Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1b30f22f-f730-3848-b4f1-d06a7253940f.roa
File:                     1b30f22f-f730-3848-b4f1-d06a7253940f.roa (raw, json)
Hash identifier:          F2OJMkxXGj0Uvpyb2J0Yo0s/hW1qQ4SnNpCOaRUQ5JY=
Subject key identifier:   55:7A:52:86:B8:1B:53:D1:3A:1F:D1:E6:67:ED:37:CC:BC:90:E5:4F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A8530D151D4DDFF3B7EA83F00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1b30f22f-f730-3848-b4f1-d06a7253940f.roa
Signing time:             Mon 14 Jul 2025 22:41:38 +0000
ROA not before:           Mon 14 Jul 2025 22:41:38 +0000
ROA not after:            Sun 12 Oct 2025 22:41:38 +0000
asID:                     44559
IP address blocks:        142.252.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:30:d1:51:d4:dd:ff:3b:7e:a8:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 14 22:41:38 2025 GMT
            Not After : Oct 12 22:41:38 2025 GMT
        Subject: CN=0b33bb5e-a6a8-4ec7-9f7d-0885b27d5f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fb:ed:01:67:44:7a:ea:a9:18:19:f4:e5:90:
                    d1:ec:3d:fa:bc:03:fd:90:dd:46:e6:f5:a5:b9:8b:
                    3b:dc:e1:49:19:01:fc:81:f9:e5:62:93:19:76:55:
                    a4:eb:34:e5:f3:20:dc:49:3c:81:cf:ff:70:a5:e3:
                    62:2d:82:ec:7e:0b:57:5e:56:30:77:e9:f3:8d:92:
                    fc:e1:08:3d:3b:81:61:e6:d0:eb:84:18:e1:52:6e:
                    2d:82:bd:46:38:cd:23:1e:79:90:14:35:9b:6f:51:
                    39:d1:34:88:64:21:77:43:66:98:10:0e:12:49:3c:
                    f8:83:e9:f5:7d:7b:e2:56:1e:c1:1f:07:4e:36:a7:
                    6a:0b:af:c7:f1:1b:87:87:ab:96:46:3b:95:4d:ac:
                    52:8a:f5:34:79:f0:eb:8a:a2:2d:2c:a7:f0:f6:95:
                    20:18:8e:4e:ff:e2:4c:6e:21:5d:58:92:27:9a:0a:
                    21:ad:46:95:e8:43:c5:62:53:ca:0b:76:80:ac:08:
                    61:94:09:4c:f5:ab:0d:6c:51:10:86:b4:2b:2d:b6:
                    55:2a:62:86:e4:2e:ba:aa:1e:fd:62:47:88:81:38:
                    f5:d1:68:a8:53:5f:5a:46:8e:b9:c4:fa:21:43:2a:
                    00:8c:7a:01:05:43:84:5f:3a:4a:fe:e7:1e:73:3e:
                    fb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:7A:52:86:B8:1B:53:D1:3A:1F:D1:E6:67:ED:37:CC:BC:90:E5:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1b30f22f-f730-3848-b4f1-d06a7253940f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:7a:85:bb:49:22:70:e1:bb:3f:53:9d:09:55:5d:92:7b:2d:
         34:7a:3b:b7:29:cf:6b:5c:89:69:5f:9e:03:07:a4:cd:3b:7f:
         65:fc:99:7e:56:cd:04:94:7f:78:26:8d:23:2c:a3:a8:37:34:
         59:1a:ed:39:2b:9e:90:fa:68:a4:58:43:20:66:36:45:4e:9c:
         ac:32:fe:95:76:f6:8d:50:38:69:82:c0:a8:f0:b9:fb:8f:03:
         ff:f9:49:26:2a:5c:04:33:85:0b:06:d5:81:7e:a2:ed:61:63:
         e4:53:06:8d:24:6c:a0:64:d1:a5:b0:44:c9:32:57:2b:6e:16:
         d9:4a:b9:31:6f:95:cf:d4:a2:7a:2b:fa:dc:c6:57:76:35:a2:
         32:ba:b8:88:5b:3a:d7:54:05:c5:48:2c:b0:b9:09:65:17:0e:
         ff:3b:b8:4d:83:24:fb:cb:40:8c:83:c6:5d:93:1f:7d:56:94:
         e6:46:5d:4c:e8:93:07:ca:8d:a1:92:ea:69:0a:4a:d5:b5:b3:
         d2:3a:7a:d3:b6:37:f6:5c:a5:d3:01:4a:b2:0f:44:9a:c8:6f:
         b0:c7:1f:b3:e8:6e:bc:b1:5e:1c:25:2b:a8:fe:3b:1c:8f:01:
         81:33:22:c2:99:de:bc:6e:9c:0d:ea:f4:bc:f1:f1:fd:e2:7f:
         e6:6d:87:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:28:24 2025 by rpki-client