Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/65adb0d0-5667-3f59-8072-8c4492bf1e75.roa
File:                     65adb0d0-5667-3f59-8072-8c4492bf1e75.roa (raw, json)
Hash identifier:          gPkSCVpcWcxB7iF6S70yVCG1RdKwFcXSyiDeX9XDT2k=
Subject key identifier:   31:C6:54:8B:AE:2B:51:81:2A:DC:22:35:5E:16:21:E4:E6:B4:9B:A6
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849AD1A1CE5AF26B0781665C060
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/65adb0d0-5667-3f59-8072-8c4492bf1e75.roa
Signing time:             Mon 28 Apr 2025 13:01:00 +0000
ROA not before:           Mon 28 Apr 2025 13:01:00 +0000
ROA not after:            Sun 27 Jul 2025 13:01:00 +0000
asID:                     10557
IP address blocks:        142.252.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:1a:1c:e5:af:26:b0:78:16:65:c0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 28 13:01:00 2025 GMT
            Not After : Jul 27 13:01:00 2025 GMT
        Subject: CN=09f5923d-c430-4936-b876-19f4953306cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f9:a3:9e:c0:68:98:fc:ae:7e:e4:87:c6:29:
                    57:12:93:f1:dc:25:29:ef:1a:5f:f8:9f:79:b7:c6:
                    7f:7e:cd:3d:89:74:28:71:81:ef:ea:10:41:7b:a3:
                    e4:3c:7d:78:5e:2e:54:36:8c:ba:76:8e:32:55:f7:
                    a1:62:e6:18:8b:dd:02:8b:58:41:79:a8:3d:ba:b7:
                    01:42:02:02:bc:09:e2:37:3b:95:b6:91:91:12:3e:
                    ff:ae:2f:c6:28:3a:73:d4:73:41:2a:2a:38:f0:f6:
                    45:2b:7b:85:7b:89:c3:bd:59:3a:7d:f5:17:c0:a8:
                    2f:ee:0d:f0:ae:de:31:2e:dc:ae:75:aa:fb:7b:b3:
                    cd:06:4d:c6:f4:48:83:f9:6d:45:75:0c:ec:e4:c6:
                    48:40:3b:aa:30:11:4f:26:28:ca:65:45:22:8f:8b:
                    30:29:50:c1:62:4b:d0:c8:cd:87:d7:4c:e1:49:19:
                    7e:2a:5c:c5:9d:23:cf:f6:68:bc:2d:b4:5f:74:05:
                    39:db:65:8f:7b:f2:d2:62:3e:47:da:1d:99:57:94:
                    8d:93:ab:7a:20:b2:3f:5c:48:11:5d:52:10:ca:3a:
                    84:48:ac:68:f0:9b:99:82:3c:59:2c:19:a4:6d:af:
                    d7:a8:86:21:b3:64:19:5e:f9:68:85:d9:1d:01:45:
                    65:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C6:54:8B:AE:2B:51:81:2A:DC:22:35:5E:16:21:E4:E6:B4:9B:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/65adb0d0-5667-3f59-8072-8c4492bf1e75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:8e:94:97:74:1b:74:9b:0b:c7:a5:5d:fc:7b:4a:be:03:76:
         12:77:c8:45:83:cf:0b:70:c5:2f:99:e1:fd:97:eb:73:fd:db:
         4c:65:51:73:01:9e:ce:28:dc:ac:34:24:89:9c:7c:a3:9a:d8:
         21:0d:3e:4f:5c:0d:b6:e6:c4:ed:44:63:57:a7:6d:99:6e:14:
         bb:a6:52:df:08:16:b8:3a:ab:ed:33:2a:10:bb:6b:e9:55:4f:
         a3:74:93:87:08:40:62:40:06:85:c3:13:41:d8:5e:13:2f:38:
         91:fc:25:a4:df:ff:0a:ab:56:01:0c:8e:c1:79:53:0b:4c:5b:
         b5:4a:a5:23:99:22:34:4a:b9:f9:d4:7c:39:be:9b:2f:b5:2c:
         00:98:1d:71:af:08:7c:ca:53:0a:25:d8:42:82:25:0d:c7:d6:
         95:27:e4:d4:cd:bf:ce:eb:3e:51:31:6f:a1:37:2c:02:10:e0:
         2a:2c:96:93:96:8d:ee:e0:01:48:28:73:a9:8e:b5:4e:4b:7b:
         22:7a:67:ec:d3:76:dc:3b:fc:f8:9e:4a:58:60:83:6b:e9:76:
         24:3a:81:e4:38:a5:72:75:42:05:c8:55:c3:5a:51:65:84:f7:
         7c:8e:be:7e:1a:b2:83:8e:45:48:4d:94:80:9f:db:8a:35:97:
         f9:fa:6c:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhzlryaweBZlwGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk
MDlmNTkyM2QtYzQzMC00OTM2LWI4NzYtMTlmNDk1MzMwNmNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvmjnsBomPyufuSHxilXEpPx3CUp7xpf+J95
t8Z/fs09iXQocYHv6hBBe6PkPH14Xi5UNoy6do4yVfehYuYYi90Ci1hBeag9urcB
QgICvAniNzuVtpGREj7/ri/GKDpz1HNBKio48PZFK3uFe4nDvVk6ffUXwKgv7g3w
rt4xLtyudar7e7PNBk3G9EiD+W1FdQzs5MZIQDuqMBFPJijKZUUij4swKVDBYkvQ
yM2H10zhSRl+KlzFnSPP9mi8LbRfdAU522WPe/LSYj5H2h2ZV5SNk6t6ILI/XEgR
XVIQyjqESKxo8JuZgjxZLBmkba/XqIYhs2QZXvlohdkdAUVlpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDHGVIuuK1GBKtwiNV4WIeTmtJumMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNjVhZGIwZDAtNTY2Ny0z
ZjU5LTgwNzItOGM0NDkyYmYxZTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvyIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG2OlJd0G3SbC8elXfx7Sr4DdhJ3yEWDzwtwxS+Z4f2X63P920xlUXMB
ns4o3Kw0JImcfKOa2CENPk9cDbbmxO1EY1enbZluFLumUt8IFrg6q+0zKhC7a+lV
T6N0k4cIQGJABoXDE0HYXhMvOJH8JaTf/wqrVgEMjsF5UwtMW7VKpSOZIjRKufnU
fDm+my+1LACYHXGvCHzKUwol2EKCJQ3H1pUn5NTNv87rPlExb6E3LAIQ4CoslpOW
je7gAUgoc6mOtU5LeyJ6Z+zTdtw7/PieSlhgg2vpdiQ6geQ4pXJ1QgXIVcNaUWWE
93yOvn4asoOORUhNlICf24o1l/n6bBE=
-----END CERTIFICATE-----
Generated at Sat May 10 19:22:22 2025 by rpki-client