Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/909cb150-e483-31fb-982b-cc221560a408.roa
File:                     909cb150-e483-31fb-982b-cc221560a408.roa (raw, json)
Hash identifier:          UCy/3N+0j5d0fL7ghG1Bc55ryKyYVZloSTqEYyY57zk=
Subject key identifier:   9A:AE:C3:35:62:C9:88:6E:42:BD:87:BB:65:F5:C6:46:9D:F2:F3:AC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A612B05EDB7960E2D0A352300
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/909cb150-e483-31fb-982b-cc221560a408.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     18779
IP address blocks:        142.252.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:05:ed:b7:96:0e:2d:0a:35:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=03faeb88-f073-47c5-b47a-c7cf87c53619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:be:bf:b8:90:46:b5:87:26:76:de:0f:60:3b:
                    46:e0:db:62:6a:0b:44:83:1d:32:a1:a8:0a:37:12:
                    44:70:58:06:37:46:69:a3:d4:37:07:25:9f:bd:3b:
                    03:1e:f7:13:55:3d:5f:bd:71:81:75:6c:47:34:6d:
                    d4:f9:35:c9:7e:d2:cb:2b:68:aa:44:79:4a:e3:c0:
                    c3:3e:28:5e:a7:96:76:88:38:e6:8d:e1:56:00:5b:
                    b8:a0:7f:9d:38:05:3a:5e:0a:c8:89:40:61:e6:fe:
                    71:4f:62:55:d2:47:8b:a9:e8:3c:fd:5a:be:2a:2c:
                    e0:61:f9:a7:9d:44:36:82:d9:b5:3c:51:a7:75:98:
                    1f:0d:46:5e:da:7d:8b:d9:ff:4c:f8:3d:6b:da:ce:
                    5c:4f:63:20:e9:b7:3f:d9:52:20:00:6c:8d:ec:bc:
                    d2:13:37:88:1d:65:e1:85:3c:2c:b4:fc:1b:3d:72:
                    d2:7c:ad:16:c5:e2:11:18:c3:70:19:02:02:f8:86:
                    0d:e6:e8:94:43:79:49:80:b5:b4:2c:34:bd:b5:bb:
                    99:7c:56:7e:27:a5:53:62:bb:6c:e1:0c:8f:c0:af:
                    3a:0e:72:c2:8f:73:22:91:6d:d4:e0:64:8a:a5:04:
                    ec:99:0b:fe:b4:df:4c:8b:8a:42:79:95:00:69:c1:
                    68:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AE:C3:35:62:C9:88:6E:42:BD:87:BB:65:F5:C6:46:9D:F2:F3:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/909cb150-e483-31fb-982b-cc221560a408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:6e:b8:c5:2a:80:34:f1:21:29:72:78:6b:e3:0c:cd:a2:f9:
         81:0c:42:44:a9:6e:5d:94:36:6a:fb:30:e0:af:e7:e3:40:37:
         23:d0:cf:d7:bd:0d:21:d9:26:b4:26:4b:4f:99:59:d0:4e:ff:
         77:1f:29:34:5e:af:39:11:ce:aa:28:0f:ba:58:0d:9e:26:c1:
         38:a4:2d:57:26:75:23:e2:21:3b:ff:10:11:2c:59:0a:06:81:
         ea:c2:b5:73:dd:4c:c2:04:ad:0e:78:09:ee:95:b2:2e:6c:d1:
         bf:d3:3f:2f:6e:29:4b:1e:28:6e:6a:17:40:52:b4:1f:df:11:
         fb:4f:49:fd:92:33:8e:39:5f:eb:c1:69:d8:9d:60:e2:9a:37:
         38:95:6c:7a:7c:15:3c:f8:8a:eb:75:e9:2f:79:5c:49:91:8a:
         6e:bf:22:96:32:3f:a5:e6:bf:b0:2b:67:cc:fa:05:f0:4d:f8:
         0c:47:2a:b9:2f:72:7d:fd:3a:3e:50:bd:c3:8a:55:fe:c5:4e:
         3d:2f:e9:9e:4c:2d:e4:2e:eb:5f:64:2d:56:7a:72:23:aa:d8:
         d4:49:08:af:91:c5:cd:02:52:d8:f3:26:18:e2:4b:56:f3:f4:
         75:e9:22:4c:44:df:41:46:90:01:13:be:a5:13:42:26:fd:9c:
         db:4d:d6:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKwXtt5YOLQo1IwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk
MDNmYWViODgtZjA3My00N2M1LWI0N2EtYzdjZjg3YzUzNjE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb6/uJBGtYcmdt4PYDtG4NtiagtEgx0yoagK
NxJEcFgGN0Zpo9Q3ByWfvTsDHvcTVT1fvXGBdWxHNG3U+TXJftLLK2iqRHlK48DD
Pihep5Z2iDjmjeFWAFu4oH+dOAU6XgrIiUBh5v5xT2JV0keLqeg8/Vq+KizgYfmn
nUQ2gtm1PFGndZgfDUZe2n2L2f9M+D1r2s5cT2Mg6bc/2VIgAGyN7LzSEzeIHWXh
hTwstPwbPXLSfK0WxeIRGMNwGQIC+IYN5uiUQ3lJgLW0LDS9tbuZfFZ+J6VTYrts
4QyPwK86DnLCj3MikW3U4GSKpQTsmQv+tN9Mi4pCeZUAacFoXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJquwzViyYhuQr2Hu2X1xkad8vOsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOTA5Y2IxNTAtZTQ4My0z
MWZiLTk4MmItY2MyMjE1NjBhNDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvyxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAItuuMUqgDTxISlyeGvjDM2i+YEMQkSpbl2UNmr7MOCv5+NANyPQz9e9
DSHZJrQmS0+ZWdBO/3cfKTRerzkRzqooD7pYDZ4mwTikLVcmdSPiITv/EBEsWQoG
gerCtXPdTMIErQ54Ce6Vsi5s0b/TPy9uKUseKG5qF0BStB/fEftPSf2SM445X+vB
adidYOKaNziVbHp8FTz4iut16S95XEmRim6/IpYyP6Xmv7ArZ8z6BfBN+AxHKrkv
cn39Oj5QvcOKVf7FTj0v6Z5MLeQu619kLVZ6ciOq2NRJCK+Rxc0CUtjzJhjiS1bz
9HXpIkxE30FGkAETvqUTQib9nNtN1oQ=
-----END CERTIFICATE-----
Generated at Thu Jul 10 23:32:28 2025 by rpki-client