Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b61e76c7-91ae-3d14-bf68-3dba313fc883.roa
File:                     b61e76c7-91ae-3d14-bf68-3dba313fc883.roa (raw, json)
Hash identifier:          o/qwmM7gTkFhOpQIMqMKIRBt+rRRafyfzMg83XXz7nk=
Subject key identifier:   49:A9:46:C3:43:34:C6:49:9A:6B:16:35:D1:F3:53:8A:D0:9F:64:47
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A852B6CA41935A7F2C1C21E60
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b61e76c7-91ae-3d14-bf68-3dba313fc883.roa
Signing time:             Mon 14 Jul 2025 22:30:46 +0000
ROA not before:           Mon 14 Jul 2025 22:30:46 +0000
ROA not after:            Sun 12 Oct 2025 22:30:46 +0000
asID:                     44559
IP address blocks:        192.177.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:2b:6c:a4:19:35:a7:f2:c1:c2:1e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 14 22:30:46 2025 GMT
            Not After : Oct 12 22:30:46 2025 GMT
        Subject: CN=98e66f54-e114-4adb-b286-34e83a826dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c3:d9:cc:e0:07:48:6a:86:e7:18:53:a4:a6:
                    e7:4a:7e:3e:c2:7b:37:4a:8f:56:63:95:18:4f:57:
                    05:ee:22:09:4f:05:f4:0f:e7:23:92:f2:d6:66:20:
                    af:f3:fb:a5:37:be:87:dd:6c:64:1f:b2:28:5b:f2:
                    d1:76:6b:d2:2d:da:c3:01:65:18:1f:9a:03:1d:37:
                    b6:f1:a0:46:83:07:4f:cd:4f:d8:b9:60:89:c6:af:
                    17:26:9c:5a:f0:c0:9e:3f:f9:c4:ce:ed:2b:00:9b:
                    1f:e3:50:59:dd:36:28:f6:1b:a9:5c:b7:59:a1:7b:
                    0a:92:1d:0c:f6:7a:6a:ba:c1:83:12:99:20:3c:a3:
                    20:cb:ce:fe:c0:b7:ed:27:b2:0a:c0:58:6b:aa:ff:
                    d8:e0:33:2f:8e:65:4d:09:7f:b9:4b:a9:e8:42:62:
                    27:7e:ac:d3:9a:5f:1b:1a:66:8e:80:2a:24:8c:36:
                    3b:d7:e6:aa:5c:69:99:bf:fe:6f:50:f8:ed:eb:6b:
                    ee:84:de:ea:dd:87:a9:fb:78:57:15:12:e0:24:12:
                    dc:c9:76:4d:b8:93:7f:38:5b:25:56:04:9d:1a:a9:
                    e2:d1:12:c1:f5:b8:78:11:51:f0:e4:ec:4e:67:cf:
                    12:f1:db:e2:02:a4:b7:65:46:b7:5a:12:0b:25:78:
                    b7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A9:46:C3:43:34:C6:49:9A:6B:16:35:D1:F3:53:8A:D0:9F:64:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b61e76c7-91ae-3d14-bf68-3dba313fc883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:29:31:b3:6a:27:ac:a0:71:b2:a2:9b:6f:4c:87:1c:99:64:
         ec:33:92:91:a6:fe:fd:14:52:a3:06:76:3e:e9:c1:86:37:72:
         d4:93:88:f4:29:ad:7c:36:9b:50:7e:93:26:bf:ac:75:63:2a:
         d8:5e:d2:cc:23:d0:3d:ee:58:19:93:a4:8d:bd:7d:6e:05:f5:
         fc:27:48:d1:f2:f5:47:6d:a5:56:10:62:e2:cc:6f:9b:15:57:
         1e:e4:5f:c9:b8:5d:6b:81:b3:94:67:23:c6:40:47:6a:d4:f4:
         1e:c6:96:ac:16:70:64:87:1e:97:c8:d2:77:db:07:93:40:8c:
         9e:d7:aa:31:fb:78:c0:58:c5:12:f5:41:4d:c9:61:6d:79:76:
         e2:0c:52:ad:ee:c9:e5:ae:9e:6b:1b:8d:d9:f7:aa:18:a4:29:
         1f:46:ac:73:d3:22:9d:4c:12:f5:f0:03:f9:cd:99:8a:2a:60:
         de:32:f0:99:32:59:71:56:43:d9:ca:4d:2f:f4:3d:a9:fc:da:
         61:79:2e:35:95:6e:25:e2:3f:41:a8:7b:f9:e1:0d:db:79:f7:
         41:c9:89:63:d5:11:0b:d0:d4:d3:a5:71:87:35:5c:f6:21:1c:
         b5:52:d5:64:64:50:77:d5:28:bb:31:da:75:a7:cd:92:fd:83:
         89:c5:90:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFK2ykGTWn8sHCHmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDcxNDIyMzA0NloXDTI1MTAxMjIyMzA0NlowLzEtMCsGA1UEAxMk
OThlNjZmNTQtZTExNC00YWRiLWIyODYtMzRlODNhODI2ZGM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsPZzOAHSGqG5xhTpKbnSn4+wns3So9WY5UY
T1cF7iIJTwX0D+cjkvLWZiCv8/ulN76H3WxkH7IoW/LRdmvSLdrDAWUYH5oDHTe2
8aBGgwdPzU/YuWCJxq8XJpxa8MCeP/nEzu0rAJsf41BZ3TYo9hupXLdZoXsKkh0M
9npqusGDEpkgPKMgy87+wLftJ7IKwFhrqv/Y4DMvjmVNCX+5S6noQmInfqzTml8b
GmaOgCokjDY71+aqXGmZv/5vUPjt62vuhN7q3Yep+3hXFRLgJBLcyXZNuJN/OFsl
VgSdGqni0RLB9bh4EVHw5OxOZ88S8dviAqS3ZUa3WhILJXi3xwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEmpRsNDNMZJmmsWNdHzU4rQn2RHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYjYxZTc2YzctOTFhZS0z
ZDE0LWJmNjgtM2RiYTMxM2ZjODgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLGTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADMpMbNqJ6ygcbKim29MhxyZZOwzkpGm/v0UUqMGdj7pwYY3ctSTiPQp
rXw2m1B+kya/rHVjKthe0swj0D3uWBmTpI29fW4F9fwnSNHy9UdtpVYQYuLMb5sV
Vx7kX8m4XWuBs5RnI8ZAR2rU9B7GlqwWcGSHHpfI0nfbB5NAjJ7XqjH7eMBYxRL1
QU3JYW15duIMUq3uyeWunmsbjdn3qhikKR9GrHPTIp1MEvXwA/nNmYoqYN4y8Jky
WXFWQ9nKTS/0Pan82mF5LjWVbiXiP0Goe/nhDdt590HJiWPVEQvQ1NOlcYc1XPYh
HLVS1WRkUHfVKLsx2nWnzZL9g4nFkA0=
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:09:33 2025 by rpki-client