Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/88c050c6-c0c0-3bcd-ab3d-3e0499743c5a.roa
File:                     88c050c6-c0c0-3bcd-ab3d-3e0499743c5a.roa (raw, json)
Hash identifier:          gw7pbpWx8PAzB4Ty1OKtgUnO8xdZvxF4ybUb1/fAb70=
Subject key identifier:   0B:CF:2B:DD:14:DE:F6:1B:B6:8E:95:04:4B:D3:B2:07:2D:60:84:86
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A7E7BA0A87D5514C810E8BF80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/88c050c6-c0c0-3bcd-ab3d-3e0499743c5a.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     3257
IP address blocks:        142.252.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:a0:a8:7d:55:14:c8:10:e8:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=b40bad2b-011e-4d02-a62f-d751d32710df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3f:ff:69:3a:1a:65:89:be:4d:05:71:4e:d3:
                    31:90:04:25:e2:ce:65:f6:88:f6:75:72:6a:d0:17:
                    cf:3c:d3:12:ff:3a:fa:dc:21:72:e6:7c:95:9f:63:
                    fb:88:9c:01:7c:f1:31:03:dc:ae:af:8c:82:da:c5:
                    14:5a:ec:be:c0:54:84:92:55:6e:de:b7:ae:ee:46:
                    6f:8a:6b:3c:e0:f8:94:8f:fd:31:e8:04:38:a7:24:
                    02:9e:61:b5:e7:fd:3b:ae:29:f8:22:38:96:81:67:
                    78:05:61:78:7a:5f:9b:a8:08:7c:f8:d9:aa:a2:db:
                    85:8c:7b:5e:02:11:17:10:80:82:e9:d8:79:3c:74:
                    ac:2a:0a:f1:1a:35:51:b1:e6:b2:44:68:f8:c1:61:
                    f5:27:9e:5a:4e:92:a6:bc:d9:8c:fe:a6:28:ac:2f:
                    e9:d5:37:7b:e1:71:e9:09:b4:74:7c:7e:99:81:64:
                    97:cc:84:d8:7d:15:f4:77:f6:87:ba:dd:af:1f:c2:
                    22:08:e0:79:a7:1c:f1:7b:6a:ba:d0:a3:42:4c:db:
                    e8:58:e0:94:ac:b7:fe:9f:5f:79:39:ee:3d:bc:48:
                    dd:e2:64:f0:c3:7a:96:de:9c:b0:30:9d:be:ba:7d:
                    6d:52:83:0f:a7:dc:58:9d:38:16:b9:35:16:66:f0:
                    28:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CF:2B:DD:14:DE:F6:1B:B6:8E:95:04:4B:D3:B2:07:2D:60:84:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/88c050c6-c0c0-3bcd-ab3d-3e0499743c5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:07:0d:11:70:9f:68:59:2c:ef:43:a9:05:1a:10:3e:05:de:
         88:ed:72:9c:dd:a1:73:d4:b3:13:5a:58:18:0f:e2:4e:aa:12:
         f4:ad:78:77:fd:1e:22:46:f9:75:5c:b7:89:4b:b6:cc:2a:4b:
         30:01:a5:d2:b2:10:51:24:3d:86:28:91:9c:7d:08:b7:ca:8b:
         54:4a:da:78:c4:7f:1c:dc:7e:10:e7:27:3e:84:6a:35:90:99:
         0f:09:61:db:ae:38:88:a9:c6:2d:c8:51:81:b5:f4:16:63:fc:
         77:44:d2:12:38:65:13:ad:80:7d:db:02:18:b8:98:49:66:ec:
         9a:c3:ba:a8:b1:ed:02:8d:6d:a2:fd:02:53:ed:30:b4:98:8c:
         fb:bc:54:45:b6:9e:95:62:f9:53:8b:7a:82:7f:b3:3c:28:9a:
         bf:b6:b6:37:cb:69:1a:f7:a8:84:72:1d:fd:0b:ee:d0:b8:7e:
         8b:e3:8b:92:ad:ff:f3:ed:cf:69:2b:a8:fd:78:54:18:0e:d6:
         4f:c8:9c:8a:47:d2:49:75:28:49:7b:da:48:d2:aa:06:df:45:
         f2:dd:da:00:43:2b:71:25:29:3b:d5:a3:fc:b9:ed:e1:a8:9b:
         15:25:f0:73:4d:51:be:bf:9f:f7:52:ca:41:c0:cb:c7:17:9d:
         08:a8:95:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e6CofVUUyBDov4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk
YjQwYmFkMmItMDExZS00ZDAyLWE2MmYtZDc1MWQzMjcxMGRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmT//aToaZYm+TQVxTtMxkAQl4s5l9oj2dXJq
0BfPPNMS/zr63CFy5nyVn2P7iJwBfPExA9yur4yC2sUUWuy+wFSEklVu3reu7kZv
ims84PiUj/0x6AQ4pyQCnmG15/07rin4IjiWgWd4BWF4el+bqAh8+NmqotuFjHte
AhEXEICC6dh5PHSsKgrxGjVRseayRGj4wWH1J55aTpKmvNmM/qYorC/p1Td74XHp
CbR0fH6ZgWSXzITYfRX0d/aHut2vH8IiCOB5pxzxe2q60KNCTNvoWOCUrLf+n195
Oe49vEjd4mTww3qW3pywMJ2+un1tUoMPp9xYnTgWuTUWZvAovwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAvPK90U3vYbto6VBEvTsgctYISGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvODhjMDUwYzYtYzBjMC0z
YmNkLWFiM2QtM2UwNDk5NzQzYzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvzAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACwHDRFwn2hZLO9DqQUaED4F3ojtcpzdoXPUsxNaWBgP4k6qEvSteHf9
HiJG+XVct4lLtswqSzABpdKyEFEkPYYokZx9CLfKi1RK2njEfxzcfhDnJz6EajWQ
mQ8JYduuOIipxi3IUYG19BZj/HdE0hI4ZROtgH3bAhi4mElm7JrDuqix7QKNbaL9
AlPtMLSYjPu8VEW2npVi+VOLeoJ/szwomr+2tjfLaRr3qIRyHf0L7tC4fovji5Kt
//Ptz2krqP14VBgO1k/InIpH0kl1KEl72kjSqgbfRfLd2gBDK3ElKTvVo/y57eGo
mxUl8HNNUb6/n/dSykHAy8cXnQiolV8=
-----END CERTIFICATE-----
Generated at Mon Aug 4 08:17:07 2025 by rpki-client