Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5063b670-e119-353d-9be8-d0c83cfa89ca.roa
File:                     5063b670-e119-353d-9be8-d0c83cfa89ca.roa (raw, json)
Hash identifier:          LeEYp/x5BAeqmoTD3ncM04fq4vQxRM08NuMN6JkwmYc=
Subject key identifier:   11:9B:46:78:2B:A1:71:E2:66:7E:BD:56:FC:E1:D4:07:93:5F:0E:D4
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849F860770070A4443417BA6C00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5063b670-e119-353d-9be8-d0c83cfa89ca.roa
Signing time:             Sun 25 May 2025 12:08:40 +0000
ROA not before:           Sun 25 May 2025 12:08:40 +0000
ROA not after:            Sat 23 Aug 2025 12:08:40 +0000
asID:                     214238
IP address blocks:        172.120.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:60:77:00:70:a4:44:34:17:ba:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 25 12:08:40 2025 GMT
            Not After : Aug 23 12:08:40 2025 GMT
        Subject: CN=07f7287c-a041-43c3-8600-aac03621e23a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a4:e9:c3:85:26:63:ea:6a:0c:dc:96:ff:61:
                    83:9c:02:c1:f1:29:06:a7:b3:be:2c:1b:1b:48:64:
                    47:7a:e7:80:ec:df:df:c8:bf:35:bc:a9:81:35:91:
                    87:b8:00:fe:ca:b2:9b:af:c1:20:4b:fa:b6:9b:ac:
                    cb:ec:24:12:13:ca:4d:41:b1:20:6e:fa:66:09:ec:
                    52:70:46:25:75:e2:c8:30:70:62:6c:80:e7:01:c9:
                    1b:dd:7c:b2:7f:6a:9d:a3:24:fd:d4:94:6c:e3:62:
                    85:b2:37:d8:66:fa:77:3c:56:46:c3:0b:b3:bc:3d:
                    1a:b7:13:f4:0d:67:ca:aa:f8:f0:da:93:f2:59:64:
                    fd:d3:86:c3:fd:cc:d6:6b:7e:98:97:b5:5c:6f:19:
                    32:6d:28:d6:85:e4:b1:e1:0d:1c:21:7d:9b:95:d5:
                    ff:81:2b:5d:80:fc:8b:8b:50:54:2c:06:9c:b0:b9:
                    41:a4:28:27:5a:75:17:77:69:84:0f:c1:8f:b1:b9:
                    de:ff:18:e8:fe:91:fd:f6:2b:6f:98:26:56:6e:10:
                    e1:10:c3:4a:20:be:8e:19:5c:1a:36:27:20:75:73:
                    64:cd:29:77:f5:51:fa:1d:60:34:74:83:c8:08:3d:
                    9f:96:da:c0:9c:42:70:be:28:0f:78:b5:62:e7:00:
                    18:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9B:46:78:2B:A1:71:E2:66:7E:BD:56:FC:E1:D4:07:93:5F:0E:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5063b670-e119-353d-9be8-d0c83cfa89ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:c7:11:8d:8b:62:a6:22:af:50:b4:4d:9c:37:a8:55:6b:32:
         08:bf:1b:32:90:32:71:93:af:e9:a9:62:f4:c5:23:1f:9b:f6:
         d7:d8:4d:26:b7:a1:d0:f2:0b:ed:e8:f4:13:65:2f:17:28:af:
         a7:30:31:83:ab:f0:c4:07:8f:38:db:a1:fd:72:a6:1b:ce:9b:
         ef:81:51:a6:f5:d0:db:54:5d:0e:c8:5f:98:5c:42:fb:70:b6:
         bb:44:8d:04:52:2c:be:11:cb:9f:59:da:52:76:08:f8:d3:7a:
         d1:e7:4c:88:9d:4e:7d:64:33:44:89:da:aa:f5:5d:f4:ef:e7:
         40:b9:c5:7f:98:d1:99:a5:88:c2:62:f0:a8:55:8f:68:1d:cb:
         c5:ba:14:73:ce:9c:05:55:7c:e3:0d:4f:c7:87:d1:63:01:b3:
         46:cf:dd:03:68:a3:dc:22:27:51:d9:70:4d:55:6c:a5:55:9d:
         67:6d:fd:86:ea:91:07:21:e5:ec:96:42:6f:e0:48:a6:35:5e:
         84:64:3d:ee:be:e2:1a:d2:bf:3d:d0:8c:64:a1:d4:24:44:26:
         f0:4c:16:85:18:69:f9:9c:b3:52:8d:ba:28:a7:57:a8:79:07:
         d5:52:d9:83:6f:92:13:d6:b0:3d:41:3b:8f:91:c6:3f:2d:33:
         ec:ff:5b:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4YHcAcKRENBe6bAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDUyNTEyMDg0MFoXDTI1MDgyMzEyMDg0MFowLzEtMCsGA1UEAxMk
MDdmNzI4N2MtYTA0MS00M2MzLTg2MDAtYWFjMDM2MjFlMjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86Tpw4UmY+pqDNyW/2GDnALB8SkGp7O+LBsb
SGRHeueA7N/fyL81vKmBNZGHuAD+yrKbr8EgS/q2m6zL7CQSE8pNQbEgbvpmCexS
cEYldeLIMHBibIDnAckb3Xyyf2qdoyT91JRs42KFsjfYZvp3PFZGwwuzvD0atxP0
DWfKqvjw2pPyWWT904bD/czWa36Yl7VcbxkybSjWheSx4Q0cIX2bldX/gStdgPyL
i1BULAacsLlBpCgnWnUXd2mED8GPsbne/xjo/pH99itvmCZWbhDhEMNKIL6OGVwa
NicgdXNkzSl39VH6HWA0dIPICD2fltrAnEJwvigPeLVi5wAY0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBGbRngroXHiZn69Vvzh1AeTXw7UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNTA2M2I2NzAtZTExOS0z
NTNkLTliZTgtZDBjODNjZmE4OWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHhTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFjHEY2LYqYir1C0TZw3qFVrMgi/GzKQMnGTr+mpYvTFIx+b9tfYTSa3
odDyC+3o9BNlLxcor6cwMYOr8MQHjzjbof1yphvOm++BUab10NtUXQ7IX5hcQvtw
trtEjQRSLL4Ry59Z2lJ2CPjTetHnTIidTn1kM0SJ2qr1XfTv50C5xX+Y0ZmliMJi
8KhVj2gdy8W6FHPOnAVVfOMNT8eH0WMBs0bP3QNoo9wiJ1HZcE1VbKVVnWdt/Ybq
kQch5eyWQm/gSKY1XoRkPe6+4hrSvz3QjGSh1CREJvBMFoUYafmcs1KNuiinV6h5
B9VS2YNvkhPWsD1BO4+Rxj8tM+z/W1k=
-----END CERTIFICATE-----
Generated at Mon Jun 16 08:21:48 2025 by rpki-client