Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/813fa125-f576-38b7-9650-4355031725c7.roa
File:                     813fa125-f576-38b7-9650-4355031725c7.roa (raw, json)
Hash identifier:          GZ1fFTrsbx6Io3xwJwoKWpucNs0/YZVnr7wEfmIgXfI=
Subject key identifier:   58:3A:EF:3F:B2:9B:AB:F6:86:B6:A8:3E:6D:C4:3D:B7:A6:22:23:20
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B0CDC03A43BBB1BF85F471A28
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/813fa125-f576-38b7-9650-4355031725c7.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     5065
IP address blocks:        172.120.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:03:a4:3b:bb:1b:f8:5f:47:1a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=b267f295-283b-4be5-872f-095977e6f081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:86:8b:90:19:28:98:a7:ae:35:b6:a7:84:ab:
                    77:5e:66:4f:f3:9a:b8:5d:2a:eb:06:b6:6d:d6:18:
                    fe:80:b0:c1:f0:d6:34:27:af:76:ce:18:66:92:f5:
                    ea:25:d4:48:57:2d:f5:3c:d8:a8:bd:f4:fd:a2:13:
                    7c:88:ae:a4:ae:5d:fa:65:fd:90:f1:f4:27:fe:15:
                    d8:3a:e1:19:6e:f1:c3:f4:50:64:e8:97:f6:df:af:
                    cc:93:42:19:17:be:34:0c:05:39:94:35:9b:4d:14:
                    b6:f1:59:c4:d6:3d:d1:36:35:76:20:4b:b4:72:4d:
                    26:b7:ed:4b:a2:c1:ae:9b:03:35:00:b1:11:0b:0d:
                    2d:87:f9:07:bf:9d:7f:36:2f:9b:e8:ad:11:84:e5:
                    45:e7:db:8d:ea:df:d8:d0:42:b4:dc:17:6e:a1:70:
                    67:77:c5:d7:24:a5:25:0a:32:fd:d3:db:65:2c:e4:
                    df:ba:8d:49:32:d2:37:1c:a2:72:af:c4:6e:96:29:
                    58:6c:4f:5e:c7:c9:43:44:fd:2e:29:fc:d7:6f:24:
                    7e:a4:28:bc:0d:4b:34:b5:48:29:b7:d9:71:ed:24:
                    b6:a0:e8:b1:2e:76:63:4d:3d:85:db:f8:ed:77:a7:
                    03:59:bb:d7:50:1b:10:7d:82:1f:e3:32:69:03:63:
                    d5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3A:EF:3F:B2:9B:AB:F6:86:B6:A8:3E:6D:C4:3D:B7:A6:22:23:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/813fa125-f576-38b7-9650-4355031725c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:28:30:72:00:34:09:f0:96:70:65:27:ac:be:27:56:fe:f9:
         ca:9f:74:60:9b:72:82:8d:cf:80:1c:1b:70:87:1e:75:5b:4b:
         bc:cc:e1:16:a1:7d:72:4d:9f:e6:22:64:f6:0a:70:ee:c1:1f:
         c3:83:9c:4e:06:ca:d6:b1:4c:d8:59:1d:14:01:75:69:19:51:
         b3:38:c6:97:0e:aa:83:7f:59:93:83:e1:59:5f:26:d6:36:e5:
         72:53:70:78:24:15:f2:58:67:87:19:7b:8a:1f:89:a9:c7:b5:
         75:ab:2f:03:d4:3b:78:4a:aa:df:cc:e2:51:c8:0e:71:94:9e:
         6b:00:02:89:a9:e3:31:7f:f7:b2:27:24:44:1b:fb:a5:82:07:
         10:46:4f:4f:74:c8:65:5a:eb:74:3e:d1:db:88:9d:16:46:f1:
         4b:33:42:33:ac:73:50:af:0e:a7:d9:4c:84:d4:fc:95:5e:24:
         63:80:a8:ca:c4:7f:d4:d8:33:23:c5:23:e4:bd:95:73:fe:bf:
         8c:b9:9b:44:8c:5d:c6:c9:4e:b2:0a:2c:e8:93:e8:40:32:15:
         c0:66:1b:ad:7c:1d:a0:1d:71:a3:df:70:1e:8d:01:e8:39:af:
         66:76:75:b1:af:81:ae:7c:5f:c5:4f:15:36:38:53:b6:40:45:
         3a:af:1c:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3AOkO7sb+F9HGigwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk
YjI2N2YyOTUtMjgzYi00YmU1LTg3MmYtMDk1OTc3ZTZmMDgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIaLkBkomKeuNbanhKt3XmZP85q4XSrrBrZt
1hj+gLDB8NY0J692zhhmkvXqJdRIVy31PNiovfT9ohN8iK6krl36Zf2Q8fQn/hXY
OuEZbvHD9FBk6Jf236/Mk0IZF740DAU5lDWbTRS28VnE1j3RNjV2IEu0ck0mt+1L
osGumwM1ALERCw0th/kHv51/Ni+b6K0RhOVF59uN6t/Y0EK03BduoXBnd8XXJKUl
CjL909tlLOTfuo1JMtI3HKJyr8RulilYbE9ex8lDRP0uKfzXbyR+pCi8DUs0tUgp
t9lx7SS2oOixLnZjTT2F2/jtd6cDWbvXUBsQfYIf4zJpA2PVpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFg67z+ym6v2hraoPm3EPbemIiMgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvODEzZmExMjUtZjU3Ni0z
OGI3LTk2NTAtNDM1NTAzMTcyNWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHhdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEIoMHIANAnwlnBlJ6y+J1b++cqfdGCbcoKNz4AcG3CHHnVbS7zM4Rah
fXJNn+YiZPYKcO7BH8ODnE4GytaxTNhZHRQBdWkZUbM4xpcOqoN/WZOD4VlfJtY2
5XJTcHgkFfJYZ4cZe4ofianHtXWrLwPUO3hKqt/M4lHIDnGUnmsAAomp4zF/97In
JEQb+6WCBxBGT090yGVa63Q+0duInRZG8UszQjOsc1CvDqfZTITU/JVeJGOAqMrE
f9TYMyPFI+S9lXP+v4y5m0SMXcbJTrIKLOiT6EAyFcBmG618HaAdcaPfcB6NAeg5
r2Z2dbGvga58X8VPFTY4U7ZARTqvHNE=
-----END CERTIFICATE-----
Generated at Sat Oct 11 11:15:51 2025 by rpki-client