Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/39158e08-933b-3939-87e4-f20d7a3d74c1.roa
File:                     39158e08-933b-3939-87e4-f20d7a3d74c1.roa (raw, json)
Hash identifier:          n7SS6TmtFP2PWBRblTA2H2uaAMoe0JEakSs4GfG/h58=
Subject key identifier:   69:79:FF:E5:B8:34:A6:95:AF:26:48:D6:5F:EA:37:A0:F1:E9:DA:34
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584964844C29E99EAA68B0A87232
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/39158e08-933b-3939-87e4-f20d7a3d74c1.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     400536
IP address blocks:        172.252.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:4c:29:e9:9e:aa:68:b0:a8:72:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=76ff4206-9616-4ef2-9de1-cf997aa042b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c8:9b:ff:2d:6b:77:ff:6b:26:7f:f3:36:b3:
                    39:24:67:8c:d6:52:d9:f0:c4:16:5e:66:e8:55:f9:
                    9c:87:ee:e9:86:62:79:a6:62:f2:10:92:95:05:b6:
                    b1:03:e6:50:10:18:41:43:ca:69:98:d3:46:a8:6a:
                    18:86:1c:65:58:30:a4:71:9b:cb:6a:23:08:92:b4:
                    e3:c1:ae:89:48:6b:5c:b1:df:de:0b:f4:40:c8:47:
                    7a:2a:3d:4e:d0:26:6a:47:38:14:05:d3:41:ef:ab:
                    88:76:df:1a:cd:6e:bc:de:aa:1e:ac:48:88:17:c6:
                    01:37:fe:7e:2e:58:3c:e0:4b:56:e2:9f:42:43:ed:
                    58:dd:ab:14:d2:18:93:62:99:e0:d2:d1:96:a5:6f:
                    a4:b5:ca:a9:ce:45:6b:1e:f2:d0:ed:37:5d:94:8e:
                    2d:b8:1e:f6:03:54:6f:46:f2:a6:e2:17:d0:83:fd:
                    86:f1:08:24:3a:4a:c6:35:a0:fc:9c:40:ea:b7:63:
                    fb:7f:8c:7d:d8:b9:d2:10:e6:1f:2a:79:88:7f:07:
                    92:eb:f6:3c:bb:7d:ee:4c:ae:62:aa:f3:ab:74:ab:
                    7c:56:64:f4:f9:91:fc:c9:fc:04:93:03:ec:39:01:
                    f5:c1:16:de:ed:5b:a1:64:cc:dd:48:8a:9b:19:51:
                    ab:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:79:FF:E5:B8:34:A6:95:AF:26:48:D6:5F:EA:37:A0:F1:E9:DA:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/39158e08-933b-3939-87e4-f20d7a3d74c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:cd:49:7e:13:27:4b:27:e6:7e:3b:a6:ed:16:bc:75:d2:4c:
         c9:6b:73:72:5d:b9:cd:c0:2b:8b:9e:e8:3b:65:90:9f:b8:92:
         6b:dd:93:db:ad:d5:13:41:18:37:b8:d6:ca:52:41:40:6b:d1:
         47:f7:fd:9b:48:bd:92:12:fe:57:2b:4e:f0:1e:bd:9c:61:99:
         eb:b2:98:fc:19:f4:a8:3b:3d:bf:e7:07:df:90:04:8a:b2:47:
         b0:9e:a0:42:c5:66:d4:80:05:d5:a5:99:bd:4b:e8:05:88:30:
         63:f2:41:51:97:ae:77:2d:16:bb:bc:4e:a0:6a:ff:e8:ab:86:
         06:b3:44:b3:d0:34:39:30:80:9f:cc:50:b9:8d:4a:c3:7f:3d:
         3f:04:3a:a5:44:43:8d:66:7e:4c:16:13:36:e9:b9:3e:07:03:
         f9:ca:51:29:ec:18:b7:58:e1:41:8b:0b:20:5d:08:fd:fa:7f:
         ee:8e:2a:07:05:7e:52:8a:f5:2e:7b:36:c2:4a:56:d4:66:d8:
         31:fe:35:3b:9d:3e:9d:0d:d5:fa:d8:39:f7:6b:35:6f:1e:34:
         b7:c7:66:e7:80:e4:2e:d6:ec:54:f1:52:51:d4:52:f6:09:82:
         dc:ee:dc:6a:2e:62:f0:c4:dd:f2:12:79:c6:8e:89:48:06:fb:
         3b:0a:5e:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhEwp6Z6qaLCocjIwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk
NzZmZjQyMDYtOTYxNi00ZWYyLTlkZTEtY2Y5OTdhYTA0MmI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8ib/y1rd/9rJn/zNrM5JGeM1lLZ8MQWXmbo
Vfmch+7phmJ5pmLyEJKVBbaxA+ZQEBhBQ8ppmNNGqGoYhhxlWDCkcZvLaiMIkrTj
wa6JSGtcsd/eC/RAyEd6Kj1O0CZqRzgUBdNB76uIdt8azW683qoerEiIF8YBN/5+
Llg84EtW4p9CQ+1Y3asU0hiTYpng0tGWpW+ktcqpzkVrHvLQ7TddlI4tuB72A1Rv
RvKm4hfQg/2G8QgkOkrGNaD8nEDqt2P7f4x92LnSEOYfKnmIfweS6/Y8u33uTK5i
qvOrdKt8VmT0+ZH8yfwEkwPsOQH1wRbe7VuhZMzdSIqbGVGrvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGl5/+W4NKaVryZI1l/qN6Dx6do0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMzkxNThlMDgtOTMzYi0z
OTM5LTg3ZTQtZjIwZDdhM2Q3NGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPwBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB3NSX4TJ0sn5n47pu0WvHXSTMlrc3Jduc3AK4ue6DtlkJ+4kmvdk9ut
1RNBGDe41spSQUBr0Uf3/ZtIvZIS/lcrTvAevZxhmeuymPwZ9Kg7Pb/nB9+QBIqy
R7CeoELFZtSABdWlmb1L6AWIMGPyQVGXrnctFru8TqBq/+irhgazRLPQNDkwgJ/M
ULmNSsN/PT8EOqVEQ41mfkwWEzbpuT4HA/nKUSnsGLdY4UGLCyBdCP36f+6OKgcF
flKK9S57NsJKVtRm2DH+NTudPp0N1frYOfdrNW8eNLfHZueA5C7W7FTxUlHUUvYJ
gtzu3GouYvDE3fISecaOiUgG+zsKXnA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:31 2025 by rpki-client