Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e8304de2-e4ec-3055-8612-a220fb1948e8.roa
File:                     e8304de2-e4ec-3055-8612-a220fb1948e8.roa (raw, json)
Hash identifier:          WNALXVVNpcXWQhXpvBi9mC1oNOoSERA0e0im6h9KFOQ=
Subject key identifier:   C3:D2:DD:9B:E6:48:C2:56:08:0F:5E:47:B1:38:3C:0D:49:ED:50:BC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AE8913E526A38BCF241F52B00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e8304de2-e4ec-3055-8612-a220fb1948e8.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     10557
IP address blocks:        216.172.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:3e:52:6a:38:bc:f2:41:f5:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=1ebc061a-8e25-444b-98c0-51cb57aba12e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:21:4c:db:5b:f6:8e:f0:1c:2f:77:08:f1:f9:
                    e9:59:ee:cc:77:f5:1b:d1:03:4a:8e:f8:a5:68:5d:
                    79:91:27:c4:fa:0d:06:2f:a3:f3:7a:22:59:a5:1d:
                    b9:91:98:97:72:cc:e0:33:d6:85:0d:49:44:b8:2d:
                    0f:0b:e0:2a:ca:54:86:1c:f4:ed:05:50:ca:a8:2c:
                    08:bc:c0:d8:ff:17:c5:00:3a:42:40:6a:33:43:cb:
                    10:78:de:80:e0:62:28:94:13:4d:67:36:0b:c5:c6:
                    6f:4c:98:5a:04:2e:55:e5:06:f1:c3:3a:c4:52:71:
                    e6:0d:4a:ab:2a:19:94:71:f4:f9:d7:17:9d:50:da:
                    0a:67:8d:0d:fb:3c:a5:5f:4c:11:3b:fe:33:0f:8d:
                    f1:25:db:04:3e:ef:ce:11:46:e2:44:7f:bf:e1:47:
                    d3:55:9e:62:ce:48:46:c0:30:48:ab:21:11:93:32:
                    f6:5c:9f:1c:6c:52:73:0f:af:7f:b4:5d:1c:dc:13:
                    7c:4f:cb:36:da:b6:ed:6c:b8:5a:02:05:52:9d:41:
                    b4:ad:d6:b5:36:33:1b:a7:34:9c:b4:4f:53:a3:46:
                    1b:15:78:93:6e:22:1e:93:ba:cc:2a:8c:b0:f0:98:
                    e8:18:87:98:b5:62:ff:7f:98:45:cb:ed:e2:13:c3:
                    ed:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D2:DD:9B:E6:48:C2:56:08:0F:5E:47:B1:38:3C:0D:49:ED:50:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e8304de2-e4ec-3055-8612-a220fb1948e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.172.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:e6:f1:85:09:61:db:b0:4c:c2:d2:37:60:86:62:2e:fd:e9:
         ff:d9:92:02:d2:c1:ff:de:5d:de:8c:52:3d:be:4a:2a:35:59:
         46:97:96:15:1d:74:a3:c0:04:fe:fa:f5:5e:c0:b9:e6:3d:72:
         c7:c9:54:6a:5b:89:25:fe:f4:2e:06:52:07:a5:06:60:d9:9c:
         6c:17:01:3e:d7:38:a6:ae:c3:63:2b:3c:5d:05:b4:cc:0a:4c:
         06:da:59:60:ee:24:c2:ed:57:3b:4a:21:e8:5f:77:6f:9d:1f:
         85:62:1d:49:e7:06:a2:46:62:0d:fa:31:a0:66:73:b1:45:d6:
         f8:09:65:f8:99:35:7f:0b:42:dd:43:cb:ed:d2:58:49:f2:c1:
         36:e6:db:cf:ee:3a:ed:34:95:44:b3:e9:d4:d5:43:21:1d:84:
         21:0e:e8:4c:c9:32:68:a9:f6:db:4b:37:c9:fa:b5:42:54:b2:
         3a:b3:f1:b9:62:a1:19:31:55:82:5e:a0:86:fa:17:a6:3b:82:
         81:aa:d7:99:89:9c:d7:58:09:31:6b:06:07:10:f2:25:3a:76:
         63:7d:ac:1f:06:a0:29:33:1c:d5:2e:1d:9b:e6:1e:47:ce:27:
         8f:cf:ec:f0:65:b9:b6:e1:4d:bf:82:25:fe:f7:ce:a0:be:b4:
         df:5d:17:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokT5Saji88kH1KwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk
MWViYzA2MWEtOGUyNS00NDRiLTk4YzAtNTFjYjU3YWJhMTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiFM21v2jvAcL3cI8fnpWe7Md/Ub0QNKjvil
aF15kSfE+g0GL6PzeiJZpR25kZiXcszgM9aFDUlEuC0PC+AqylSGHPTtBVDKqCwI
vMDY/xfFADpCQGozQ8sQeN6A4GIolBNNZzYLxcZvTJhaBC5V5QbxwzrEUnHmDUqr
KhmUcfT51xedUNoKZ40N+zylX0wRO/4zD43xJdsEPu/OEUbiRH+/4UfTVZ5izkhG
wDBIqyERkzL2XJ8cbFJzD69/tF0c3BN8T8s22rbtbLhaAgVSnUG0rda1NjMbpzSc
tE9To0YbFXiTbiIek7rMKoyw8JjoGIeYtWL/f5hFy+3iE8PtkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMPS3ZvmSMJWCA9eR7E4PA1J7VC8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZTgzMDRkZTItZTRlYy0z
MDU1LTg2MTItYTIyMGZiMTk0OGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KyOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIXm8YUJYduwTMLSN2CGYi796f/ZkgLSwf/eXd6MUj2+Sio1WUaXlhUd
dKPABP769V7AueY9csfJVGpbiSX+9C4GUgelBmDZnGwXAT7XOKauw2MrPF0FtMwK
TAbaWWDuJMLtVztKIehfd2+dH4ViHUnnBqJGYg36MaBmc7FF1vgJZfiZNX8LQt1D
y+3SWEnywTbm28/uOu00lUSz6dTVQyEdhCEO6EzJMmip9ttLN8n6tUJUsjqz8bli
oRkxVYJeoIb6F6Y7goGq15mJnNdYCTFrBgcQ8iU6dmN9rB8GoCkzHNUuHZvmHkfO
J4/P7PBlubbhTb+CJf73zqC+tN9dFxs=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:19:33 2025 by rpki-client