Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/16abda40-8a43-3a73-87b7-a91ddb30278b.roa
File:                     16abda40-8a43-3a73-87b7-a91ddb30278b.roa (raw, json)
Hash identifier:          Wc/15rXaLQsS1rkBQyJd5sM0pbfKVrkrwyOBFFvtnbg=
Subject key identifier:   F3:E1:75:F6:41:0F:17:A5:82:F3:BC:3F:22:E6:1B:49:10:18:84:00
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B4A321513629EFA3170AB0EE0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/16abda40-8a43-3a73-87b7-a91ddb30278b.roa
Signing time:             Tue 23 Sep 2025 12:18:26 +0000
ROA not before:           Tue 23 Sep 2025 12:18:26 +0000
ROA not after:            Mon 22 Dec 2025 13:18:26 +0000
asID:                     9304
IP address blocks:        142.252.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:32:15:13:62:9e:fa:31:70:ab:0e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 23 12:18:26 2025 GMT
            Not After : Dec 22 13:18:26 2025 GMT
        Subject: CN=5e76b7de-7a6b-42d5-a331-9b3ec598a21e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d5:42:85:90:f4:a8:ce:5a:a7:3f:87:ac:1b:
                    36:3d:d5:1c:0d:36:0d:6a:40:cb:93:c6:fa:56:e4:
                    25:c5:54:bc:c7:ac:73:fb:41:27:ac:6a:9f:08:35:
                    05:d0:e4:cf:16:b7:c2:b0:c3:ee:66:95:b7:38:87:
                    da:1e:7b:d8:f7:fb:da:47:69:61:52:f9:f9:71:6f:
                    0b:85:a2:65:89:c0:18:5e:f4:9d:6f:48:d9:24:e9:
                    88:63:c5:0c:17:f2:e7:fb:75:02:d3:65:44:d1:73:
                    13:85:b3:82:d2:bc:94:e3:e1:7b:e1:23:f6:98:c3:
                    d5:18:7b:e8:e6:c0:d8:07:54:f8:c2:62:23:82:11:
                    c1:91:c9:5f:35:6a:8a:38:ff:18:46:ba:05:9a:f0:
                    41:78:86:16:74:d8:1a:2d:8c:69:fc:07:73:d5:0e:
                    e3:15:6f:8b:1b:84:16:de:64:2d:e4:c2:8b:30:24:
                    50:e1:c4:b4:c1:16:75:c8:7d:87:f2:0d:55:2f:11:
                    e4:6c:9e:d4:f2:c5:f0:f0:f9:bb:b8:b7:9f:91:f6:
                    d0:ea:1c:de:d0:d8:3d:28:a4:92:64:12:9e:08:0e:
                    d1:5a:51:c2:bd:30:f8:05:ff:98:84:8f:d3:bf:c3:
                    b7:63:94:92:24:11:f9:37:7f:af:13:b3:39:a6:27:
                    ee:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E1:75:F6:41:0F:17:A5:82:F3:BC:3F:22:E6:1B:49:10:18:84:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/16abda40-8a43-3a73-87b7-a91ddb30278b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:5a:ed:a9:0b:1c:88:fb:a4:06:9a:c2:63:fb:07:dc:10:a7:
         af:c4:c0:90:cd:45:dc:aa:17:74:1d:72:a9:0e:a1:21:58:96:
         d5:30:83:7f:6c:74:1b:47:0a:86:98:51:6c:31:6c:fd:8f:59:
         ad:a8:f9:41:d6:54:63:8b:93:fa:97:1b:18:9d:bc:b0:6d:9c:
         90:80:d2:b2:77:c1:b2:5f:5c:17:90:ac:20:71:a2:3e:de:31:
         04:34:c1:cf:da:2a:33:9d:a2:09:51:2d:3b:4e:b5:5b:bf:91:
         7d:bf:c0:22:19:db:26:58:22:04:d5:d9:34:07:45:fe:f0:98:
         a1:ad:6d:88:22:9c:3b:94:f4:8c:0e:a1:02:f4:8e:7b:77:b7:
         a4:47:31:a6:6b:d6:d2:e1:9f:df:e3:cf:bb:54:7c:a3:6b:e8:
         58:c7:d2:33:d5:af:22:12:e8:04:b5:c0:3b:49:17:83:1b:b5:
         6a:5f:8f:8a:b9:73:95:59:76:37:f2:a5:48:1f:73:45:d2:e5:
         c7:dd:7f:29:14:ea:d3:38:c5:f1:2f:4c:56:73:62:9a:b9:50:
         88:ab:57:1f:1a:9c:bc:ef:dd:74:4e:30:66:91:7d:bf:d1:19:
         44:2c:10:f0:40:00:9d:63:a4:db:40:f4:66:3a:15:af:15:fe:
         04:f7:3a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:07:49 2025 by rpki-client