Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c5396cc9-86af-3ea6-bdd6-956d41439f79.roa
File:                     c5396cc9-86af-3ea6-bdd6-956d41439f79.roa (raw, json)
Hash identifier:          qDkg4f2Ettg8hKsuLjz2F81HCwKgPACMgqccTGh22Iw=
Subject key identifier:   5C:85:12:B0:5E:86:8A:20:45:BA:DE:9D:A2:E5:4F:30:FD:95:6F:50
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849F86023F9BB9B80EAC7E96500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c5396cc9-86af-3ea6-bdd6-956d41439f79.roa
Signing time:             Sun 25 May 2025 12:08:00 +0000
ROA not before:           Sun 25 May 2025 12:08:00 +0000
ROA not after:            Sat 23 Aug 2025 12:08:00 +0000
asID:                     214238
IP address blocks:        172.120.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:60:23:f9:bb:9b:80:ea:c7:e9:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 25 12:08:00 2025 GMT
            Not After : Aug 23 12:08:00 2025 GMT
        Subject: CN=527280d1-d6c0-4b35-a193-21db9b420d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1f:ae:dd:7f:d8:e6:b5:a8:6c:f0:ee:38:fd:
                    5d:e8:4c:61:5e:ea:32:96:41:3a:33:06:07:a4:05:
                    84:e8:1e:b1:ac:05:ff:bc:b0:76:0f:3e:2b:e7:eb:
                    c9:ee:64:dd:52:14:b3:93:a8:5a:06:9b:a1:05:5f:
                    81:11:e7:ab:94:ae:ce:ff:c1:a9:4a:c0:38:f5:af:
                    97:cd:3c:b3:3d:ff:95:aa:eb:70:c6:8b:65:2c:e0:
                    76:2b:29:6c:0f:90:c6:84:a8:b4:c8:4a:b0:08:22:
                    e3:c6:02:7c:21:a8:50:10:66:7b:24:ce:39:52:5b:
                    f6:c9:ca:a2:40:ef:8b:a5:05:98:d4:61:d9:a3:2d:
                    4b:eb:76:89:aa:70:a8:84:d1:41:0e:f3:63:43:e4:
                    1e:7e:be:18:ec:66:13:8e:6c:5d:bc:96:54:0e:5b:
                    b0:62:ab:00:ac:81:59:63:d5:86:cc:a4:e7:bf:78:
                    06:08:03:e4:44:6c:ba:44:83:69:17:10:5c:5e:be:
                    bb:93:62:a1:e5:4e:a9:b5:fa:d2:70:24:3e:82:34:
                    ad:2f:e0:51:1a:e3:7a:7e:a9:d7:c7:1f:a5:9b:2b:
                    e3:ca:3a:63:f8:cb:30:19:b8:b2:68:c9:cf:2e:76:
                    ff:70:cd:78:29:b6:e4:8a:00:11:5b:67:5c:c5:1c:
                    c4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:85:12:B0:5E:86:8A:20:45:BA:DE:9D:A2:E5:4F:30:FD:95:6F:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c5396cc9-86af-3ea6-bdd6-956d41439f79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:40:c3:39:93:76:0f:8e:56:9b:ce:89:98:53:c3:3c:fd:75:
         28:bb:d6:52:60:76:5d:ff:53:8f:14:fd:3c:5b:28:1c:79:d3:
         cc:82:2c:4a:e9:5a:c3:24:bb:9f:ac:8f:58:ec:ff:d1:10:16:
         f5:a7:cf:6c:e9:2f:30:20:8c:20:de:07:6b:97:8d:2b:14:89:
         e5:48:11:e7:c8:5e:1d:7f:15:ed:ab:e7:30:cc:ba:9e:d2:b7:
         d8:7f:27:d5:bb:0c:66:2b:2b:db:f1:6d:2e:de:1d:09:a3:ef:
         e2:d0:84:05:33:51:b5:bd:69:54:b0:fd:2f:05:49:ce:57:a9:
         57:6e:10:5c:97:81:89:be:35:84:ab:f9:d7:fd:8c:52:4a:c5:
         bb:fe:b6:67:51:d8:d5:52:77:39:6b:69:fe:18:ed:fb:13:ec:
         22:04:ba:a6:88:cf:53:4b:ba:d2:b7:ca:ae:fc:ea:41:63:94:
         0e:9f:55:d3:3c:6d:2b:69:8d:7a:a1:07:0d:8f:35:e9:56:e2:
         cb:89:ba:a5:7d:93:24:c2:83:d4:43:d9:ee:95:ab:4a:e2:0b:
         c1:20:0b:e4:5c:0a:51:4f:66:89:2a:6b:81:10:2f:a5:b3:fa:
         38:95:e3:d0:f3:2a:a4:c1:de:fd:d0:25:4a:a2:b5:18:97:a4:
         f0:78:c1:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4YCP5u5uA6sfpZQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDUyNTEyMDgwMFoXDTI1MDgyMzEyMDgwMFowLzEtMCsGA1UEAxMk
NTI3MjgwZDEtZDZjMC00YjM1LWExOTMtMjFkYjliNDIwZDIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx+u3X/Y5rWobPDuOP1d6ExhXuoylkE6MwYH
pAWE6B6xrAX/vLB2Dz4r5+vJ7mTdUhSzk6haBpuhBV+BEeerlK7O/8GpSsA49a+X
zTyzPf+VqutwxotlLOB2KylsD5DGhKi0yEqwCCLjxgJ8IahQEGZ7JM45Ulv2ycqi
QO+LpQWY1GHZoy1L63aJqnCohNFBDvNjQ+Qefr4Y7GYTjmxdvJZUDluwYqsArIFZ
Y9WGzKTnv3gGCAPkRGy6RINpFxBcXr67k2Kh5U6ptfrScCQ+gjStL+BRGuN6fqnX
xx+lmyvjyjpj+MswGbiyaMnPLnb/cM14KbbkigARW2dcxRzE1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFyFErBehoogRbrenaLlTzD9lW9QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYzUzOTZjYzktODZhZi0z
ZWE2LWJkZDYtOTU2ZDQxNDM5Zjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHiUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIdAwzmTdg+OVpvOiZhTwzz9dSi71lJgdl3/U48U/TxbKBx508yCLErp
WsMku5+sj1js/9EQFvWnz2zpLzAgjCDeB2uXjSsUieVIEefIXh1/Fe2r5zDMup7S
t9h/J9W7DGYrK9vxbS7eHQmj7+LQhAUzUbW9aVSw/S8FSc5XqVduEFyXgYm+NYSr
+df9jFJKxbv+tmdR2NVSdzlraf4Y7fsT7CIEuqaIz1NLutK3yq786kFjlA6fVdM8
bStpjXqhBw2PNelW4suJuqV9kyTCg9RD2e6Vq0riC8EgC+RcClFPZokqa4EQL6Wz
+jiV49DzKqTB3v3QJUqitRiXpPB4wd0=
-----END CERTIFICATE-----
Generated at Sat Jun 7 06:08:12 2025 by rpki-client