Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9d2ead11-19ba-3725-a46e-bf8efdc1ad25.roa
File:                     9d2ead11-19ba-3725-a46e-bf8efdc1ad25.roa (raw, json)
Hash identifier:          FCclOExPBxRH4nav0ECoOcIduBUMm9rQRnw/IzzOl6Q=
Subject key identifier:   3C:E1:E5:10:16:41:94:40:FE:2D:DB:F3:A2:4F:D6:BF:4A:88:9B:14
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A384F20D87E7CBD8BB38E19D0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9d2ead11-19ba-3725-a46e-bf8efdc1ad25.roa
Signing time:             Tue 17 Jun 2025 09:45:28 +0000
ROA not before:           Tue 17 Jun 2025 09:45:28 +0000
ROA not after:            Mon 15 Sep 2025 09:45:28 +0000
asID:                     21743
IP address blocks:        172.121.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:4f:20:d8:7e:7c:bd:8b:b3:8e:19:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 17 09:45:28 2025 GMT
            Not After : Sep 15 09:45:28 2025 GMT
        Subject: CN=ec3d45a3-6da1-4001-88a0-b901994dcda3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:76:96:ef:12:01:d5:51:79:b5:61:37:9c:20:
                    1d:f5:9d:ec:b2:33:ad:ac:bd:67:6b:b4:5f:40:4a:
                    52:81:69:f3:d6:74:16:4f:dc:ab:2c:a8:15:4a:93:
                    dd:fe:c4:a7:2f:4a:e0:5b:2f:49:2a:72:20:71:59:
                    fc:56:d5:e4:99:cf:b6:a1:a5:f7:32:e9:24:21:0b:
                    c3:b4:83:90:10:d2:81:ab:19:66:14:a3:58:ec:27:
                    e1:ff:12:b0:f0:dd:3c:43:25:0c:fd:13:c8:98:3a:
                    6a:97:22:94:00:ee:80:3a:5e:3a:62:4c:c4:65:44:
                    91:ab:21:2b:4b:0d:fd:6c:71:d2:f5:93:68:d4:db:
                    1a:37:39:f0:4d:87:6e:a3:0b:55:50:56:63:9d:09:
                    75:aa:49:98:d2:1b:2c:b3:f5:1c:f8:4e:a4:f1:06:
                    3c:29:02:ea:bc:d4:d1:d3:4c:95:fb:56:b5:cc:28:
                    59:09:23:2e:9b:03:ac:08:bc:77:62:db:57:e0:f9:
                    7e:11:24:7e:8f:c3:7e:38:be:b3:a9:39:cb:4a:27:
                    de:22:34:1e:34:29:42:4e:a2:64:3f:16:37:61:1a:
                    19:94:4b:7f:b2:e2:20:b4:6b:cf:d4:db:4f:b4:df:
                    58:e9:4e:42:60:76:2d:c6:10:78:a9:3f:4f:84:b8:
                    9a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E1:E5:10:16:41:94:40:FE:2D:DB:F3:A2:4F:D6:BF:4A:88:9B:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9d2ead11-19ba-3725-a46e-bf8efdc1ad25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:56:0d:a0:e5:d6:98:9b:5e:39:9d:b7:b0:5a:96:4d:2e:8f:
         79:c9:73:d9:00:ca:ed:1b:a5:2f:53:eb:ba:bd:aa:a2:63:5d:
         2b:76:18:3b:d7:29:ad:21:d7:8c:2e:16:73:95:dc:79:a5:e2:
         33:cf:4e:12:fe:48:7d:7c:4f:51:2a:a5:2f:d1:fe:6a:bf:a6:
         b5:41:ca:04:74:36:d7:b4:dd:dc:95:65:74:79:73:8b:37:f3:
         db:07:12:83:ae:b4:15:95:33:c8:ea:91:d0:af:f4:e4:f9:79:
         38:c1:a6:e6:59:5b:66:e4:15:66:69:fe:80:e5:e1:78:b8:23:
         b4:0e:7e:31:69:dc:9c:10:2d:d9:79:7f:b4:a7:09:f4:46:23:
         fe:45:c4:03:be:93:2f:93:53:c5:3d:f3:1f:ed:91:fb:34:25:
         6b:14:85:26:39:7f:de:95:8b:d6:90:43:2e:f7:57:a5:9c:22:
         89:52:cf:68:3e:70:07:80:2a:05:32:ee:fa:bb:5a:4a:ef:93:
         76:ef:69:9b:f9:b3:93:f1:81:05:18:a2:c8:af:1e:1f:b3:68:
         e3:d5:df:fb:d4:29:cc:72:96:99:46:c2:8d:de:24:71:34:53:
         c8:c5:be:b2:be:72:36:4d:99:65:fa:cb:d6:81:43:cd:0c:b1:
         34:f0:b2:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo4TyDYfny9i7OOGdAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDYxNzA5NDUyOFoXDTI1MDkxNTA5NDUyOFowLzEtMCsGA1UEAxMk
ZWMzZDQ1YTMtNmRhMS00MDAxLTg4YTAtYjkwMTk5NGRjZGEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3aW7xIB1VF5tWE3nCAd9Z3ssjOtrL1na7Rf
QEpSgWnz1nQWT9yrLKgVSpPd/sSnL0rgWy9JKnIgcVn8VtXkmc+2oaX3MukkIQvD
tIOQENKBqxlmFKNY7Cfh/xKw8N08QyUM/RPImDpqlyKUAO6AOl46YkzEZUSRqyEr
Sw39bHHS9ZNo1NsaNznwTYduowtVUFZjnQl1qkmY0hsss/Uc+E6k8QY8KQLqvNTR
00yV+1a1zChZCSMumwOsCLx3YttX4Pl+ESR+j8N+OL6zqTnLSifeIjQeNClCTqJk
PxY3YRoZlEt/suIgtGvP1NtPtN9Y6U5CYHYtxhB4qT9PhLiazQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDzh5RAWQZRA/i3b86JP1r9KiJsUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOWQyZWFkMTEtMTliYS0z
NzI1LWE0NmUtYmY4ZWZkYzFhZDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHl9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHdWDaDl1pibXjmdt7Balk0uj3nJc9kAyu0bpS9T67q9qqJjXSt2GDvX
Ka0h14wuFnOV3Hml4jPPThL+SH18T1EqpS/R/mq/prVBygR0Nte03dyVZXR5c4s3
89sHEoOutBWVM8jqkdCv9OT5eTjBpuZZW2bkFWZp/oDl4Xi4I7QOfjFp3JwQLdl5
f7SnCfRGI/5FxAO+ky+TU8U98x/tkfs0JWsUhSY5f96Vi9aQQy73V6WcIolSz2g+
cAeAKgUy7vq7Wkrvk3bvaZv5s5PxgQUYosivHh+zaOPV3/vUKcxylplGwo3eJHE0
U8jFvrK+cjZNmWX6y9aBQ80MsTTwsmU=
-----END CERTIFICATE-----
Generated at Tue Jul 1 15:11:22 2025 by rpki-client