Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/194abafc-9294-35b4-8fe6-bd2ebe4f3047.roa
File:                     194abafc-9294-35b4-8fe6-bd2ebe4f3047.roa (raw, json)
Hash identifier:          XWJiZaRz/4kWk4sgludKM14+UhoYA+UbE3GELcPdgPs=
Subject key identifier:   7B:A3:1D:11:D0:06:10:B2:46:10:9F:83:3C:B0:8B:98:2D:A8:0C:83
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A698B34B1A1076D5B5CA68000
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/194abafc-9294-35b4-8fe6-bd2ebe4f3047.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     18779
IP address blocks:        172.121.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:34:b1:a1:07:6d:5b:5c:a6:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=8f5cb183-d495-4754-a07e-ebb6de597f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e8:e5:c8:ef:8c:54:16:df:43:57:0b:c3:37:
                    3a:e0:01:8d:e7:f6:b8:61:ef:fe:26:9e:79:02:03:
                    9b:44:7e:21:49:fe:e8:d8:74:dc:8d:7c:eb:db:a9:
                    0d:d6:76:0e:f7:0e:a6:b8:e2:f2:f0:a0:7f:e2:2d:
                    37:aa:54:8f:91:8a:1d:98:2f:4e:db:e2:ed:87:8c:
                    dc:9f:a8:51:8b:d1:ea:c8:e3:5f:58:fd:44:5c:fa:
                    9a:f0:53:d6:3e:3a:75:20:8d:78:e5:0d:19:c7:15:
                    df:cd:93:ab:a9:f2:c9:dd:25:ea:3e:f8:3c:b5:dd:
                    7b:b6:70:c8:46:2f:a6:5f:6a:ed:2a:01:18:64:fb:
                    7c:30:dd:18:0f:4d:75:d1:29:ad:bb:1f:7c:a0:45:
                    db:4a:8d:62:99:40:55:8f:c0:11:8f:51:fd:fe:ed:
                    a9:fd:f7:d7:31:8f:91:ca:c0:9e:4e:66:6e:6f:1c:
                    32:45:a7:ea:c7:44:09:b4:11:a2:e6:25:4b:59:42:
                    1c:52:54:2d:3c:6e:b1:d3:02:66:32:3f:b2:0a:f9:
                    d6:e5:f6:d2:c9:98:d9:e6:34:19:cc:38:d5:63:e9:
                    95:3c:af:e3:4c:46:c0:7d:28:3c:d1:16:5a:1f:31:
                    f7:10:7d:68:49:50:52:0a:20:84:eb:58:1e:7e:f2:
                    50:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A3:1D:11:D0:06:10:B2:46:10:9F:83:3C:B0:8B:98:2D:A8:0C:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/194abafc-9294-35b4-8fe6-bd2ebe4f3047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:25:25:19:e9:4f:df:84:64:64:2c:83:9c:13:f0:38:2b:8c:
         09:51:31:d4:b6:33:a5:2e:e7:4a:ef:44:78:f7:39:88:34:20:
         33:39:93:ca:13:2e:bb:df:ae:89:33:66:00:fe:3f:60:a0:34:
         60:7c:34:c5:e0:a1:2f:05:b4:63:58:a7:8f:8e:14:c2:b9:bd:
         b2:f7:bf:d2:90:e6:73:c0:ad:30:3d:d1:3e:3a:13:60:26:8c:
         d1:38:58:90:4a:e6:db:8c:48:2b:f3:6c:c2:75:ce:a3:72:42:
         39:0b:02:69:bb:22:4e:3f:fa:51:2f:29:2c:43:90:d0:fd:82:
         62:2d:92:82:c7:a3:0c:ab:a4:66:61:81:78:b1:f7:b5:ee:e3:
         94:dc:b3:4f:77:52:57:e4:6a:e7:07:be:4c:36:62:e8:18:61:
         90:f2:e6:6c:7e:19:42:f4:65:f3:ec:f5:ce:fd:14:0c:01:d1:
         38:05:99:43:78:e6:3f:ee:aa:6e:bf:d1:1e:a0:fd:71:82:13:
         f0:f5:16:53:74:68:5e:59:e0:41:7d:28:fa:d8:ff:02:f8:9a:
         49:b8:c3:fb:5a:5b:cc:e1:33:79:38:ae:35:f5:d1:94:36:1c:
         3a:fc:6e:bb:6e:4e:82:14:c9:3f:ce:72:a4:59:02:64:a5:de:
         4c:8a:65:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppizSxoQdtW1ymgAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk
OGY1Y2IxODMtZDQ5NS00NzU0LWEwN2UtZWJiNmRlNTk3ZjIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+jlyO+MVBbfQ1cLwzc64AGN5/a4Ye/+Jp55
AgObRH4hSf7o2HTcjXzr26kN1nYO9w6muOLy8KB/4i03qlSPkYodmC9O2+Lth4zc
n6hRi9HqyONfWP1EXPqa8FPWPjp1II145Q0ZxxXfzZOrqfLJ3SXqPvg8td17tnDI
Ri+mX2rtKgEYZPt8MN0YD0110Smtux98oEXbSo1imUBVj8ARj1H9/u2p/ffXMY+R
ysCeTmZubxwyRafqx0QJtBGi5iVLWUIcUlQtPG6x0wJmMj+yCvnW5fbSyZjZ5jQZ
zDjVY+mVPK/jTEbAfSg80RZaHzH3EH1oSVBSCiCE61gefvJQewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHujHRHQBhCyRhCfgzywi5gtqAyDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMTk0YWJhZmMtOTI5NC0z
NWI0LThmZTYtYmQyZWJlNGYzMDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHk8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIAlJRnpT9+EZGQsg5wT8DgrjAlRMdS2M6Uu50rvRHj3OYg0IDM5k8oT
LrvfrokzZgD+P2CgNGB8NMXgoS8FtGNYp4+OFMK5vbL3v9KQ5nPArTA90T46E2Am
jNE4WJBK5tuMSCvzbMJ1zqNyQjkLAmm7Ik4/+lEvKSxDkND9gmItkoLHowyrpGZh
gXix97Xu45Tcs093UlfkaucHvkw2YugYYZDy5mx+GUL0ZfPs9c79FAwB0TgFmUN4
5j/uqm6/0R6g/XGCE/D1FlN0aF5Z4EF9KPrY/wL4mkm4w/taW8zhM3k4rjX10ZQ2
HDr8brtuToIUyT/OcqRZAmSl3kyKZcs=
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:02:37 2025 by rpki-client