Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/11d31e39-defd-3eef-9205-6714b7898559.roa
File:                     11d31e39-defd-3eef-9205-6714b7898559.roa (raw, json)
Hash identifier:          Y/0c2oQUwg3mvkgQKQ0pP5uR4AZCEjH613fUBZi0yw0=
Subject key identifier:   70:87:44:C9:53:9D:53:90:A8:92:CB:A2:48:E4:DF:BE:EE:1B:C8:4B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B41E71236B98DCDAA9F0BC85C
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/11d31e39-defd-3eef-9205-6714b7898559.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     18779
IP address blocks:        142.252.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:12:36:b9:8d:cd:aa:9f:0b:c8:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=1c48897d-b44a-46e4-9d7e-6ec62bdd3f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9b:6e:67:30:c7:19:22:fa:e8:f1:74:fb:b4:
                    10:be:4c:83:76:13:b6:86:ef:1f:2e:da:1a:b6:3d:
                    1f:c8:2b:b2:71:b4:11:9a:29:24:9b:40:5f:02:06:
                    f6:f6:7e:ea:51:a8:2e:ae:41:fd:71:87:99:61:62:
                    a3:38:44:9e:01:1b:e2:b9:1f:8d:d1:f9:70:69:12:
                    28:ab:36:84:0e:d4:25:b7:b5:14:66:75:cf:41:c3:
                    39:5c:bf:c4:00:33:25:e0:86:cd:c6:b1:65:3b:f4:
                    25:f0:6c:d4:97:5c:74:4a:47:ee:29:7f:71:3a:6c:
                    18:d3:13:76:e0:80:ba:91:a5:7e:79:a1:cd:6a:2f:
                    d9:b5:96:1a:7c:48:ba:c9:f7:f4:8d:d0:97:f5:25:
                    dc:4c:98:4e:e8:b1:7c:54:10:30:93:35:20:b2:14:
                    fc:30:d9:4c:3b:21:d0:3e:47:00:db:a8:b9:22:6d:
                    fb:de:6d:f6:d6:b6:2a:64:b7:45:40:29:b8:19:81:
                    cd:17:cc:b6:17:57:13:a7:fd:8b:24:f7:d8:07:51:
                    23:a8:2a:0e:03:07:8c:65:6c:bd:1f:33:50:3a:de:
                    a4:13:b8:d4:ed:52:c9:7e:f2:47:28:7a:dd:91:75:
                    80:9a:a2:cd:9a:15:7e:7e:d7:9f:37:a4:b8:dd:9a:
                    d2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:87:44:C9:53:9D:53:90:A8:92:CB:A2:48:E4:DF:BE:EE:1B:C8:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/11d31e39-defd-3eef-9205-6714b7898559.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:eb:0e:17:bf:6a:20:76:2b:a8:35:e9:fd:fc:12:34:84:e9:
         34:9d:9f:a1:50:54:77:96:f1:d9:95:3d:d4:6b:ff:66:38:9d:
         a2:0c:f9:c2:38:ed:13:89:2f:25:32:7b:8a:a8:db:eb:24:4c:
         35:02:ce:2f:f6:be:c9:96:8f:97:89:ce:76:f1:09:46:98:19:
         60:ba:95:2d:f2:e9:67:e4:7e:c4:bc:a5:b3:43:91:9d:62:05:
         c0:ca:59:f7:a9:93:e1:49:14:e8:be:63:ea:ff:4b:d1:27:72:
         45:80:3f:9b:03:7a:31:e1:42:e0:ad:1c:60:95:b9:9e:3d:f6:
         df:0d:1a:fa:4a:7b:65:8a:3a:ec:26:0a:7b:0f:cd:c5:1c:e9:
         41:63:97:6d:68:95:fe:86:05:8a:15:b6:6d:0a:9f:38:13:5c:
         9f:f1:ae:af:83:5d:e5:92:86:ac:a4:c9:e4:1e:98:18:14:28:
         22:1c:cf:91:49:88:22:1d:8c:7b:d9:7f:b9:bb:51:b4:f7:25:
         e7:fe:cf:2c:0a:a0:8c:6a:ab:75:e6:70:9c:c0:96:01:22:15:
         a5:c0:d9:7a:c9:bd:a3:ec:e8:cd:f6:db:92:af:77:06:74:76:
         fa:08:81:c9:9e:f3:b3:60:95:92:5c:35:2e:05:45:1f:e2:3c:
         21:a8:ec:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:14:49 2025 by rpki-client