Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/53581dd1-3d00-3a10-be94-e21428e044c5.roa
File:                     53581dd1-3d00-3a10-be94-e21428e044c5.roa (raw, json)
Hash identifier:          FlLpl7oN9U0L5Hf5vl2hV82/+oMkDkJJ+FF4ubCHumE=
Subject key identifier:   F9:F5:75:07:B7:77:30:52:02:65:08:1A:92:2D:A3:E1:8D:3A:10:29
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A8C70D6F4D7807251FAAF0D00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/53581dd1-3d00-3a10-be94-e21428e044c5.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     10557
IP address blocks:        142.252.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:d6:f4:d7:80:72:51:fa:af:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=f84506b6-ee73-41fb-9669-5c10b14d14ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:42:4c:8f:e0:73:a4:d9:f1:eb:f5:f0:fb:b5:
                    64:31:07:85:9a:4d:33:36:d9:51:94:0e:fa:4f:28:
                    3c:7f:66:74:63:2e:18:aa:ea:50:de:a8:e9:8b:28:
                    01:1e:0a:eb:7d:45:e3:3b:32:a0:85:79:ac:9c:23:
                    a8:97:eb:92:9b:b8:17:f8:a5:22:25:11:d4:21:b7:
                    61:04:e5:ea:04:a9:9a:f6:a6:66:94:be:33:71:91:
                    c8:1d:5e:a7:11:41:26:13:95:50:38:7e:14:b8:62:
                    7e:de:b3:97:62:f2:9d:e4:39:ba:bd:09:98:56:f2:
                    a0:fa:c7:b0:f6:db:b8:38:fe:05:5f:85:bd:4e:ae:
                    f1:d5:3b:54:68:8c:63:f4:a1:d0:ba:a8:aa:6b:ad:
                    7c:3b:0b:e3:2a:90:92:21:8d:b4:82:5c:f7:dd:ad:
                    88:1b:1b:ff:af:71:3c:17:80:80:3a:16:6a:98:cb:
                    26:a3:6c:12:05:c3:10:73:fe:de:98:92:74:f2:46:
                    e2:8b:fe:fb:8d:14:9f:97:4b:cc:f5:0d:69:a0:91:
                    77:a9:bd:26:61:b8:8e:ad:d6:6a:93:0e:25:8f:61:
                    37:d2:54:ca:fe:42:a5:02:b7:21:1c:be:4c:3d:a2:
                    b1:0f:8b:16:f9:71:8c:47:eb:9a:c4:9c:c2:f7:e5:
                    01:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F5:75:07:B7:77:30:52:02:65:08:1A:92:2D:A3:E1:8D:3A:10:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/53581dd1-3d00-3a10-be94-e21428e044c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:c8:f0:27:27:92:05:6c:4d:95:c3:65:3e:1d:a9:8a:5c:72:
         8e:bf:2d:6c:05:5c:be:1e:0b:96:c2:a9:0d:a1:ff:2f:ae:b5:
         e9:7c:a0:39:02:0d:b6:1f:61:08:52:97:46:1d:db:b7:0c:be:
         b2:1b:60:ea:46:1a:4e:b1:ea:34:de:6b:c7:67:40:1b:d8:97:
         0d:33:5e:5f:bd:ca:36:28:ba:58:bc:a1:bb:a0:b1:1d:2f:9b:
         34:09:fb:31:6f:68:d3:f3:7f:ee:c1:1c:83:05:57:c3:d2:c3:
         b2:03:a0:69:94:e5:74:c3:05:cb:4c:43:a9:7a:80:56:a4:11:
         0b:9d:61:07:fb:30:76:fd:de:66:c6:9a:67:1d:d4:32:08:6e:
         a9:3f:ae:71:0f:90:d3:ab:e4:92:3d:ab:40:8f:8f:47:78:2b:
         49:16:51:e6:94:ae:dd:11:3b:90:b8:ee:3b:4f:fe:30:8e:a0:
         e6:9a:e0:25:c4:87:0d:e8:9b:37:29:52:90:c4:ce:08:46:44:
         29:7f:a5:c1:d8:bc:3d:34:89:2e:78:a1:75:de:84:ea:39:e1:
         5c:b0:6d:31:76:18:c1:21:71:80:47:ac:77:c4:fe:45:0f:1b:
         4b:ea:a6:fb:98:ac:66:19:96:ad:98:64:b0:44:20:c3:f9:04:
         d1:6c:0a:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcNb014ByUfqvDQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk
Zjg0NTA2YjYtZWU3My00MWZiLTk2NjktNWMxMGIxNGQxNGFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEJMj+BzpNnx6/Xw+7VkMQeFmk0zNtlRlA76
Tyg8f2Z0Yy4YqupQ3qjpiygBHgrrfUXjOzKghXmsnCOol+uSm7gX+KUiJRHUIbdh
BOXqBKma9qZmlL4zcZHIHV6nEUEmE5VQOH4UuGJ+3rOXYvKd5Dm6vQmYVvKg+sew
9tu4OP4FX4W9Tq7x1TtUaIxj9KHQuqiqa618OwvjKpCSIY20glz33a2IGxv/r3E8
F4CAOhZqmMsmo2wSBcMQc/7emJJ08kbii/77jRSfl0vM9Q1poJF3qb0mYbiOrdZq
kw4lj2E30lTK/kKlArchHL5MPaKxD4sW+XGMR+uaxJzC9+UBzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPn1dQe3dzBSAmUIGpIto+GNOhApMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNTM1ODFkZDEtM2QwMC0z
YTEwLWJlOTQtZTIxNDI4ZTA0NGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvzdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAHI8CcnkgVsTZXDZT4dqYpcco6/LWwFXL4eC5bCqQ2h/y+utel8oDkC
DbYfYQhSl0Yd27cMvrIbYOpGGk6x6jTea8dnQBvYlw0zXl+9yjYouli8obugsR0v
mzQJ+zFvaNPzf+7BHIMFV8PSw7IDoGmU5XTDBctMQ6l6gFakEQudYQf7MHb93mbG
mmcd1DIIbqk/rnEPkNOr5JI9q0CPj0d4K0kWUeaUrt0RO5C47jtP/jCOoOaa4CXE
hw3omzcpUpDEzghGRCl/pcHYvD00iS54oXXehOo54VywbTF2GMEhcYBHrHfE/kUP
G0vqpvuYrGYZlq2YZLBEIMP5BNFsCrU=
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:16:49 2025 by rpki-client