Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5cd7b600-f822-3982-8877-c672b20c823d.roa
File:                     5cd7b600-f822-3982-8877-c672b20c823d.roa (raw, json)
Hash identifier:          m0OElnbpPNee7O+23reOtlaxiSORj8eqVlqWpMRKc88=
Subject key identifier:   75:1F:D8:54:76:4B:BD:6A:66:0F:58:DC:05:D1:8F:63:AB:63:BE:45
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B6D2CC75AF511FA8970504E00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5cd7b600-f822-3982-8877-c672b20c823d.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     6939
IP address blocks:        172.121.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:c7:5a:f5:11:fa:89:70:50:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=2f24a20f-a66d-492f-99cc-635f0812848c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4e:74:0c:90:63:41:2a:bf:2c:50:cd:d7:97:
                    59:96:2d:79:62:13:3a:e9:c7:c6:1c:05:6d:c6:77:
                    e1:ce:4a:b3:5a:70:53:16:0c:65:b4:79:6a:fe:29:
                    e3:b5:16:b5:dd:86:76:1f:f5:bb:6d:c1:2e:fe:66:
                    29:76:56:78:9d:44:d2:c0:4c:fc:89:07:f1:56:3e:
                    35:45:99:18:d8:9d:fe:a8:f2:f1:ba:58:35:27:c4:
                    8d:90:bc:d8:12:e2:19:bd:53:51:a7:6c:f0:f9:6c:
                    01:80:64:99:fd:b7:3f:8b:ee:b3:20:cb:c1:d8:dc:
                    76:4e:8a:0e:05:15:cb:06:71:03:7a:0c:84:01:aa:
                    d6:81:44:df:c5:bf:7d:69:06:48:80:92:e8:f6:1f:
                    99:b9:ec:ad:27:7a:cd:e4:b9:95:78:ed:1f:b8:20:
                    ee:50:52:b8:d8:c3:df:7d:cf:b6:54:2d:03:ea:d8:
                    05:3a:24:10:64:5b:d7:47:c7:5c:71:65:85:ac:92:
                    3a:d7:6c:59:4f:97:cc:15:d4:c7:a6:b4:3a:cb:f3:
                    fb:7f:e4:50:00:50:de:35:e5:37:ec:89:45:c2:f0:
                    b8:5d:23:c1:af:d9:b4:a7:98:8c:8f:08:4b:bd:bb:
                    0a:e2:ab:f1:1a:96:6a:b8:d9:6c:f7:96:12:6b:4b:
                    09:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:1F:D8:54:76:4B:BD:6A:66:0F:58:DC:05:D1:8F:63:AB:63:BE:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5cd7b600-f822-3982-8877-c672b20c823d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:66:5d:8d:85:85:15:71:94:9b:d6:2f:f0:68:e7:ee:cf:29:
         f8:a8:5e:91:71:3e:1c:1b:b8:fb:a5:b1:3c:e1:a0:b5:dd:18:
         6b:16:8a:45:a1:7f:42:22:3f:70:8e:97:26:de:c3:3e:0a:c8:
         a9:dd:1d:23:0f:48:ee:49:8e:ba:92:1e:04:c8:a0:05:7a:83:
         03:70:41:80:d2:61:26:16:b3:d7:0a:d5:71:c1:cf:db:b2:9d:
         3b:b6:f7:7c:fd:d8:e6:e7:73:9e:09:9b:26:7a:8b:dd:3c:e4:
         bc:43:da:02:23:04:a9:56:41:42:7c:6a:8a:fd:e0:3b:ad:37:
         e5:a6:04:8f:2d:df:96:14:f0:67:25:cc:41:28:c2:0c:a7:d6:
         38:c9:68:b8:fd:9c:8f:8f:c4:b2:9c:3f:fc:41:15:8c:80:bb:
         28:f5:99:86:51:aa:cb:3c:fc:cf:de:09:91:f0:23:24:a2:81:
         ed:b9:d7:ae:46:a0:63:e9:bf:50:89:a4:13:ff:f0:e5:50:e2:
         33:d3:b5:6b:6a:1e:48:ce:54:1f:f6:47:93:74:bf:ee:7a:7d:
         5a:6e:12:3e:79:20:22:ef:4d:04:fb:2f:48:b2:ab:63:e7:ad:
         0f:a1:3c:0c:ab:75:4c:db:61:6f:34:58:54:7f:9e:77:e1:25:
         71:3b:26:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLMda9RH6iXBQTgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
MmYyNGEyMGYtYTY2ZC00OTJmLTk5Y2MtNjM1ZjA4MTI4NDhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx050DJBjQSq/LFDN15dZli15YhM66cfGHAVt
xnfhzkqzWnBTFgxltHlq/injtRa13YZ2H/W7bcEu/mYpdlZ4nUTSwEz8iQfxVj41
RZkY2J3+qPLxulg1J8SNkLzYEuIZvVNRp2zw+WwBgGSZ/bc/i+6zIMvB2Nx2TooO
BRXLBnEDegyEAarWgUTfxb99aQZIgJLo9h+ZueytJ3rN5LmVeO0fuCDuUFK42MPf
fc+2VC0D6tgFOiQQZFvXR8dccWWFrJI612xZT5fMFdTHprQ6y/P7f+RQAFDeNeU3
7IlFwvC4XSPBr9m0p5iMjwhLvbsK4qvxGpZquNls95YSa0sJDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHUf2FR2S71qZg9Y3AXRj2OrY75FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNWNkN2I2MDAtZjgyMi0z
OTgyLTg4NzctYzY3MmIyMGM4MjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHlPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC5mXY2FhRVxlJvWL/Bo5+7PKfioXpFxPhwbuPulsTzhoLXdGGsWikWh
f0IiP3COlybewz4KyKndHSMPSO5JjrqSHgTIoAV6gwNwQYDSYSYWs9cK1XHBz9uy
nTu293z92Obnc54JmyZ6i9085LxD2gIjBKlWQUJ8aor94DutN+WmBI8t35YU8Gcl
zEEowgyn1jjJaLj9nI+PxLKcP/xBFYyAuyj1mYZRqss8/M/eCZHwIySige25165G
oGPpv1CJpBP/8OVQ4jPTtWtqHkjOVB/2R5N0v+56fVpuEj55ICLvTQT7L0iyq2Pn
rQ+hPAyrdUzbYW80WFR/nnfhJXE7JqU=
-----END CERTIFICATE-----
Generated at Sat Oct 11 11:13:48 2025 by rpki-client