Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c6f8dd96-cfcf-3459-8aed-4a57242f9c93.roa
File:                     c6f8dd96-cfcf-3459-8aed-4a57242f9c93.roa (raw, json)
Hash identifier:          /z7R6+sF3rX4Z6RoM8t+E99o09cgm8SATPPJ0gTUBPM=
Subject key identifier:   B6:0A:73:E4:DC:B9:D6:DF:FE:6F:6B:98:9E:60:5B:53:A8:44:64:2F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858498A34587837C445D175D00B80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c6f8dd96-cfcf-3459-8aed-4a57242f9c93.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     18779
IP address blocks:        172.120.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:58:78:37:c4:45:d1:75:d0:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=cb505906-0073-4791-8abd-100018fe680b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d9:6b:69:d1:eb:dd:03:e5:58:aa:47:fe:10:
                    cf:ed:45:60:c8:27:3a:ee:1d:e2:9b:42:8b:40:d5:
                    a0:4e:a2:a7:4e:fe:9c:8b:f9:78:8d:c9:30:57:16:
                    f7:64:8b:15:1f:c0:ad:5d:f5:9d:76:b7:2d:61:45:
                    db:5b:db:20:5c:c7:ae:06:d6:46:97:50:83:b5:8b:
                    ba:5e:cb:da:b0:dd:06:92:c6:99:05:56:67:bf:8b:
                    e9:36:c3:9d:01:60:4e:74:c2:f6:ba:d0:6a:5f:07:
                    d3:65:20:94:f8:40:56:df:1a:26:bc:2b:d1:fa:a1:
                    df:b4:f6:7f:1e:68:41:4c:87:bf:0e:72:e9:5f:71:
                    d2:11:e0:ff:24:a7:7d:ad:0f:4b:1c:bd:09:ad:f5:
                    b1:69:78:17:a4:4f:57:fe:d9:8a:50:72:d8:57:3d:
                    c4:6a:9f:20:fa:e8:a2:21:06:27:84:4a:90:00:7a:
                    71:f9:cb:11:b6:28:ca:c4:1b:a2:09:fe:22:cf:be:
                    c8:38:c8:37:10:95:0c:63:3f:3f:a7:fa:3b:89:9f:
                    83:a5:f6:9a:7f:c5:9c:92:5d:e9:b4:ae:bd:51:80:
                    e6:cf:90:a1:71:5d:d7:0b:20:69:9d:d0:2a:93:5e:
                    81:ba:42:99:d0:41:2f:8c:10:54:10:bd:61:a1:e8:
                    88:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0A:73:E4:DC:B9:D6:DF:FE:6F:6B:98:9E:60:5B:53:A8:44:64:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c6f8dd96-cfcf-3459-8aed-4a57242f9c93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:03:32:f5:3c:7d:1a:f2:84:23:b2:de:07:73:56:65:53:8e:
         4b:71:b9:18:af:fd:d4:0f:dd:bb:e9:18:39:29:f4:07:6b:eb:
         79:31:cc:1b:0d:d3:fd:17:c2:20:75:63:61:6e:0d:c6:6c:9d:
         47:9a:bc:4c:da:40:ab:d7:11:06:bf:ea:34:80:0f:70:3b:59:
         80:55:c0:d1:af:d8:fb:39:f9:03:c5:3e:ce:85:99:74:10:5e:
         fd:20:11:f0:10:64:ac:9a:2c:3a:8d:2d:95:36:6b:fe:cf:66:
         dc:e3:c2:58:3f:f8:45:09:99:a2:de:20:4c:be:b1:5a:64:f0:
         40:8d:19:65:c4:09:60:83:9f:44:7e:98:33:a1:a5:a9:75:4e:
         8e:91:f5:c7:c6:13:01:0c:67:ef:d5:e1:04:a4:50:0a:36:23:
         d6:dc:cc:18:8c:18:67:77:4f:c7:1a:ff:b6:fa:c1:df:ad:90:
         7b:8d:20:79:80:d3:b3:46:a0:e8:94:47:f3:74:6c:f8:39:67:
         c7:d2:8b:96:04:1d:85:50:44:b5:f8:0a:19:14:bb:76:a7:68:
         0d:16:04:b9:1f:f1:e3:4f:f3:61:a7:20:2c:d9:86:52:ec:45:
         ee:10:54:72:72:df:39:11:a8:0f:1b:14:df:8f:84:e5:b1:b6:
         c8:58:4e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:04:28 2025 by rpki-client