Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e47f7629-04bb-3c7f-85cb-e777670e587b.roa
File:                     e47f7629-04bb-3c7f-85cb-e777670e587b.roa (raw, json)
Hash identifier:          RcJp4ONrW2nLioFzX5KM1j5e20AxSB1PglpH8WCLIxA=
Subject key identifier:   11:04:0A:F9:EF:49:9C:C2:B3:74:DD:2D:01:C5:FC:5C:C3:91:6E:50
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848AA07B0FFEE7C0FD153DBDCC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e47f7629-04bb-3c7f-85cb-e777670e587b.roa
Signing time:             Sat 25 Jan 2025 17:49:48 +0000
ROA not before:           Sat 25 Jan 2025 17:49:48 +0000
ROA not after:            Fri 25 Apr 2025 16:49:48 +0000
asID:                     18779
IP address blocks:        172.121.38.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:07:b0:ff:ee:7c:0f:d1:53:db:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 25 17:49:48 2025 GMT
            Not After : Apr 25 16:49:48 2025 GMT
        Subject: CN=b61f287c-b718-4349-bca3-a186a5b07fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c9:b0:4e:82:71:42:7b:ca:b4:76:4a:00:fb:
                    19:7d:36:1b:69:7d:5c:a5:67:51:ab:33:74:6c:d5:
                    5f:c7:8a:34:05:7d:e3:4a:01:fa:3c:4c:88:61:41:
                    a2:e2:5d:af:90:36:b4:7d:41:49:7d:c2:3e:c6:65:
                    fb:95:5e:e5:f4:9f:0f:5b:c8:c6:b6:af:e3:46:46:
                    c0:20:1f:ed:bf:b8:6f:02:22:8a:b8:ba:0c:34:56:
                    71:e8:64:aa:26:d1:03:67:2b:1e:a0:c5:ec:09:3b:
                    1e:2c:8f:e4:ce:63:af:36:5e:0b:77:7f:21:e9:a7:
                    df:96:6e:82:d1:fc:16:10:8c:fb:ab:ec:b4:f1:7c:
                    67:f4:7d:89:75:da:e7:3d:89:2b:9f:47:b4:8f:a7:
                    be:47:b0:57:66:3c:4a:34:f7:ff:a9:96:f2:c7:1b:
                    08:d9:d6:e0:a2:bc:5f:3e:75:db:4c:6c:f1:32:c6:
                    03:74:7b:1b:94:c9:05:85:3f:e8:6e:eb:3a:3a:5a:
                    08:37:a0:e9:d3:4a:6a:66:78:da:83:98:d5:9a:3d:
                    d0:9f:41:32:63:33:a6:f8:55:8f:fe:7a:37:ab:ad:
                    93:af:71:91:69:e8:2b:cc:ef:e2:32:f2:d1:76:db:
                    47:cc:93:04:aa:32:db:95:ea:e5:e5:c5:19:f3:f4:
                    fd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:04:0A:F9:EF:49:9C:C2:B3:74:DD:2D:01:C5:FC:5C:C3:91:6E:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e47f7629-04bb-3c7f-85cb-e777670e587b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:ec:25:e3:ee:78:a5:5a:72:64:dd:00:a4:9e:10:36:4e:8e:
         72:1d:8d:e0:ef:f4:8d:ea:8b:2e:ee:a2:43:9a:c1:37:e5:a9:
         d5:42:a7:f7:0a:74:39:2d:14:c5:a5:19:42:85:74:c9:8c:4f:
         ca:6e:14:89:e9:15:b0:5f:d9:bd:51:d9:90:5e:9f:47:79:8f:
         09:ff:77:2f:3b:8f:0e:7b:02:45:65:3f:1b:57:57:11:04:99:
         f3:d6:74:b8:dd:c6:99:1d:ce:ef:38:ea:d5:8e:b6:2f:41:7c:
         9e:13:15:48:6a:3e:ef:b3:09:9f:18:7b:7d:f5:6e:f9:dd:05:
         72:58:32:f7:b2:81:aa:c7:a8:d5:c2:5e:6c:86:ac:bf:60:c5:
         b0:42:1c:1f:14:25:21:6a:0f:74:72:c7:c6:c5:a7:ad:fe:34:
         e4:14:84:43:03:60:32:88:a3:b7:1d:17:d4:57:29:56:cc:28:
         e7:7a:4c:df:70:b0:04:71:62:9d:63:ca:d0:a4:56:05:42:d1:
         e8:76:8b:42:d1:e1:55:eb:37:cc:5c:8c:5d:f0:46:ae:45:ed:
         a8:5d:6a:a7:81:0b:21:da:a4:6d:85:00:2d:b8:09:3f:53:ef:
         f2:d6:82:d9:b3:ad:c4:fc:9c:07:08:61:86:25:dd:0c:83:f2:
         20:e7:1c:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiqB7D/7nwP0VPb3MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDEyNTE3NDk0OFoXDTI1MDQyNTE2NDk0OFowLzEtMCsGA1UEAxMk
YjYxZjI4N2MtYjcxOC00MzQ5LWJjYTMtYTE4NmE1YjA3ZmRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8mwToJxQnvKtHZKAPsZfTYbaX1cpWdRqzN0
bNVfx4o0BX3jSgH6PEyIYUGi4l2vkDa0fUFJfcI+xmX7lV7l9J8PW8jGtq/jRkbA
IB/tv7hvAiKKuLoMNFZx6GSqJtEDZyseoMXsCTseLI/kzmOvNl4Ld38h6afflm6C
0fwWEIz7q+y08Xxn9H2JddrnPYkrn0e0j6e+R7BXZjxKNPf/qZbyxxsI2dbgorxf
PnXbTGzxMsYDdHsblMkFhT/obus6OloIN6Dp00pqZnjag5jVmj3Qn0EyYzOm+FWP
/no3q62Tr3GRaegrzO/iMvLRdttHzJMEqjLblerl5cUZ8/T9kQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBEECvnvSZzCs3TdLQHF/FzDkW5QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZTQ3Zjc2MjktMDRiYi0z
YzdmLTg1Y2ItZTc3NzY3MGU1ODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrHkmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFLsJePueKVacmTdAKSeEDZOjnIdjeDv9I3qiy7uokOawTflqdVCp/cK
dDktFMWlGUKFdMmMT8puFInpFbBf2b1R2ZBen0d5jwn/dy87jw57AkVlPxtXVxEE
mfPWdLjdxpkdzu846tWOti9BfJ4TFUhqPu+zCZ8Ye331bvndBXJYMveygarHqNXC
XmyGrL9gxbBCHB8UJSFqD3Ryx8bFp63+NOQUhEMDYDKIo7cdF9RXKVbMKOd6TN9w
sARxYp1jytCkVgVC0eh2i0LR4VXrN8xcjF3wRq5F7ahdaqeBCyHapG2FAC24CT9T
7/LWgtmzrcT8nAcIYYYl3QyD8iDnHP4=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:42 2025 by rpki-client