Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/014d410d-ace6-3301-a219-3e27289cfcd9.roa
File:                     014d410d-ace6-3301-a219-3e27289cfcd9.roa (raw, json)
Hash identifier:          7xS2ToDjqkh27hOk8Bqv4wJIsRPtkBlYIV7xcptcMuo=
Subject key identifier:   A3:60:F4:04:F7:1A:96:76:8C:4B:63:D2:FC:42:DF:8B:38:7F:3B:4F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B64CE6839E8CCC860927E4780
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/014d410d-ace6-3301-a219-3e27289cfcd9.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     44559
IP address blocks:        142.252.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:68:39:e8:cc:c8:60:92:7e:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=0cd999f4-0138-46cb-b067-f173970dac86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e4:8a:83:57:43:a4:e1:a7:93:16:5d:95:68:
                    50:02:15:41:e0:d6:71:d0:91:a8:d0:04:83:0c:b3:
                    fb:e6:77:54:29:d2:63:48:0d:83:57:52:17:e2:73:
                    94:13:12:b5:66:2c:5a:50:23:a9:c0:42:c1:26:b5:
                    a3:51:ef:99:0b:42:17:03:13:ec:7d:ef:8f:7e:e2:
                    f7:42:37:d2:e2:50:f8:13:c4:9d:86:f3:a9:4c:5b:
                    76:4c:ce:9d:34:c9:60:25:22:80:fd:39:36:b5:96:
                    39:05:09:86:f5:c7:bd:9b:33:65:f1:8e:5a:e4:4b:
                    13:bd:4c:ef:3b:af:ab:0e:35:95:58:39:cf:43:b4:
                    7e:19:55:95:43:5b:8e:65:1d:be:60:44:7b:24:9e:
                    f6:4f:82:10:61:73:83:e0:74:36:2b:5c:1f:9d:cd:
                    b9:78:e4:90:96:eb:57:4f:e7:4f:88:46:8f:d5:7e:
                    39:40:02:dc:6c:b7:70:dc:56:b5:32:04:45:60:1d:
                    da:c5:8e:6a:be:a6:bc:80:ca:80:c6:a1:9a:67:fd:
                    39:32:38:b0:38:26:a9:02:4a:ed:64:4c:fc:44:c7:
                    2e:c1:2e:db:8e:67:91:9a:b6:31:4d:0e:78:02:fe:
                    0b:08:46:fe:e1:1e:f1:3f:0d:13:73:de:17:3b:88:
                    e4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:60:F4:04:F7:1A:96:76:8C:4B:63:D2:FC:42:DF:8B:38:7F:3B:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/014d410d-ace6-3301-a219-3e27289cfcd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:4b:64:47:a0:0b:1e:f0:a9:97:46:d7:08:70:99:ca:0d:f3:
         30:55:06:62:01:ab:b0:67:7d:d5:dc:b0:6f:ae:21:cb:1f:58:
         d6:73:1a:8d:be:64:2b:ec:18:ec:9f:34:3a:1f:ec:b4:d6:c8:
         a3:b5:bb:3e:c7:d4:a5:f6:a1:0a:e6:6b:46:35:80:f9:41:33:
         51:46:d6:5c:6b:db:7d:a5:61:98:42:2f:7a:08:27:ad:fd:b0:
         86:b2:ab:88:68:42:08:53:33:7b:6d:db:16:ea:8a:dd:00:2a:
         09:c4:89:ff:27:bf:65:8a:2b:e7:3c:b8:10:c1:60:34:1c:6f:
         98:fc:38:58:49:b0:00:92:15:dd:33:32:8f:cd:dd:be:7e:5d:
         c5:a3:1d:d5:8d:27:67:fd:65:e2:b3:67:82:90:8b:be:27:e9:
         bd:c5:98:f2:ab:ae:90:19:eb:f3:70:41:85:b5:be:f4:cd:59:
         dd:2b:93:74:dd:cb:12:a3:e2:85:44:e5:5f:20:d8:c2:ac:95:
         36:f9:8d:0d:4d:2b:ff:2a:b1:86:d6:f0:8d:2c:9b:a6:22:42:
         a8:32:c9:2e:fe:39:4f:30:13:98:47:45:fd:d3:7a:d3:fe:98:
         cf:50:e4:07:95:fb:d3:06:e6:fa:d9:b2:28:fd:d3:92:97:6a:
         4e:a3:b4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:14:48 2025 by rpki-client