Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f4488841-470a-35ca-b505-8a8e2fd26888.roa
File:                     f4488841-470a-35ca-b505-8a8e2fd26888.roa (raw, json)
Hash identifier:          t+ecdoWjOo7ERl2PWF9klVngRyP7HFDKwtUWN6vRCdA=
Subject key identifier:   83:22:F7:0D:F9:A6:14:A5:0B:4B:17:44:AF:E9:12:A5:77:28:1D:6F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B149FD527AFAE8EF768B7670
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f4488841-470a-35ca-b505-8a8e2fd26888.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     44893
IP address blocks:        172.121.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:fd:52:7a:fa:e8:ef:76:8b:76:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=e9b4ae25-8db9-4728-b957-0f2ff7e3803c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ca:ce:e5:f1:05:21:63:bf:15:0b:03:b8:fe:
                    42:93:20:08:d6:54:b5:62:0f:e2:b4:3c:84:bf:a8:
                    b6:11:24:1f:95:3c:89:23:d9:69:57:e1:a6:6d:37:
                    11:7c:78:f5:e3:c7:46:88:49:b9:91:59:5a:16:dc:
                    62:d6:ec:23:3e:62:98:8f:06:b0:e3:ff:28:03:2c:
                    fe:72:93:78:20:e1:65:d4:d8:00:0a:6e:b1:89:21:
                    6e:33:25:c5:c2:e1:68:5c:fd:a8:01:09:ef:76:0a:
                    19:72:44:5e:d7:27:19:90:3c:65:5b:bf:27:87:30:
                    5a:74:a2:e0:9c:fe:0b:a0:6b:4a:29:32:bd:df:44:
                    bd:b2:19:bb:d4:42:d2:8f:15:f8:02:37:16:bc:62:
                    fa:32:2f:16:d0:e9:af:42:e3:81:9e:af:46:ba:41:
                    63:0a:5e:47:c2:4f:ae:af:39:be:41:cd:91:f0:99:
                    b7:1b:3c:09:e6:83:0a:33:d0:65:b7:34:a9:b9:42:
                    8a:49:0d:63:2b:6f:52:00:75:18:1d:64:57:4c:b7:
                    90:eb:21:94:13:44:6e:18:44:7e:4c:be:9d:18:c7:
                    df:db:ba:96:0e:fb:a9:c3:e7:e8:da:cf:a6:61:00:
                    24:60:7c:67:5a:92:d6:0e:c3:8c:7a:a4:63:57:9a:
                    4b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:22:F7:0D:F9:A6:14:A5:0B:4B:17:44:AF:E9:12:A5:77:28:1D:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f4488841-470a-35ca-b505-8a8e2fd26888.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:e7:05:ea:b0:ac:75:3f:49:6c:1a:33:ef:ce:b3:ed:65:e0:
         19:dc:25:66:55:0e:ca:2b:59:26:83:e2:67:5b:65:fb:64:88:
         84:d1:61:d1:b6:ac:f8:79:11:6b:b8:69:8e:51:1b:92:79:a3:
         af:eb:de:33:49:47:9c:0d:bc:14:ef:99:fd:ce:04:1f:5c:0a:
         c7:1d:07:aa:06:15:ca:2f:d0:75:67:e1:f3:3a:47:52:b6:c1:
         fb:4e:26:20:27:7e:75:2c:85:49:18:93:af:80:28:aa:14:78:
         1b:ce:78:b5:b3:0f:14:ba:32:82:7e:9c:cd:c1:02:fa:6a:c4:
         63:29:fc:03:74:23:52:30:4c:ac:08:7e:5e:3e:e4:ea:81:25:
         d3:00:93:e2:86:8b:20:72:ff:2a:a9:97:e3:83:12:52:64:00:
         61:99:d1:aa:4b:07:19:05:d5:15:54:5e:66:d3:fc:b1:ad:23:
         a9:2c:c4:5e:83:57:b4:30:29:45:fc:bf:ef:4b:a8:36:c0:2d:
         50:70:38:ab:2d:52:11:e8:12:7c:04:f7:fc:07:c7:e5:07:4d:
         bb:a6:15:ee:11:74:fb:8e:91:f4:3b:98:66:88:1f:85:9f:f2:
         45:c8:4f:6c:6c:d3:9e:d8:49:79:ba:89:e4:97:bb:ba:38:cc:
         78:19:ed:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSf1Sevro73aLdnAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk
ZTliNGFlMjUtOGRiOS00NzI4LWI5NTctMGYyZmY3ZTM4MDNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8rO5fEFIWO/FQsDuP5CkyAI1lS1Yg/itDyE
v6i2ESQflTyJI9lpV+GmbTcRfHj148dGiEm5kVlaFtxi1uwjPmKYjwaw4/8oAyz+
cpN4IOFl1NgACm6xiSFuMyXFwuFoXP2oAQnvdgoZckRe1ycZkDxlW78nhzBadKLg
nP4LoGtKKTK930S9shm71ELSjxX4AjcWvGL6Mi8W0OmvQuOBnq9GukFjCl5Hwk+u
rzm+Qc2R8Jm3GzwJ5oMKM9BltzSpuUKKSQ1jK29SAHUYHWRXTLeQ6yGUE0RuGER+
TL6dGMff27qWDvupw+fo2s+mYQAkYHxnWpLWDsOMeqRjV5pLSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIMi9w35phSlC0sXRK/pEqV3KB1vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZjQ0ODg4NDEtNDcwYS0z
NWNhLWI1MDUtOGE4ZTJmZDI2ODg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHluMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAznBeqwrHU/SWwaM+/Os+1l4BncJWZVDsorWSaD4mdbZftkiITRYdG2
rPh5EWu4aY5RG5J5o6/r3jNJR5wNvBTvmf3OBB9cCscdB6oGFcov0HVn4fM6R1K2
wftOJiAnfnUshUkYk6+AKKoUeBvOeLWzDxS6MoJ+nM3BAvpqxGMp/AN0I1IwTKwI
fl4+5OqBJdMAk+KGiyBy/yqpl+ODElJkAGGZ0apLBxkF1RVUXmbT/LGtI6ksxF6D
V7QwKUX8v+9LqDbALVBwOKstUhHoEnwE9/wHx+UHTbumFe4RdPuOkfQ7mGaIH4Wf
8kXIT2xs057YSXm6ieSXu7o4zHgZ7Uc=
-----END CERTIFICATE-----
Generated at Thu May 1 22:37:34 2025 by rpki-client