Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9494c85d-10bd-3562-a139-5e57db234933.roa
File:                     9494c85d-10bd-3562-a139-5e57db234933.roa (raw, json)
Hash identifier:          WiwlK7xJ+LfL+8+ynwIdj3MeXOiEL/v/zttBG5Fc4UE=
Subject key identifier:   60:71:7F:D6:C2:03:F6:B7:84:1A:32:0F:DC:17:7A:DE:C9:87:A2:BF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A8DC17231F2F2C1A7A22C5700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9494c85d-10bd-3562-a139-5e57db234933.roa
Signing time:             Fri 18 Jul 2025 00:19:31 +0000
ROA not before:           Fri 18 Jul 2025 00:19:31 +0000
ROA not after:            Thu 16 Oct 2025 00:19:31 +0000
asID:                     6939
IP address blocks:        172.120.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:c1:72:31:f2:f2:c1:a7:a2:2c:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 18 00:19:31 2025 GMT
            Not After : Oct 16 00:19:31 2025 GMT
        Subject: CN=23ca8b66-d22a-4a1a-8372-0c27b8713ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:60:96:a7:d2:18:ba:85:bf:81:39:cd:5d:1d:
                    e0:7e:63:eb:a2:65:88:f0:e7:5c:b8:22:4b:b6:73:
                    98:6c:86:ad:c4:9d:e7:d4:95:a0:60:9d:3d:55:bf:
                    c6:4c:60:31:3f:ee:90:8e:34:65:43:b7:e5:ee:d4:
                    0b:99:67:65:8e:53:df:e9:c3:a7:23:08:1f:cd:59:
                    18:b3:b7:1c:39:71:8a:64:a3:c7:de:7f:42:dd:e7:
                    13:8d:18:bc:aa:54:96:e9:69:f8:96:f1:81:ae:9f:
                    78:99:4e:4f:01:ad:66:a1:43:5a:78:14:e4:98:4e:
                    0f:60:2d:eb:f4:8b:10:6e:36:f4:9b:f3:9d:0d:07:
                    2d:59:c2:78:19:ae:76:3a:aa:ca:93:46:48:6f:66:
                    39:a0:68:7a:b3:be:3d:ec:b1:45:e1:76:bd:c0:72:
                    60:30:10:0d:c7:a5:50:27:70:e4:28:d5:a9:d4:25:
                    a4:ac:94:32:09:5c:b4:46:e8:24:82:f5:04:8d:5b:
                    81:f9:2e:57:a5:60:4e:a3:55:da:2d:f0:b7:af:df:
                    0a:09:fc:c9:56:12:d3:7b:cd:3e:ca:73:57:b1:f2:
                    5c:af:63:ac:b7:b0:23:34:eb:fc:2b:1d:18:2e:e1:
                    be:f4:b3:52:9d:4f:a3:d6:aa:ad:5c:ea:33:25:ad:
                    51:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:71:7F:D6:C2:03:F6:B7:84:1A:32:0F:DC:17:7A:DE:C9:87:A2:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9494c85d-10bd-3562-a139-5e57db234933.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:c5:71:05:16:43:a6:b8:a9:0a:86:d7:e7:fa:28:41:c1:15:
         11:6e:0d:22:65:2d:b7:ea:14:c8:2b:a3:cb:94:8c:b4:7c:01:
         1f:b4:f3:82:14:d9:35:3e:3f:95:14:9f:0d:25:f4:50:1f:99:
         3a:61:8d:7d:80:5b:a2:90:d4:7c:24:6e:d8:ca:ff:bd:a6:80:
         bf:0b:e8:8f:9c:f9:17:70:5e:7e:19:ca:7a:f6:9a:ab:b1:55:
         23:c6:f4:fe:b7:41:73:fa:54:9d:9a:5e:1e:f1:92:4c:1a:ba:
         8a:19:14:05:86:01:df:8c:8a:94:d3:2f:91:d4:05:20:3f:c5:
         33:af:42:c6:e9:cb:e2:fa:2f:72:23:4d:22:7d:1a:e4:97:7f:
         31:01:80:f6:10:57:eb:62:82:e8:ee:46:1e:c4:12:e3:d7:8a:
         0f:7e:fd:c1:40:58:fd:0d:10:16:20:1d:05:31:23:cf:d1:bb:
         f5:4e:4b:17:b7:35:83:ff:11:d9:9e:3a:c5:2a:9f:88:3f:6b:
         40:7e:36:2a:b0:9e:e9:62:38:fc:f7:44:fc:72:13:be:ed:15:
         78:87:8c:f9:70:b2:2d:82:c3:a3:94:41:32:43:e6:84:43:19:
         08:ab:53:70:0b:6e:6a:e8:3e:b2:91:75:91:64:ef:c3:e7:35:
         52:33:c1:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqNwXIx8vLBp6IsVwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDcxODAwMTkzMVoXDTI1MTAxNjAwMTkzMVowLzEtMCsGA1UEAxMk
MjNjYThiNjYtZDIyYS00YTFhLTgzNzItMGMyN2I4NzEzYWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GCWp9IYuoW/gTnNXR3gfmPromWI8OdcuCJL
tnOYbIatxJ3n1JWgYJ09Vb/GTGAxP+6QjjRlQ7fl7tQLmWdljlPf6cOnIwgfzVkY
s7ccOXGKZKPH3n9C3ecTjRi8qlSW6Wn4lvGBrp94mU5PAa1moUNaeBTkmE4PYC3r
9IsQbjb0m/OdDQctWcJ4Ga52OqrKk0ZIb2Y5oGh6s7497LFF4Xa9wHJgMBANx6VQ
J3DkKNWp1CWkrJQyCVy0RugkgvUEjVuB+S5XpWBOo1XaLfC3r98KCfzJVhLTe80+
ynNXsfJcr2Ost7AjNOv8Kx0YLuG+9LNSnU+j1qqtXOozJa1RAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGBxf9bCA/a3hBoyD9wXet7Jh6K/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOTQ5NGM4NWQtMTBiZC0z
NTYyLWExMzktNWU1N2RiMjM0OTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHiZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACTFcQUWQ6a4qQqG1+f6KEHBFRFuDSJlLbfqFMgro8uUjLR8AR+084IU
2TU+P5UUnw0l9FAfmTphjX2AW6KQ1HwkbtjK/72mgL8L6I+c+RdwXn4Zynr2mqux
VSPG9P63QXP6VJ2aXh7xkkwauooZFAWGAd+MipTTL5HUBSA/xTOvQsbpy+L6L3Ij
TSJ9GuSXfzEBgPYQV+tigujuRh7EEuPXig9+/cFAWP0NEBYgHQUxI8/Ru/VOSxe3
NYP/EdmeOsUqn4g/a0B+NiqwnuliOPz3RPxyE77tFXiHjPlwsi2Cw6OUQTJD5oRD
GQirU3ALbmroPrKRdZFk78PnNVIzwe0=
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:26:17 2025 by rpki-client