Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c5b0de65-3c2a-3927-83d5-c7c9a44513a3.roa
File:                     c5b0de65-3c2a-3927-83d5-c7c9a44513a3.roa (raw, json)
Hash identifier:          jpuMZrKCwXwLgDFoieFIiQNq4cSR70V/DSlm0R1Y0s0=
Subject key identifier:   EC:73:8F:2C:E9:4C:83:BD:2E:E6:D0:D2:51:11:0B:6A:94:56:5A:6A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849927B259BEBB30F926D5E2A60
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c5b0de65-3c2a-3927-83d5-c7c9a44513a3.roa
Signing time:             Sat 19 Apr 2025 00:09:58 +0000
ROA not before:           Sat 19 Apr 2025 00:09:58 +0000
ROA not after:            Fri 18 Jul 2025 00:09:58 +0000
asID:                     834
IP address blocks:        172.120.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:7b:25:9b:eb:b3:0f:92:6d:5e:2a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 19 00:09:58 2025 GMT
            Not After : Jul 18 00:09:58 2025 GMT
        Subject: CN=f1e66434-a9f4-4e8b-802a-817cc9158a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bb:79:b7:6c:8e:9c:ed:0e:d4:9b:5d:69:54:
                    e3:fc:94:56:52:e1:ba:f4:96:93:f7:ae:90:3e:82:
                    d3:c8:e6:00:55:d5:89:e6:40:55:69:29:03:ef:12:
                    4a:3f:ad:dc:bf:8a:4c:ff:bb:08:20:1f:6d:cb:ab:
                    df:5c:d6:c3:41:fd:09:cd:c6:ea:c6:ad:16:cd:d9:
                    d5:a3:03:ae:c6:07:0c:f9:13:da:87:8b:49:e5:3f:
                    dd:22:50:d0:40:ce:de:f3:27:ad:23:33:2f:ce:54:
                    85:ce:d9:df:8c:fc:7e:6b:0a:98:dd:4d:e0:dc:3f:
                    40:86:8c:9e:a9:0f:02:03:3f:e3:17:5c:d7:65:3a:
                    2b:e4:04:fd:33:b3:a9:0b:45:af:a4:f4:45:9d:46:
                    76:9d:14:45:0d:e6:7b:b8:01:1e:8d:e4:51:30:21:
                    8a:fa:f5:ba:0b:40:fa:68:a5:b9:73:66:c7:4e:8a:
                    73:98:9d:cb:bb:08:6f:5b:7a:21:f2:8a:f9:99:1a:
                    1b:f9:56:9e:f4:18:7f:10:61:9e:9f:6e:e8:14:90:
                    f1:b9:48:9a:e8:e6:63:8a:a2:5c:f1:17:5d:17:de:
                    c4:c9:d8:c0:31:a1:73:ed:c9:24:1d:ee:a4:a7:4c:
                    b2:48:9d:f2:a8:c6:07:de:37:09:ff:66:29:b1:43:
                    8f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:73:8F:2C:E9:4C:83:BD:2E:E6:D0:D2:51:11:0B:6A:94:56:5A:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c5b0de65-3c2a-3927-83d5-c7c9a44513a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:99:24:6e:93:60:34:44:2c:c1:b1:0b:99:f5:5c:7b:cd:d5:
         fd:6a:27:6f:33:00:ee:d3:a7:6e:b1:2f:cf:b7:f1:e5:70:27:
         57:3f:45:8a:65:da:53:34:b1:0b:f3:89:c9:bd:79:61:30:f7:
         1c:15:97:c3:56:ce:c5:c4:63:bc:27:dd:ec:fa:18:e7:d7:fe:
         40:91:fa:68:51:6b:17:29:e3:93:86:43:c5:f4:30:d3:b9:19:
         aa:47:3e:4c:dc:11:6c:ca:c6:c9:d2:41:9b:86:4d:bd:55:21:
         e2:d6:c1:33:ae:d5:7e:15:b8:c4:35:81:b7:2a:07:b8:76:fc:
         6a:cb:73:d9:23:d8:48:f3:9e:6a:9c:70:bb:7f:bd:e2:60:60:
         5b:5b:7e:09:ee:0c:6c:72:cf:b6:37:9c:51:e2:c1:a0:86:cf:
         f2:5e:1a:29:e0:65:fd:e1:18:ba:33:e8:80:1f:32:bd:1c:37:
         86:29:47:3d:96:95:ad:c7:51:70:dc:11:f2:a0:e1:b9:43:68:
         4f:6b:c0:bd:3b:93:11:00:d4:3c:a4:ff:e2:2d:f2:cf:85:63:
         dd:bd:8e:0d:78:1e:b5:1d:a4:50:8a:49:0d:6f:1e:c0:4c:57:
         2a:df:4e:d3:96:97:a9:eb:22:5b:25:da:da:73:e8:8a:da:a9:
         cc:52:29:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:55:51 2025 by rpki-client