Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/74aa9c46-43d8-3e16-bc87-f19709716581.roa
File:                     74aa9c46-43d8-3e16-bc87-f19709716581.roa (raw, json)
Hash identifier:          ULwG+ZT/eFyhq4TZkLEiyUN8aGOlsmAqdyuVd5Gspek=
Subject key identifier:   68:27:56:CA:AB:CD:93:8D:39:F8:F0:D1:0B:F5:5E:CD:A1:77:25:0D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584980E7AA7EDA4170A581DEC280
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/74aa9c46-43d8-3e16-bc87-f19709716581.roa
Signing time:             Sat 12 Apr 2025 17:04:04 +0000
ROA not before:           Sat 12 Apr 2025 17:04:04 +0000
ROA not after:            Fri 11 Jul 2025 17:04:04 +0000
asID:                     18779
IP address blocks:        142.252.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:e7:aa:7e:da:41:70:a5:81:de:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 12 17:04:04 2025 GMT
            Not After : Jul 11 17:04:04 2025 GMT
        Subject: CN=6d23e0b0-594f-4fa3-bf9e-4f387b48df6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:08:9a:4c:0b:7c:6f:68:8c:b5:10:35:d8:00:
                    35:1b:d0:4b:52:65:73:64:65:68:d7:cc:56:d8:79:
                    b3:cb:bf:22:db:49:b0:2f:c0:d0:e5:a2:6b:58:80:
                    ad:69:99:56:b1:48:71:55:fd:25:49:61:e5:b3:a6:
                    2b:16:1b:90:66:97:4e:b5:42:43:4c:33:19:9a:bd:
                    f3:c5:d2:21:ac:11:68:40:43:4d:8a:f4:00:54:8c:
                    ad:60:6a:58:27:97:51:d3:6b:f1:26:d6:c1:a6:68:
                    48:09:75:ad:b6:90:82:2d:84:5a:95:cf:65:99:fa:
                    bf:0d:fc:74:ff:e9:fb:2b:59:66:ad:a0:2f:ce:58:
                    de:50:64:05:60:78:ea:30:df:4e:c1:85:df:6a:ef:
                    e8:29:07:e4:7b:83:a9:ee:66:11:0f:f4:43:06:e1:
                    ce:e6:78:54:8e:1a:cf:58:62:6b:ed:67:84:16:19:
                    88:fd:ed:58:22:43:76:26:0c:5c:45:54:9a:91:b5:
                    27:86:11:32:a6:e0:46:75:46:05:6d:d5:40:59:cb:
                    b1:19:8a:a7:87:3e:55:4d:5f:7b:81:33:ff:1d:51:
                    c0:2e:c8:b6:b2:22:0a:5b:76:de:8e:31:f6:8d:3d:
                    01:4e:76:11:a6:36:8d:4d:fc:0a:e3:53:3b:83:0e:
                    ee:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:27:56:CA:AB:CD:93:8D:39:F8:F0:D1:0B:F5:5E:CD:A1:77:25:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/74aa9c46-43d8-3e16-bc87-f19709716581.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:f4:71:61:47:ab:78:e3:ef:b7:a7:76:ca:55:68:11:8a:a5:
         12:84:fc:29:a6:07:f6:f9:32:41:2d:c4:36:e0:78:6b:2e:71:
         17:19:3a:96:53:be:87:8e:c6:f3:0a:3e:ac:d9:9c:cd:7f:7d:
         67:a7:4d:fe:4b:0e:b7:8e:d9:a4:86:fa:64:d0:34:d4:c4:fe:
         1a:7d:e5:49:da:18:95:fe:1f:ff:b9:2f:21:81:19:ce:8e:64:
         f2:73:e0:57:a1:1d:af:61:50:ab:9d:43:78:83:3e:6e:2d:6e:
         b6:e6:71:8b:6f:48:f0:3a:d1:82:4d:ac:23:24:61:40:09:f5:
         e5:00:e5:e6:d3:a8:30:94:60:cb:d3:2b:35:15:43:04:86:1a:
         7b:58:dc:0c:0b:d3:b5:1a:c3:b9:86:29:5c:33:fa:cb:4f:7b:
         b7:62:93:4b:d0:2d:80:ce:58:d4:c6:55:80:5d:78:50:92:ef:
         1c:bb:91:9d:7a:80:28:da:35:06:d6:2a:4d:97:f7:de:17:a7:
         0f:dc:ed:ce:58:14:c7:da:c1:eb:5f:60:04:a0:21:5b:fe:8c:
         a4:dc:96:e6:23:5a:df:cb:f4:fe:55:7d:eb:e3:e7:ef:97:cc:
         47:03:e6:65:29:5f:5b:7d:91:34:5a:a0:9a:c6:9e:d5:08:49:
         b7:60:4f:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmA56p+2kFwpYHewoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDQxMjE3MDQwNFoXDTI1MDcxMTE3MDQwNFowLzEtMCsGA1UEAxMk
NmQyM2UwYjAtNTk0Zi00ZmEzLWJmOWUtNGYzODdiNDhkZjZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQiaTAt8b2iMtRA12AA1G9BLUmVzZGVo18xW
2Hmzy78i20mwL8DQ5aJrWICtaZlWsUhxVf0lSWHls6YrFhuQZpdOtUJDTDMZmr3z
xdIhrBFoQENNivQAVIytYGpYJ5dR02vxJtbBpmhICXWttpCCLYRalc9lmfq/Dfx0
/+n7K1lmraAvzljeUGQFYHjqMN9OwYXfau/oKQfke4Op7mYRD/RDBuHO5nhUjhrP
WGJr7WeEFhmI/e1YIkN2JgxcRVSakbUnhhEypuBGdUYFbdVAWcuxGYqnhz5VTV97
gTP/HVHALsi2siIKW3bejjH2jT0BTnYRpjaNTfwK41M7gw7u1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGgnVsqrzZONOfjw0Qv1Xs2hdyUNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNzRhYTljNDYtNDNkOC0z
ZTE2LWJjODctZjE5NzA5NzE2NTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvzeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEL0cWFHq3jj77endspVaBGKpRKE/CmmB/b5MkEtxDbgeGsucRcZOpZT
voeOxvMKPqzZnM1/fWenTf5LDreO2aSG+mTQNNTE/hp95UnaGJX+H/+5LyGBGc6O
ZPJz4FehHa9hUKudQ3iDPm4tbrbmcYtvSPA60YJNrCMkYUAJ9eUA5ebTqDCUYMvT
KzUVQwSGGntY3AwL07Uaw7mGKVwz+stPe7dik0vQLYDOWNTGVYBdeFCS7xy7kZ16
gCjaNQbWKk2X994Xpw/c7c5YFMfawetfYASgIVv+jKTcluYjWt/L9P5Vfevj5++X
zEcD5mUpX1t9kTRaoJrGntUISbdgT58=
-----END CERTIFICATE-----
Generated at Sat Apr 26 22:58:44 2025 by rpki-client