Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dc5a972c-0f70-335e-af75-2292ac06da92.roa
File:                     dc5a972c-0f70-335e-af75-2292ac06da92.roa (raw, json)
Hash identifier:          qxUPtXXbp4G4P9AwSDFF8PE0WnYugEbreVDOiiT/b+M=
Subject key identifier:   34:71:69:29:F0:B3:F1:FE:5C:58:50:51:EE:40:B3:03:1D:49:BE:F6
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A94D0EA8FBDB17C3293D27140
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dc5a972c-0f70-335e-af75-2292ac06da92.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     62240
IP address blocks:        142.252.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:ea:8f:bd:b1:7c:32:93:d2:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=da90dcbb-0031-4f69-8f0d-2f6d8c3748e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:95:b8:7f:68:2c:8d:f1:5a:42:92:ee:8b:4d:
                    84:eb:9d:bf:c7:cd:fa:55:15:51:bc:08:b9:08:72:
                    d9:c2:8b:b8:d0:bf:37:44:09:df:37:c4:69:6d:4f:
                    71:30:2d:cd:85:1a:2d:53:ce:0d:61:9a:2f:48:e9:
                    70:9d:d4:77:aa:1f:97:31:6e:22:43:c0:40:d4:56:
                    42:e6:34:88:75:a0:ae:45:04:ef:39:1d:fd:0b:f2:
                    74:6d:66:4c:3b:33:b3:f3:c2:f7:21:b0:80:7c:df:
                    79:dd:81:eb:5f:15:95:df:5d:38:22:1b:8b:c0:47:
                    b8:cb:e7:42:7a:a8:db:81:86:7f:fa:94:5d:5e:d3:
                    15:62:bb:d7:9e:10:c1:c0:c0:da:ce:44:d7:ff:f1:
                    5b:aa:9f:7b:c6:80:79:1f:9e:c2:9e:27:63:5b:3c:
                    68:a1:dd:01:14:c1:91:a0:95:ec:07:bb:68:f0:40:
                    4d:ec:83:15:43:7f:a3:b1:6c:96:b6:e0:08:9f:83:
                    f8:35:f7:c3:7c:23:d3:98:89:dd:39:65:3a:b7:22:
                    0c:04:30:5e:81:8b:79:70:8c:bd:05:0f:d1:70:16:
                    8e:d3:f1:8f:d2:c4:f4:4f:88:6a:67:ef:c8:29:8f:
                    c2:e0:d9:2b:ef:8c:3c:3a:ae:9a:74:1d:d8:c3:47:
                    2e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:71:69:29:F0:B3:F1:FE:5C:58:50:51:EE:40:B3:03:1D:49:BE:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dc5a972c-0f70-335e-af75-2292ac06da92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:14:f7:45:bf:68:58:b9:af:e2:3e:58:da:0a:21:bb:b3:c4:
         66:41:3b:43:ca:88:45:c9:b1:49:a1:2b:4f:99:19:c4:5d:49:
         26:b0:39:5d:85:11:9d:24:1a:4e:b3:7f:d7:e5:cb:b2:2c:37:
         0d:c8:76:f4:c4:64:52:fc:69:5d:92:be:6a:7d:47:cf:2f:32:
         25:39:14:3a:ba:b2:e3:6b:32:98:bc:25:d6:37:23:7f:d5:f2:
         65:5b:2e:c3:81:0a:74:1b:ee:1b:e5:a1:0e:cb:30:99:65:65:
         7d:4b:b1:01:83:e9:5d:3b:33:54:e9:78:65:e1:96:f6:d7:c1:
         b1:47:94:34:b8:b5:b1:9d:ca:02:d1:ff:61:ce:2f:aa:5f:b6:
         d0:22:50:a1:05:8a:72:d6:2d:6c:82:59:fe:76:37:30:1a:2b:
         c4:4a:4a:e5:eb:77:6c:f0:94:4c:3c:1c:40:20:83:6c:37:e0:
         62:3e:b7:f0:aa:d3:6d:d7:1e:3b:74:6e:fa:40:26:45:37:ff:
         c0:92:12:38:2e:32:45:3a:e3:8a:7b:df:f5:e8:03:95:10:82:
         59:ac:0a:fc:e1:19:82:0f:57:6f:c5:e9:af:39:fb:ad:fb:d8:
         8f:a9:b0:a6:e0:e1:70:12:fb:63:e1:f6:03:96:a2:6f:9c:34:
         77:19:a1:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0OqPvbF8MpPScUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk
ZGE5MGRjYmItMDAzMS00ZjY5LThmMGQtMmY2ZDhjMzc0OGUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJW4f2gsjfFaQpLui02E652/x836VRVRvAi5
CHLZwou40L83RAnfN8RpbU9xMC3NhRotU84NYZovSOlwndR3qh+XMW4iQ8BA1FZC
5jSIdaCuRQTvOR39C/J0bWZMOzOz88L3IbCAfN953YHrXxWV3104IhuLwEe4y+dC
eqjbgYZ/+pRdXtMVYrvXnhDBwMDazkTX//Fbqp97xoB5H57CnidjWzxood0BFMGR
oJXsB7to8EBN7IMVQ3+jsWyWtuAIn4P4NffDfCPTmIndOWU6tyIMBDBegYt5cIy9
BQ/RcBaO0/GP0sT0T4hqZ+/IKY/C4Nkr74w8Oq6adB3Yw0cuTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDRxaSnws/H+XFhQUe5AswMdSb72MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZGM1YTk3MmMtMGY3MC0z
MzVlLWFmNzUtMjI5MmFjMDZkYTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvx+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACMU90W/aFi5r+I+WNoKIbuzxGZBO0PKiEXJsUmhK0+ZGcRdSSawOV2F
EZ0kGk6zf9fly7IsNw3IdvTEZFL8aV2Svmp9R88vMiU5FDq6suNrMpi8JdY3I3/V
8mVbLsOBCnQb7hvloQ7LMJllZX1LsQGD6V07M1TpeGXhlvbXwbFHlDS4tbGdygLR
/2HOL6pfttAiUKEFinLWLWyCWf52NzAaK8RKSuXrd2zwlEw8HEAgg2w34GI+t/Cq
023XHjt0bvpAJkU3/8CSEjguMkU644p73/XoA5UQglmsCvzhGYIPV2/F6a85+637
2I+psKbg4XAS+2Ph9gOWom+cNHcZob4=
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:17:54 2025 by rpki-client