Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cea8339a-b055-3fdd-833e-66824b7fc719.roa
File:                     cea8339a-b055-3fdd-833e-66824b7fc719.roa (raw, json)
Hash identifier:          QYliaiPykN+c8bu5e+TaNeEL1+hmTwBAVJ974cImcGw=
Subject key identifier:   3A:BC:12:13:29:4E:51:31:56:E2:B6:16:1C:E3:08:60:83:3D:62:5C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B7F520B322494C9BF19C25180
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cea8339a-b055-3fdd-833e-66824b7fc719.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     7018
IP address blocks:        172.121.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:0b:32:24:94:c9:bf:19:c2:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=a0c0df5b-73eb-4050-a52e-75d0dcf413d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d8:3e:21:db:63:cb:c1:2a:fc:14:73:12:5d:
                    aa:6a:c4:24:f6:1e:e5:8b:f2:99:bb:0a:eb:b7:49:
                    60:cb:fd:0a:fb:42:a5:39:b6:cf:1b:f7:db:7d:48:
                    8a:9a:e0:b3:03:44:9d:48:2a:ea:5f:a6:09:7c:c5:
                    38:af:e7:dc:9b:d4:3e:1b:0b:fd:71:9a:07:24:6c:
                    6f:90:34:46:54:54:42:9f:78:8f:36:94:8f:8f:c2:
                    56:60:8e:08:d0:b2:e4:f3:91:41:a1:00:f9:d4:cc:
                    77:f7:0a:57:87:31:bc:12:58:27:0c:66:39:43:a4:
                    c4:a1:82:1a:60:55:56:e7:fd:3e:0d:cb:fb:26:bf:
                    7f:41:2e:45:0f:0b:fd:9d:6b:4f:fd:9a:73:a2:f5:
                    c7:56:af:29:46:43:9e:7c:d4:ea:2c:5e:d6:38:f8:
                    74:f7:4d:47:16:ec:b4:f8:32:6c:b1:e6:44:1a:31:
                    5c:86:1c:83:7f:cd:b3:8f:56:41:f6:47:36:24:98:
                    f6:10:e0:12:46:4d:bd:64:5c:72:96:a0:de:39:81:
                    f9:f1:62:25:d4:09:41:7c:f5:72:b3:d7:e8:3a:fe:
                    b0:6a:22:43:b2:80:4a:94:e7:e1:19:f6:40:ff:d4:
                    d9:70:16:f1:b6:0e:82:d8:d0:ba:e3:8d:ec:c6:cc:
                    f6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:BC:12:13:29:4E:51:31:56:E2:B6:16:1C:E3:08:60:83:3D:62:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cea8339a-b055-3fdd-833e-66824b7fc719.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:e1:8e:a8:d0:2f:be:3c:ea:b4:50:ed:c7:ca:b6:6e:03:5c:
         d5:d9:e1:93:d6:be:1e:48:7c:75:cb:58:63:0e:f6:2c:08:cb:
         3b:12:b1:e9:2f:d3:48:db:15:85:a8:b5:67:04:93:c7:7b:21:
         56:29:5e:9e:b5:84:83:e4:5a:28:07:4e:77:22:3f:19:8a:ad:
         c2:26:d7:77:e0:d3:0f:aa:96:5b:d2:94:3a:4f:01:f1:43:70:
         31:75:df:7e:d4:93:4d:31:05:40:a7:a4:f6:ab:e3:07:8b:de:
         07:dc:1e:08:7b:78:7f:61:1a:90:fc:50:a5:0c:58:79:32:6e:
         32:16:df:3a:87:7d:ab:eb:75:a3:77:93:d9:62:61:10:3e:47:
         79:77:92:47:4f:96:04:d2:46:20:7b:13:f5:40:a7:55:a7:82:
         14:2b:cd:e2:6f:73:a1:d5:13:33:64:93:21:44:0b:11:50:ec:
         02:03:54:cb:42:1f:20:70:a8:71:8c:a7:52:d4:f9:7d:7b:b3:
         a2:51:84:de:83:94:70:c0:07:80:1f:bb:90:88:06:e1:fd:6b:
         af:43:6f:f0:d2:f0:d9:b8:3a:0c:cc:03:6f:cc:a3:c2:62:e7:
         33:f2:ff:72:c5:67:c9:6e:a2:90:06:6b:99:9e:ca:e1:9a:84:
         df:2d:df:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UgsyJJTJvxnCUYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk
YTBjMGRmNWItNzNlYi00MDUwLWE1MmUtNzVkMGRjZjQxM2Q3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ng+Idtjy8Eq/BRzEl2qasQk9h7li/KZuwrr
t0lgy/0K+0KlObbPG/fbfUiKmuCzA0SdSCrqX6YJfMU4r+fcm9Q+Gwv9cZoHJGxv
kDRGVFRCn3iPNpSPj8JWYI4I0LLk85FBoQD51Mx39wpXhzG8ElgnDGY5Q6TEoYIa
YFVW5/0+Dcv7Jr9/QS5FDwv9nWtP/ZpzovXHVq8pRkOefNTqLF7WOPh0901HFuy0
+DJsseZEGjFchhyDf82zj1ZB9kc2JJj2EOASRk29ZFxylqDeOYH58WIl1AlBfPVy
s9foOv6waiJDsoBKlOfhGfZA/9TZcBbxtg6C2NC6443sxsz24wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDq8EhMpTlExVuK2FhzjCGCDPWJcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvY2VhODMzOWEtYjA1NS0z
ZmRkLTgzM2UtNjY4MjRiN2ZjNzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHkuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEDhjqjQL7486rRQ7cfKtm4DXNXZ4ZPWvh5IfHXLWGMO9iwIyzsSsekv
00jbFYWotWcEk8d7IVYpXp61hIPkWigHTnciPxmKrcIm13fg0w+qllvSlDpPAfFD
cDF1337Uk00xBUCnpPar4weL3gfcHgh7eH9hGpD8UKUMWHkybjIW3zqHfavrdaN3
k9liYRA+R3l3kkdPlgTSRiB7E/VAp1WnghQrzeJvc6HVEzNkkyFECxFQ7AIDVMtC
HyBwqHGMp1LU+X17s6JRhN6DlHDAB4Afu5CIBuH9a69Db/DS8Nm4OgzMA2/Mo8Ji
5zPy/3LFZ8luopAGa5meyuGahN8t39o=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:36:29 2025 by rpki-client