Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1a833a0f-0299-3562-98a6-d2f6019277e3.roa
File:                     1a833a0f-0299-3562-98a6-d2f6019277e3.roa (raw, json)
Hash identifier:          wXNl2MWhCpCeS4J7RzYn/+jl0uGccg6Oox0dlp3cBUY=
Subject key identifier:   C3:84:AA:AF:CD:BA:05:A6:FA:33:09:06:9B:71:79:71:E2:B7:27:7F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A849186A11E6F66B373287100
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1a833a0f-0299-3562-98a6-d2f6019277e3.roa
Signing time:             Mon 14 Jul 2025 17:20:41 +0000
ROA not before:           Mon 14 Jul 2025 17:20:41 +0000
ROA not after:            Sun 12 Oct 2025 17:20:41 +0000
asID:                     44559
IP address blocks:        142.252.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:91:86:a1:1e:6f:66:b3:73:28:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 14 17:20:41 2025 GMT
            Not After : Oct 12 17:20:41 2025 GMT
        Subject: CN=211d3345-58cb-4e8a-82c8-eacdfcc1cf99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:55:5a:83:ad:bd:28:6d:a1:26:1b:d2:3f:34:
                    f4:c5:7f:9f:37:03:f7:70:43:7f:dd:92:06:bf:93:
                    92:ff:28:90:d7:94:bc:e0:d6:41:70:0a:9e:7e:57:
                    02:6b:40:32:3e:e3:85:23:35:25:b0:32:60:0f:e9:
                    af:56:a8:4a:4e:b4:7e:08:9e:08:33:62:aa:23:21:
                    48:e2:29:e7:fd:98:06:cc:1d:6a:21:da:d9:6b:cb:
                    e8:97:9c:4e:59:78:b8:62:1c:03:6e:ad:9d:10:d7:
                    bc:50:25:ef:a8:5b:7d:46:2c:1f:1c:73:9b:c4:74:
                    c5:21:60:5f:bd:0b:12:d3:8b:8a:43:b8:f4:6e:50:
                    2b:e2:35:be:43:99:2a:48:37:4a:d1:53:c5:d5:73:
                    ea:88:7e:55:17:85:0f:cd:92:85:4c:ec:a7:33:c0:
                    d8:09:07:15:3c:c5:a0:c4:01:5b:47:76:86:59:eb:
                    2b:8a:a9:2c:2e:3d:28:4b:8e:bb:67:a8:02:19:5f:
                    ee:82:89:fb:0a:d2:b7:fc:6d:f3:55:54:31:cf:eb:
                    28:20:a1:dd:da:d4:55:6d:44:49:f3:5f:f7:d1:5f:
                    21:f4:f8:d5:97:19:df:55:40:cd:b1:55:3a:21:51:
                    63:3f:bf:c2:23:bd:5b:79:8c:46:56:39:06:79:de:
                    2f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:84:AA:AF:CD:BA:05:A6:FA:33:09:06:9B:71:79:71:E2:B7:27:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1a833a0f-0299-3562-98a6-d2f6019277e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:76:fa:99:2c:f7:f2:7f:4e:45:a1:44:92:da:25:52:6d:bc:
         55:84:6f:bb:88:36:5c:e7:04:3c:6e:51:f9:e6:4a:2d:88:fa:
         fd:d4:2e:26:60:d9:2f:c7:ae:1b:9a:10:ba:16:97:43:a0:93:
         ad:82:8c:01:a7:aa:f6:4c:31:f2:5f:11:3b:6b:59:2f:92:2d:
         bd:ab:64:2b:bd:7a:02:11:8d:cb:49:8b:43:f1:87:51:05:0a:
         87:05:14:a9:7c:d9:b6:92:e3:24:23:3d:b3:5a:b3:c7:df:cf:
         44:0c:36:71:52:f4:33:4e:a1:af:c4:ab:46:16:90:89:e8:23:
         10:2c:20:1f:b2:13:a0:54:48:7f:6d:9e:ff:97:e9:f3:1f:2b:
         a1:76:d1:a2:99:79:d0:cc:c6:59:e7:db:04:0e:7d:c4:3a:de:
         70:cd:4c:16:24:f0:76:64:d1:4a:8f:17:73:81:c4:f4:d3:cb:
         b3:3c:4a:ba:7d:6c:4f:02:71:92:37:32:a8:ea:4c:be:60:7e:
         73:16:af:7b:ff:f4:08:a9:a1:23:55:5f:ed:7e:62:3a:14:d1:
         03:b9:0a:f3:83:41:70:6a:6d:5b:4d:a1:34:c0:eb:3b:d8:90:
         0b:09:ec:ad:cd:c1:52:7e:f7:64:1b:c8:30:f1:b8:37:16:d7:
         82:12:0a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:41:43 2025 by rpki-client