Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/53581dd1-3d00-3a10-be94-e21428e044c5.roa
File:                     53581dd1-3d00-3a10-be94-e21428e044c5.roa (raw, json)
Hash identifier:          uPdvn7Ws4h9qzAcqH4lOmlsRA6NTOdkxkoLig68bWDU=
Subject key identifier:   C4:56:74:29:70:D6:40:AF:22:A7:56:1E:94:F3:84:34:CA:75:FD:D2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849AD1A15BC553DC9F4B7E56800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/53581dd1-3d00-3a10-be94-e21428e044c5.roa
Signing time:             Mon 28 Apr 2025 13:01:00 +0000
ROA not before:           Mon 28 Apr 2025 13:01:00 +0000
ROA not after:            Sun 27 Jul 2025 13:01:00 +0000
asID:                     10557
IP address blocks:        142.252.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:1a:15:bc:55:3d:c9:f4:b7:e5:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 28 13:01:00 2025 GMT
            Not After : Jul 27 13:01:00 2025 GMT
        Subject: CN=3041db6a-e722-427f-bec7-f817870186f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fd:c3:99:7a:bf:59:43:7d:d7:19:3c:68:a6:
                    b1:29:56:21:e1:5c:bb:ed:ed:f9:38:20:7b:dc:b2:
                    08:cd:62:e6:63:90:a5:34:92:56:0d:5a:c9:a9:4e:
                    e7:c8:e7:78:8f:c0:85:9a:cf:65:0c:0e:e9:fc:f2:
                    d4:1d:85:08:ed:84:51:8c:76:38:4d:65:f1:96:6d:
                    d8:7f:4e:85:6c:b2:f6:df:98:4f:68:cd:eb:a0:2d:
                    0b:03:34:fe:fc:62:32:47:da:e3:d2:b1:d6:98:58:
                    75:a8:3e:79:ed:1e:45:db:07:03:f2:2c:41:be:7e:
                    dd:76:4a:2a:a8:58:33:45:17:9c:ae:fe:af:d2:ba:
                    11:ab:56:5b:d0:67:de:48:f9:93:0d:7b:24:87:a7:
                    6f:4c:59:b1:87:65:36:47:8b:9b:89:6c:1e:35:6a:
                    0b:ae:ae:82:e2:53:c2:46:f9:61:9c:52:09:e0:96:
                    2f:6c:d5:a6:72:6d:eb:0a:62:07:4a:5f:5a:b0:db:
                    1b:48:68:71:65:71:75:e1:48:a7:55:be:b3:e6:f5:
                    e1:c8:85:e7:7e:41:2d:6e:52:d1:71:de:19:c9:d9:
                    52:b6:5c:2c:e9:79:98:fc:d6:00:26:76:36:0d:ae:
                    fb:42:d3:96:9f:d0:1e:99:1e:44:64:99:07:0d:2c:
                    c6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:56:74:29:70:D6:40:AF:22:A7:56:1E:94:F3:84:34:CA:75:FD:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/53581dd1-3d00-3a10-be94-e21428e044c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:02:48:93:c5:12:4b:e2:6f:b6:90:d2:bb:fe:7b:88:49:48:
         ba:5f:cb:8f:2b:7a:41:fe:01:81:7a:07:e7:ce:40:2c:f2:ed:
         7c:bd:a4:55:a9:ae:8f:34:1b:b2:8b:af:da:2a:14:9b:a1:40:
         f3:9f:c0:17:a8:9b:b3:d0:a0:ad:0d:1a:6c:eb:4d:79:0c:75:
         69:7c:f2:2e:d6:63:96:43:6b:03:6c:2b:26:78:99:33:9b:01:
         95:2d:8a:29:94:79:9b:ea:3c:bf:66:d8:8b:d7:b5:b7:e6:d1:
         d7:3f:4e:fe:ac:5d:4a:ff:10:1c:50:e5:41:02:f3:a1:92:20:
         27:63:dd:72:cd:8e:c1:5c:26:23:64:83:b0:55:46:c6:77:80:
         34:f4:79:76:79:6a:45:30:00:54:98:13:88:16:ca:47:47:f3:
         2e:f7:5b:ee:29:fb:2a:46:59:b2:b0:43:9b:51:96:8d:dc:19:
         37:2a:86:dc:b5:bd:8f:f5:3d:97:9d:0a:ab:ef:87:3c:3e:ed:
         f0:a5:86:8b:7d:13:35:49:c0:02:a3:df:15:72:fb:37:ab:67:
         34:40:e5:d8:d8:f6:21:bd:60:44:f9:6c:7d:a8:7c:bf:6b:11:
         c6:2f:63:c7:47:d6:16:6e:4c:2e:e2:28:37:3f:31:ed:d0:ea:
         35:7f:01:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhW8VT3J9LflaAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk
MzA0MWRiNmEtZTcyMi00MjdmLWJlYzctZjgxNzg3MDE4NmYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP3DmXq/WUN91xk8aKaxKVYh4Vy77e35OCB7
3LIIzWLmY5ClNJJWDVrJqU7nyOd4j8CFms9lDA7p/PLUHYUI7YRRjHY4TWXxlm3Y
f06FbLL235hPaM3roC0LAzT+/GIyR9rj0rHWmFh1qD557R5F2wcD8ixBvn7ddkoq
qFgzRRecrv6v0roRq1Zb0GfeSPmTDXskh6dvTFmxh2U2R4ubiWweNWoLrq6C4lPC
RvlhnFIJ4JYvbNWmcm3rCmIHSl9asNsbSGhxZXF14UinVb6z5vXhyIXnfkEtblLR
cd4ZydlStlws6XmY/NYAJnY2Da77QtOWn9AemR5EZJkHDSzGPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMRWdClw1kCvIqdWHpTzhDTKdf3SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNTM1ODFkZDEtM2QwMC0z
YTEwLWJlOTQtZTIxNDI4ZTA0NGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvzdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAUCSJPFEkvib7aQ0rv+e4hJSLpfy48rekH+AYF6B+fOQCzy7Xy9pFWp
ro80G7KLr9oqFJuhQPOfwBeom7PQoK0NGmzrTXkMdWl88i7WY5ZDawNsKyZ4mTOb
AZUtiimUeZvqPL9m2IvXtbfm0dc/Tv6sXUr/EBxQ5UEC86GSICdj3XLNjsFcJiNk
g7BVRsZ3gDT0eXZ5akUwAFSYE4gWykdH8y73W+4p+ypGWbKwQ5tRlo3cGTcqhty1
vY/1PZedCqvvhzw+7fClhot9EzVJwAKj3xVy+zerZzRA5djY9iG9YET5bH2ofL9r
EcYvY8dH1hZuTC7iKDc/Me3Q6jV/AfM=
-----END CERTIFICATE-----
Generated at Sun May 11 02:08:10 2025 by rpki-client