI+L7ogRBGQm7IR6Kbpi07nRFfq/1wOZ90I/8A=
Subject key identifier:   A9:8A:E7:E0:30:C2:F9:21:CE:27:70:9F:D0:79:DD:98:E7:9E:64:80
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858498A345A883459EC2CC7FA2A60
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b099ed77-e77b-3f8e-bea2-d032593071e5.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     18779
IP address blocks:        172.121.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:5a:88:34:59:ec:2c:c7:fa:2a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=bb7b4fb9-dae5-4507-9707-85ad56d53f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:43:b9:3a:42:49:d3:13:4f:b7:d5:fe:3f:1d:
                    ad:5c:10:d4:d7:35:75:64:aa:94:36:f3:13:fd:17:
                    54:ec:46:f2:8e:ed:3d:85:36:a8:4f:82:9c:ad:f7:
                    bb:c5:f4:09:2f:24:a2:4e:bc:16:a9:1e:c2:a7:e9:
                    d7:02:fa:b0:0d:a4:28:49:fc:37:ad:d3:93:f7:49:
                    9a:26:f0:56:d9:33:cc:e9:7a:55:1e:cc:1c:e1:b4:
                    7c:91:b3:90:24:d8:0d:72:9a:a5:cc:1b:29:d8:c2:
                    d6:1e:6f:53:8e:d0:cf:44:ac:5b:72:66:2f:0e:9b:
                    b5:87:77:5a:05:6f:3c:03:8c:18:cd:3f:94:fc:69:
                    8b:b4:f4:26:15:43:f8:23:07:85:8a:81:15:d4:00:
                    d2:76:6a:b3:9c:2c:36:d9:ed:b4:11:73:61:6f:6e:
                    21:ed:1f:3e:d2:37:37:6c:81:7c:a5:16:21:cd:79:
                    8e:2a:53:8d:6d:75:81:de:c9:7a:c7:d6:35:3a:b5:
                    56:c2:35:c4:8b:47:2f:53:96:32:2e:ee:fb:44:fe:
                    10:0a:ce:e4:e2:09:b1:9c:79:e5:e4:d0:cd:00:50:
                    f2:2b:b8:ba:a8:da:a0:3b:ea:8e:a3:5e:35:bc:24:
                    07:e0:18:e4:18:fa:36:d5:b9:ad:78:9f:a5:4a:1d:
                    2a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8A:E7:E0:30:C2:F9:21:CE:27:70:9F:D0:79:DD:98:E7:9E:64:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b099ed77-e77b-3f8e-bea2-d032593071e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:ac:d5:08:54:4a:ad:ab:dd:13:75:8a:ec:28:1e:66:df:95:
         78:03:29:74:c4:b9:1b:c2:22:ff:89:88:0e:23:5d:d5:20:31:
         a1:50:d9:e8:66:93:2e:db:32:a2:de:d1:92:04:b6:41:a3:b5:
         67:d0:75:ee:a8:53:7e:8a:32:87:61:83:1b:75:36:3b:40:60:
         57:4e:8f:18:b6:ca:d0:78:1d:a2:c8:86:96:93:45:ea:06:01:
         9b:56:41:56:b8:46:09:09:55:3f:2d:e1:29:ee:a6:49:19:6d:
         58:c2:79:9a:43:ff:13:5b:79:3e:40:63:4a:d0:69:95:0f:27:
         54:c7:f8:a5:43:48:86:a7:7a:03:1c:14:ec:b0:32:c4:4c:b8:
         a5:00:d0:5b:19:9a:13:84:d4:f1:74:ff:e3:79:1e:d3:14:90:
         54:74:8f:60:08:af:b9:d2:c3:8f:9e:71:ee:52:21:b2:e0:2e:
         fc:82:4b:6f:02:4c:42:52:00:f4:7a:74:4e:3f:6a:b5:72:61:
         a6:4b:d3:21:61:fa:e1:3f:49:d1:e2:07:2c:a3:78:6f:e7:79:
         8f:7b:6c:c8:12:cc:5f:8a:06:1e:9e:01:61:b1:c3:34:60:15:
         19:df:ee:ce:4f:d0:d9:39:82:cc:63:e0:04:5f:1b:83:e1:28:
         09:11:82:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:03:57 2025 by rpki-client