Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1228a90d-4dda-39eb-9959-39c0106151b5.roa
File:                     1228a90d-4dda-39eb-9959-39c0106151b5.roa (raw, json)
Hash identifier:          YQgiX5wwKXQPxjmzYOk07btvHOoUH0PE7FoCPrvPgJg=
Subject key identifier:   7C:58:DD:80:E3:74:7F:3A:58:D1:3C:96:25:81:23:C4:DC:6E:EA:35
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A612B02C226BAF82CEF9B45D0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1228a90d-4dda-39eb-9959-39c0106151b5.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     18779
IP address blocks:        142.252.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:02:c2:26:ba:f8:2c:ef:9b:45:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=7f8d6786-ab21-431b-bd5b-0f11cabfdb19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1e:5b:8d:3c:35:43:e1:b5:7c:af:f1:0b:a0:
                    53:4b:4f:eb:30:99:29:71:63:34:25:b2:3b:39:28:
                    37:f6:b4:f6:09:5b:07:5d:27:3b:97:48:16:8e:4a:
                    53:8c:e5:92:6b:84:92:59:98:90:c2:9c:0d:ce:8f:
                    e1:47:25:de:81:0e:2e:87:4f:1f:44:e8:43:23:44:
                    44:ed:3b:ee:c0:19:11:ce:18:5d:b8:01:7b:b5:6a:
                    05:51:6b:35:89:d1:d3:f4:c5:66:ee:5b:e6:85:b8:
                    b9:7c:ee:f3:b9:ca:4d:a6:56:c8:cd:e3:85:57:95:
                    0f:f9:d7:f5:38:4b:92:4d:6f:c5:22:74:0d:f1:4a:
                    bd:3a:2f:07:fd:48:ba:68:e9:c6:86:ef:9e:5a:f4:
                    39:3d:5c:93:c2:ac:85:ea:08:39:fb:a4:12:14:96:
                    cb:5e:c8:48:ce:97:e9:f7:e2:bc:a9:86:a3:d2:af:
                    61:11:62:2b:90:38:f9:08:32:21:3e:7f:ed:67:6b:
                    be:c9:2d:9c:f7:60:3c:94:28:28:88:6a:d2:c3:ea:
                    8e:66:b2:8b:4f:85:7f:af:a5:09:d4:da:4a:82:cd:
                    7f:09:bb:62:55:11:59:a1:a5:63:53:89:41:6b:71:
                    3c:7b:d9:1d:80:e3:38:a7:fb:54:57:7f:a5:ce:1e:
                    70:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:58:DD:80:E3:74:7F:3A:58:D1:3C:96:25:81:23:C4:DC:6E:EA:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1228a90d-4dda-39eb-9959-39c0106151b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:e0:97:28:04:c5:f3:a1:b5:22:18:95:0d:50:70:f6:cd:d2:
         b3:65:8b:bb:e1:d2:b0:c7:10:62:2e:b8:77:29:d2:05:06:e3:
         a7:aa:5c:f4:68:4f:59:5b:ee:56:7e:91:8a:4e:0a:c9:68:a1:
         ce:46:e8:d7:b6:cd:99:bd:25:f7:27:c7:2e:da:05:f5:84:5a:
         bc:ad:f1:42:b5:e7:91:9a:68:5d:6b:5f:d8:7a:7d:e7:d9:27:
         1b:bf:d9:1c:48:cf:e9:04:03:32:2a:ed:bf:5c:23:f8:62:bd:
         eb:20:53:60:7b:3a:c4:8a:b9:de:cf:de:2d:15:fc:75:29:5a:
         e6:d2:c4:75:87:fc:aa:a1:1e:17:b8:54:83:4b:2a:b3:ab:b2:
         d8:f3:6d:6e:96:b9:ff:96:74:65:29:1d:0e:2d:c1:12:c0:23:
         e5:a2:77:53:f4:ce:af:a1:ad:76:66:8f:b1:3c:da:7c:8c:aa:
         04:de:78:cb:60:0b:0c:b3:59:57:ef:f6:a0:83:79:94:5e:fd:
         b3:8b:a7:cc:38:6c:98:bf:5e:8b:f0:3c:8e:de:bb:97:30:57:
         48:ac:d1:61:1d:36:1d:0f:0a:82:e8:01:70:d4:ac:02:59:ff:
         97:b5:3b:c9:0f:c7:76:d8:b9:f4:12:ee:c3:fc:53:50:58:76:
         b0:7e:05:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKwLCJrr4LO+bRdAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk
N2Y4ZDY3ODYtYWIyMS00MzFiLWJkNWItMGYxMWNhYmZkYjE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR5bjTw1Q+G1fK/xC6BTS0/rMJkpcWM0JbI7
OSg39rT2CVsHXSc7l0gWjkpTjOWSa4SSWZiQwpwNzo/hRyXegQ4uh08fROhDI0RE
7TvuwBkRzhhduAF7tWoFUWs1idHT9MVm7lvmhbi5fO7zucpNplbIzeOFV5UP+df1
OEuSTW/FInQN8Uq9Oi8H/Ui6aOnGhu+eWvQ5PVyTwqyF6gg5+6QSFJbLXshIzpfp
9+K8qYaj0q9hEWIrkDj5CDIhPn/tZ2u+yS2c92A8lCgoiGrSw+qOZrKLT4V/r6UJ
1NpKgs1/CbtiVRFZoaVjU4lBa3E8e9kdgOM4p/tUV3+lzh5wxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHxY3YDjdH86WNE8liWBI8Tcbuo1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMTIyOGE5MGQtNGRkYS0z
OWViLTk5NTktMzljMDEwNjE1MWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvwUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAXglygExfOhtSIYlQ1QcPbN0rNli7vh0rDHEGIuuHcp0gUG46eqXPRo
T1lb7lZ+kYpOCslooc5G6Ne2zZm9Jfcnxy7aBfWEWryt8UK155GaaF1rX9h6fefZ
Jxu/2RxIz+kEAzIq7b9cI/hivesgU2B7OsSKud7P3i0V/HUpWubSxHWH/KqhHhe4
VINLKrOrstjzbW6Wuf+WdGUpHQ4twRLAI+Wid1P0zq+hrXZmj7E82nyMqgTeeMtg
CwyzWVfv9qCDeZRe/bOLp8w4bJi/XovwPI7eu5cwV0is0WEdNh0PCoLoAXDUrAJZ
/5e1O8kPx3bYufQS7sP8U1BYdrB+BTQ=
-----END CERTIFICATE-----
Generated at Thu Jul 10 23:19:44 2025 by rpki-client