Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0929582e-8735-3f12-bb17-309ac976bd26.roa
File:                     0929582e-8735-3f12-bb17-309ac976bd26.roa (raw, json)
Hash identifier:          dSxf/ft7dottfz3zbdZp/N/4hT+rmhi2cUNCrGnSsaY=
Subject key identifier:   A0:8B:EE:0D:AA:84:91:4A:EB:55:72:9D:66:4A:95:4D:C6:6E:49:6C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A94D0E2C07D255909A7CAC700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0929582e-8735-3f12-bb17-309ac976bd26.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     212238
IP address blocks:        172.121.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:e2:c0:7d:25:59:09:a7:ca:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=d1c1fe40-25e9-4015-b206-5adb84cfbb99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:df:77:d2:16:20:28:21:e8:27:7b:fe:ad:d6:
                    b4:b4:c8:92:80:28:23:14:11:2b:e9:d1:1a:96:ac:
                    0e:eb:57:f2:6a:e0:ba:aa:89:c6:66:cf:88:6b:ae:
                    66:a5:83:f5:14:dd:09:7f:33:04:bf:5e:6d:62:8e:
                    64:c4:f4:a7:d6:30:3b:ec:38:35:ca:99:1a:42:fa:
                    b6:1f:07:c2:45:e6:40:26:81:e7:a6:b5:db:74:f8:
                    6e:36:48:4e:8a:69:ba:ab:60:bd:2b:18:27:cc:59:
                    d2:4b:d8:61:3a:30:37:55:e3:fd:dc:24:b1:9e:93:
                    fd:00:9f:ba:c6:4d:4f:dc:b5:12:1d:b1:20:9f:f7:
                    19:1d:22:70:46:46:e0:fb:bb:13:05:1a:81:f1:cb:
                    82:7f:8b:26:e8:8e:aa:ee:8c:2a:6d:84:49:70:24:
                    f4:5f:ea:4e:58:4f:ae:ef:1a:ee:4f:8f:bc:08:cc:
                    83:5f:63:46:1e:d2:58:2a:5a:03:13:73:42:52:9b:
                    61:da:e6:eb:d6:4c:f4:ac:06:6d:8b:5f:ac:26:21:
                    bf:59:33:f1:d7:9d:4f:7b:db:49:aa:7c:15:8c:8a:
                    d1:94:aa:81:03:aa:ba:f0:1a:9f:a9:66:5a:e2:80:
                    b2:61:39:55:74:77:53:f9:a9:c4:ac:ad:6d:0c:27:
                    5a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8B:EE:0D:AA:84:91:4A:EB:55:72:9D:66:4A:95:4D:C6:6E:49:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0929582e-8735-3f12-bb17-309ac976bd26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:28:34:55:da:19:59:71:43:c7:f8:07:b2:35:2a:31:4c:25:
         9b:14:5f:b1:6b:2a:4e:de:72:dc:c9:d9:e5:70:4c:68:d7:76:
         13:2b:d4:07:f8:82:57:1c:91:d5:6e:c9:4f:37:d6:6b:ea:a4:
         6e:1a:e9:cd:fc:24:09:22:7b:ce:fa:66:46:2d:e1:89:14:17:
         d7:7e:c8:fd:b7:d3:97:ee:43:5a:cf:23:51:a7:19:78:0c:b3:
         fc:c5:15:77:7b:4e:10:c2:ad:58:3d:f2:d9:89:20:6f:05:c8:
         36:90:8c:ac:fb:2e:d4:2f:69:1a:88:3c:d9:12:be:eb:a4:ec:
         98:8c:d3:d5:3d:ef:af:35:b0:23:b9:62:55:f8:c7:51:f6:39:
         28:51:1a:f5:4c:31:22:f5:5e:a7:fc:ff:58:9c:23:63:86:21:
         4a:d4:b7:f1:b0:be:a8:93:14:f2:41:f2:31:c0:fd:ba:03:3c:
         35:21:d2:ff:0d:84:e2:79:bf:6f:31:b9:3d:9b:7e:55:8c:86:
         26:f5:29:b2:29:9f:3d:d9:c0:cd:45:7b:ea:93:a8:8a:33:e3:
         42:d5:25:73:c7:d3:67:1b:ee:31:88:d1:a4:e1:22:3b:56:3f:
         63:88:19:e1:ed:9c:a0:28:a7:c7:d8:92:75:33:10:31:a6:71:
         4c:46:f2:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0OLAfSVZCafKxwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk
ZDFjMWZlNDAtMjVlOS00MDE1LWIyMDYtNWFkYjg0Y2ZiYjk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot930hYgKCHoJ3v+rda0tMiSgCgjFBEr6dEa
lqwO61fyauC6qonGZs+Ia65mpYP1FN0JfzMEv15tYo5kxPSn1jA77Dg1ypkaQvq2
HwfCReZAJoHnprXbdPhuNkhOimm6q2C9KxgnzFnSS9hhOjA3VeP93CSxnpP9AJ+6
xk1P3LUSHbEgn/cZHSJwRkbg+7sTBRqB8cuCf4sm6I6q7owqbYRJcCT0X+pOWE+u
7xruT4+8CMyDX2NGHtJYKloDE3NCUpth2ubr1kz0rAZti1+sJiG/WTPx151Pe9tJ
qnwVjIrRlKqBA6q68BqfqWZa4oCyYTlVdHdT+anErK1tDCdadQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKCL7g2qhJFK61VynWZKlU3GbklsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMDkyOTU4MmUtODczNS0z
ZjEyLWJiMTctMzA5YWM5NzZiZDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHkPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIUoNFXaGVlxQ8f4B7I1KjFMJZsUX7FrKk7ectzJ2eVwTGjXdhMr1Af4
glcckdVuyU831mvqpG4a6c38JAkie876ZkYt4YkUF9d+yP2305fuQ1rPI1GnGXgM
s/zFFXd7ThDCrVg98tmJIG8FyDaQjKz7LtQvaRqIPNkSvuuk7JiM09U97681sCO5
YlX4x1H2OShRGvVMMSL1Xqf8/1icI2OGIUrUt/GwvqiTFPJB8jHA/boDPDUh0v8N
hOJ5v28xuT2bflWMhib1KbIpnz3ZwM1Fe+qTqIoz40LVJXPH02cb7jGI0aThIjtW
P2OIGeHtnKAop8fYknUzEDGmcUxG8g8=
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:43:55 2025 by rpki-client