Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/87062096-4bec-39b3-903a-a621a1c434a0.roa
File:                     87062096-4bec-39b3-903a-a621a1c434a0.roa (raw, json)
Hash identifier:          I/m1zJkPe1wJToXUCI8neID1nQal497E3b9mP/Xh4OQ=
Subject key identifier:   B6:46:56:52:35:CE:E1:EE:B8:2D:9C:38:27:6B:F9:97:66:F4:57:F6
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B64CE6DBA4D648548B3F91580
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/87062096-4bec-39b3-903a-a621a1c434a0.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     44559
IP address blocks:        172.121.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:6d:ba:4d:64:85:48:b3:f9:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=b5ec492c-1d6f-4a61-b366-59e41181d869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:69:ee:6d:b5:c7:b6:d2:83:f5:39:f3:c5:51:
                    80:f8:17:7f:63:fe:06:39:25:78:b0:2c:71:c4:04:
                    15:82:8b:08:19:77:8b:bd:8c:95:1d:ed:55:6f:db:
                    66:ba:2e:04:f8:bd:43:6d:f3:f5:e9:e0:cb:6a:5b:
                    a6:19:1e:60:5c:2b:05:77:27:12:87:df:5e:97:67:
                    3c:83:31:ad:ee:6c:82:75:70:fa:4c:12:3f:eb:90:
                    d4:90:a9:39:2a:28:75:f8:3c:03:89:64:e3:48:35:
                    57:1a:eb:a6:9f:1b:dc:af:3f:00:d0:ee:85:79:f3:
                    87:06:40:b8:44:22:89:73:0f:ba:b4:70:38:8b:b3:
                    63:11:88:69:1f:2f:4f:4f:ee:0e:3a:aa:fb:da:98:
                    8b:d4:2d:20:4f:01:83:fb:3e:40:4c:1f:45:8d:d4:
                    c2:7f:e8:dd:7b:da:d4:67:70:47:7d:89:1c:50:b8:
                    6f:c4:e9:f1:a5:69:45:c7:ac:03:58:6d:f6:7f:45:
                    2f:68:37:23:04:70:ee:1f:70:a1:7c:52:a2:05:52:
                    99:cf:1f:b0:1c:5a:e5:85:d1:8d:ab:d5:ec:a9:5f:
                    26:91:64:f2:00:b1:a2:e6:27:b2:06:2b:2a:66:db:
                    45:5e:3e:b0:f5:db:79:16:45:51:93:fb:cd:4b:aa:
                    d4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:46:56:52:35:CE:E1:EE:B8:2D:9C:38:27:6B:F9:97:66:F4:57:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/87062096-4bec-39b3-903a-a621a1c434a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:9e:ac:9a:1f:15:26:df:72:c0:9a:7a:4a:cb:5d:2e:d3:56:
         e4:5a:83:54:ae:62:2c:0c:ea:1c:20:87:6d:e3:d4:78:a9:88:
         95:ee:4b:bc:e9:58:b3:50:6f:7e:a5:5c:e6:0c:b0:11:e7:b1:
         0d:14:b7:e3:34:b5:3c:c8:f5:56:b5:47:4e:d9:d2:a3:88:20:
         57:43:28:69:03:ef:76:5a:89:62:aa:95:35:d4:64:95:56:bc:
         b0:6e:a5:b6:23:e0:ea:01:ab:ed:b7:60:ba:2b:b8:26:5f:0b:
         e5:02:3e:d8:5b:83:46:ce:97:34:71:10:23:49:51:82:ff:4f:
         4b:9e:39:de:13:09:95:53:6c:14:8f:9a:e7:30:c5:22:c8:90:
         c0:93:c1:44:3e:69:10:53:cb:be:89:9b:e1:ac:6a:da:d7:30:
         50:fb:b2:c1:96:dd:6b:52:4f:31:96:f0:e3:0e:c7:b3:a0:d1:
         a9:d1:0e:55:05:c0:7e:6f:27:4b:98:e3:9b:5c:77:a4:2e:5d:
         0d:26:6a:9f:a1:45:16:95:18:17:e7:f6:40:a8:ed:46:cf:97:
         8f:b6:58:22:d6:2b:7a:cf:07:fb:ef:71:1c:36:61:7b:85:6b:
         4e:b3:37:c2:9e:79:19:b6:8d:78:80:ab:ef:10:34:81:cd:92:
         ed:68:25:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzm26TWSFSLP5FYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
YjVlYzQ5MmMtMWQ2Zi00YTYxLWIzNjYtNTllNDExODFkODY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2nubbXHttKD9TnzxVGA+Bd/Y/4GOSV4sCxx
xAQVgosIGXeLvYyVHe1Vb9tmui4E+L1DbfP16eDLalumGR5gXCsFdycSh99el2c8
gzGt7myCdXD6TBI/65DUkKk5Kih1+DwDiWTjSDVXGuumnxvcrz8A0O6FefOHBkC4
RCKJcw+6tHA4i7NjEYhpHy9PT+4OOqr72piL1C0gTwGD+z5ATB9FjdTCf+jde9rU
Z3BHfYkcULhvxOnxpWlFx6wDWG32f0UvaDcjBHDuH3ChfFKiBVKZzx+wHFrlhdGN
q9XsqV8mkWTyALGi5ieyBisqZttFXj6w9dt5FkVRk/vNS6rU/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLZGVlI1zuHuuC2cOCdr+Zdm9Ff2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvODcwNjIwOTYtNGJlYy0z
OWIzLTkwM2EtYTYyMWExYzQzNGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHl3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFierJofFSbfcsCaekrLXS7TVuRag1SuYiwM6hwgh23j1HipiJXuS7zp
WLNQb36lXOYMsBHnsQ0Ut+M0tTzI9Va1R07Z0qOIIFdDKGkD73ZaiWKqlTXUZJVW
vLBupbYj4OoBq+23YLoruCZfC+UCPthbg0bOlzRxECNJUYL/T0ueOd4TCZVTbBSP
mucwxSLIkMCTwUQ+aRBTy76Jm+GsatrXMFD7ssGW3WtSTzGW8OMOx7Og0anRDlUF
wH5vJ0uY45tcd6QuXQ0map+hRRaVGBfn9kCo7UbPl4+2WCLWK3rPB/vvcRw2YXuF
a06zN8KeeRm2jXiAq+8QNIHNku1oJTA=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:51:40 2025 by rpki-client