Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/70847264-c9f7-3eb8-bea9-92de5d15558e.roa
File:                     70847264-c9f7-3eb8-bea9-92de5d15558e.roa (raw, json)
Hash identifier:          ETsDa5h7pA4dV9+vyNTM7ZU8VC68XwYLde56G/3OA4E=
Subject key identifier:   C8:B8:EA:96:ED:D0:CA:88:0A:F2:34:B8:86:06:11:6E:AC:B9:8D:38
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A8DC1B56E32E8FBF325BB59A0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/70847264-c9f7-3eb8-bea9-92de5d15558e.roa
Signing time:             Fri 18 Jul 2025 00:20:02 +0000
ROA not before:           Fri 18 Jul 2025 00:20:02 +0000
ROA not after:            Thu 16 Oct 2025 00:20:02 +0000
asID:                     6939
IP address blocks:        172.121.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:c1:b5:6e:32:e8:fb:f3:25:bb:59:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 18 00:20:02 2025 GMT
            Not After : Oct 16 00:20:02 2025 GMT
        Subject: CN=fc5c6641-1b91-4560-add8-ab59dc400d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:aa:f3:c2:09:a0:76:04:65:2c:cc:6e:3d:68:
                    fc:83:af:f7:82:1c:78:de:58:f8:71:d0:51:cf:e3:
                    81:c8:21:cb:82:d5:59:d8:dc:9e:36:61:c4:66:53:
                    a1:18:74:49:35:8d:9e:b1:24:f0:b8:7f:a8:b7:47:
                    47:1f:dd:02:84:84:43:5b:0f:c4:e0:dd:cd:f1:59:
                    97:3e:4a:29:a8:a2:f2:89:6b:1e:ff:0c:47:48:b2:
                    74:c3:27:be:0e:5e:cc:93:b8:5e:35:40:d8:d6:6d:
                    59:0e:bb:6e:8b:99:80:86:22:71:1c:f7:90:17:20:
                    15:e5:80:0c:b2:7f:91:08:ee:b4:02:81:cc:26:fd:
                    f9:69:3e:70:28:db:1a:66:2c:56:a6:39:64:5a:8d:
                    a9:23:04:ec:ac:61:21:af:90:08:28:27:13:19:c3:
                    58:a5:e1:e5:d5:81:d6:31:9d:e1:07:06:e2:47:a0:
                    dd:7c:af:2e:5e:d5:c1:95:17:b0:a3:fd:18:ff:44:
                    91:dc:a0:43:3b:f4:d2:35:69:41:6f:72:25:01:d6:
                    7c:76:0c:a3:3d:b1:8f:bf:07:9e:e2:1a:c3:58:80:
                    29:eb:4d:28:74:70:ba:38:d5:03:53:88:81:72:ed:
                    5a:d4:46:09:2c:c0:19:94:80:c5:cd:fe:56:fe:df:
                    04:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B8:EA:96:ED:D0:CA:88:0A:F2:34:B8:86:06:11:6E:AC:B9:8D:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/70847264-c9f7-3eb8-bea9-92de5d15558e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:61:bb:35:63:7e:ec:3d:ac:11:62:60:96:c4:a7:5b:6d:4e:
         e9:34:83:b4:c1:a3:67:4d:7b:2c:f1:7c:0a:20:a9:99:7e:93:
         4c:62:8b:60:15:bb:83:b9:27:64:37:a2:71:60:d9:f0:fa:67:
         78:c7:1a:27:3e:50:4e:d1:73:28:7d:4b:1a:71:7c:10:d8:25:
         af:d8:5c:57:58:b1:57:50:64:96:88:95:55:f3:42:1e:90:07:
         f4:e3:e2:92:23:a8:42:46:fc:ef:1e:d0:67:7a:e6:18:01:31:
         d9:6b:bd:ad:b9:e9:db:60:e8:ee:56:6c:ac:a9:19:3a:31:db:
         c1:03:94:65:ba:ad:e8:ce:0e:58:a4:10:48:ab:34:19:21:e0:
         82:8d:78:2b:c3:04:71:3e:b3:4c:be:a4:fa:e8:a4:58:07:43:
         01:1b:89:65:3a:54:37:d6:15:ee:7f:00:83:57:ce:c9:a2:40:
         a6:d6:a5:63:71:e8:b8:38:45:52:59:b8:3e:64:e8:b2:f0:df:
         8e:3d:82:ed:fa:25:a6:54:1a:c2:8c:28:e1:a7:b8:e1:48:b6:
         dc:92:ef:7f:a6:ae:22:9f:ea:3a:f9:35:48:ae:11:9e:9e:7f:
         ff:3d:65:b4:cd:06:29:f3:bd:8e:1e:96:d3:db:8f:d7:63:fe:
         09:a9:09:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqNwbVuMuj78yW7WaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDcxODAwMjAwMloXDTI1MTAxNjAwMjAwMlowLzEtMCsGA1UEAxMk
ZmM1YzY2NDEtMWI5MS00NTYwLWFkZDgtYWI1OWRjNDAwZDVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6rzwgmgdgRlLMxuPWj8g6/3ghx43lj4cdBR
z+OByCHLgtVZ2NyeNmHEZlOhGHRJNY2esSTwuH+ot0dHH90ChIRDWw/E4N3N8VmX
PkopqKLyiWse/wxHSLJ0wye+Dl7Mk7heNUDY1m1ZDrtui5mAhiJxHPeQFyAV5YAM
sn+RCO60AoHMJv35aT5wKNsaZixWpjlkWo2pIwTsrGEhr5AIKCcTGcNYpeHl1YHW
MZ3hBwbiR6DdfK8uXtXBlRewo/0Y/0SR3KBDO/TSNWlBb3IlAdZ8dgyjPbGPvwee
4hrDWIAp600odHC6ONUDU4iBcu1a1EYJLMAZlIDFzf5W/t8E+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMi46pbt0MqICvI0uIYGEW6suY04MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNzA4NDcyNjQtYzlmNy0z
ZWI4LWJlYTktOTJkZTVkMTU1NThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHlZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABlhuzVjfuw9rBFiYJbEp1ttTuk0g7TBo2dNeyzxfAogqZl+k0xii2AV
u4O5J2Q3onFg2fD6Z3jHGic+UE7Rcyh9SxpxfBDYJa/YXFdYsVdQZJaIlVXzQh6Q
B/Tj4pIjqEJG/O8e0Gd65hgBMdlrva256dtg6O5WbKypGTox28EDlGW6rejODlik
EEirNBkh4IKNeCvDBHE+s0y+pPropFgHQwEbiWU6VDfWFe5/AINXzsmiQKbWpWNx
6Lg4RVJZuD5k6LLw3449gu36JaZUGsKMKOGnuOFIttyS73+mriKf6jr5NUiuEZ6e
f/89ZbTNBinzvY4eltPbj9dj/gmpCdI=
-----END CERTIFICATE-----
Generated at Mon Aug 4 08:16:58 2025 by rpki-client