Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a649ba89-9ab0-367b-89f7-229eb391907e.roa
File:                     a649ba89-9ab0-367b-89f7-229eb391907e.roa (raw, json)
Hash identifier:          FYJWGTpKD2U8X1PFzttGR7Ph/fYY4v+xfITNOFgPo8c=
Subject key identifier:   4A:3D:51:C5:8D:40:3B:D1:24:F7:C2:70:AD:C0:3B:5D:70:E5:56:2B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A7E7BA09BF9B7749DDA174990
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a649ba89-9ab0-367b-89f7-229eb391907e.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     3257
IP address blocks:        142.252.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:a0:9b:f9:b7:74:9d:da:17:49:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=d5fff4f9-3786-465a-bcbf-fd90894bdc90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dc:f9:e3:a5:d0:e3:a0:cf:54:68:50:e2:09:
                    df:9f:18:ac:ab:57:ae:47:07:2b:6e:1f:d8:bb:23:
                    58:92:49:dc:31:43:a7:bf:b4:01:73:58:14:74:79:
                    79:db:04:9f:13:f3:44:53:05:72:33:29:34:ab:10:
                    47:9a:b5:29:85:2c:d3:de:92:4c:b6:16:32:d0:b4:
                    02:26:7b:9c:28:1b:a7:bf:37:f9:6d:12:c3:5d:b6:
                    f1:0d:52:4a:7f:17:d1:93:ec:94:f7:ff:d5:c7:d2:
                    c6:03:e1:03:e1:bd:12:b5:04:c6:70:5e:9b:5c:87:
                    54:72:29:40:a5:a6:0b:9e:72:12:03:e6:cd:2b:d8:
                    8d:82:50:6d:a2:73:27:1a:11:a8:48:58:37:b8:6d:
                    75:24:0f:3e:3a:f8:ed:da:0a:d8:87:69:14:74:0e:
                    49:c6:7c:c8:b9:7a:6b:6e:1f:24:cf:8b:45:49:98:
                    17:8d:4c:88:32:e9:0a:0d:d7:76:ae:7f:d1:40:0d:
                    1a:42:03:6d:01:88:62:f7:10:0c:4e:1b:2b:5a:cc:
                    f4:f7:2d:f6:81:9b:ea:7b:69:22:b9:d6:09:6f:a5:
                    1e:77:f8:d7:a2:60:6b:1d:47:39:b0:0b:59:7c:51:
                    54:9e:85:92:14:55:8e:5a:4d:c6:8b:76:3f:2f:7b:
                    3b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3D:51:C5:8D:40:3B:D1:24:F7:C2:70:AD:C0:3B:5D:70:E5:56:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a649ba89-9ab0-367b-89f7-229eb391907e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:ad:19:5f:a1:15:9b:ae:d8:e5:62:6c:b8:4e:c3:c3:78:0d:
         bc:23:de:26:c4:26:e9:2b:fe:8f:1a:9e:4e:ed:1c:52:af:2d:
         7c:2d:7f:6f:e6:29:2d:28:0a:b2:03:69:a8:7b:93:9c:93:53:
         45:24:94:a6:97:3c:60:df:6a:f5:7e:ae:7a:b5:09:97:cf:f6:
         40:75:3d:0a:14:19:34:cd:fe:d7:25:6e:63:59:95:12:13:aa:
         c5:db:86:a5:b1:24:62:1d:47:0c:11:3b:ad:3c:df:56:56:0c:
         04:7b:f1:78:df:eb:19:f0:a8:f7:be:fa:0a:ca:9a:5d:17:e5:
         ce:9f:f1:5c:5c:91:ea:b1:ed:c7:d6:bc:f4:38:2b:91:f0:78:
         21:21:4f:48:57:bb:28:46:e6:de:b4:4b:b1:92:f1:0d:4e:32:
         e7:4a:14:29:88:42:e9:ba:a6:9c:e1:ee:91:85:a4:85:5c:29:
         7f:8c:28:cc:01:86:6a:f8:47:14:3a:d6:a8:44:63:bd:3f:cd:
         d0:9d:51:73:bb:0a:75:f9:5c:d7:a0:da:43:4c:36:3a:15:92:
         9a:3b:b2:86:c4:b0:49:39:5a:ad:84:30:d6:2a:6a:14:dd:7f:
         3f:84:ad:b9:23:b1:d3:fc:ba:f9:a4:63:4a:9f:5d:ed:7d:c5:
         3f:07:33:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e6Cb+bd0ndoXSZAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk
ZDVmZmY0ZjktMzc4Ni00NjVhLWJjYmYtZmQ5MDg5NGJkYzkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNz546XQ46DPVGhQ4gnfnxisq1euRwcrbh/Y
uyNYkkncMUOnv7QBc1gUdHl52wSfE/NEUwVyMyk0qxBHmrUphSzT3pJMthYy0LQC
JnucKBunvzf5bRLDXbbxDVJKfxfRk+yU9//Vx9LGA+ED4b0StQTGcF6bXIdUcilA
paYLnnISA+bNK9iNglBtonMnGhGoSFg3uG11JA8+Ovjt2grYh2kUdA5JxnzIuXpr
bh8kz4tFSZgXjUyIMukKDdd2rn/RQA0aQgNtAYhi9xAMThsrWsz09y32gZvqe2ki
udYJb6Ued/jXomBrHUc5sAtZfFFUnoWSFFWOWk3Gi3Y/L3s7pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEo9UcWNQDvRJPfCcK3AO11w5VYrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTY0OWJhODktOWFiMC0z
NjdiLTg5ZjctMjI5ZWIzOTE5MDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvxZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF6tGV+hFZuu2OVibLhOw8N4Dbwj3ibEJukr/o8ank7tHFKvLXwtf2/m
KS0oCrIDaah7k5yTU0UklKaXPGDfavV+rnq1CZfP9kB1PQoUGTTN/tclbmNZlRIT
qsXbhqWxJGIdRwwRO60831ZWDAR78Xjf6xnwqPe++grKml0X5c6f8Vxckeqx7cfW
vPQ4K5HweCEhT0hXuyhG5t60S7GS8Q1OMudKFCmIQum6ppzh7pGFpIVcKX+MKMwB
hmr4RxQ61qhEY70/zdCdUXO7CnX5XNeg2kNMNjoVkpo7sobEsEk5Wq2EMNYqahTd
fz+ErbkjsdP8uvmkY0qfXe19xT8HM9E=
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:42:34 2025 by rpki-client