Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/448dac26-a6cf-3633-8d2e-c219ada6ae05.roa
File:                     448dac26-a6cf-3633-8d2e-c219ada6ae05.roa (raw, json)
Hash identifier:          t7eFew3rksGgKrj6BpmEQMLQrPvKfbvjbQ4Pwp8KPZg=
Subject key identifier:   7D:60:47:E4:39:EC:DE:CC:73:69:59:3F:F8:E9:7E:7A:D8:7A:76:E0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B41E72030A4D7E17603FA3700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/448dac26-a6cf-3633-8d2e-c219ada6ae05.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     18779
IP address blocks:        142.252.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:20:30:a4:d7:e1:76:03:fa:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=7f7999bf-832f-4818-afc7-9677ef8f60df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:40:b9:79:8f:95:db:4c:2b:35:65:21:f2:53:
                    e2:7d:52:9e:c4:f2:4f:4d:f3:31:2f:f0:c6:e7:99:
                    50:ec:6c:ed:d4:1d:a2:5b:35:5d:47:40:3a:ac:71:
                    44:f3:01:52:35:22:cc:c7:a1:df:cc:0c:f4:f8:fd:
                    db:33:67:f2:be:3d:7f:d3:de:59:ca:eb:d2:3d:ab:
                    67:57:18:84:db:f2:c3:31:a4:40:76:17:b6:f4:68:
                    1c:c3:48:59:79:4d:62:9e:d3:92:da:64:45:25:75:
                    66:a0:da:ad:bf:a1:c2:9f:bf:cb:dc:29:85:ea:55:
                    3e:25:eb:5e:a5:05:0d:e6:14:ea:1d:d1:04:49:4c:
                    79:8d:1b:f2:05:49:a3:e0:b6:ce:24:68:44:aa:b4:
                    3f:ee:e3:4b:5d:7d:80:c2:47:63:98:a8:cf:75:b6:
                    97:ed:f3:0c:fa:96:b9:0a:ba:c5:a0:be:f9:2e:65:
                    0a:91:e3:76:88:1a:d2:86:ad:e4:ee:f4:c3:3a:f0:
                    ab:4d:28:f2:e6:ec:92:2b:80:6c:ab:69:5f:1e:b1:
                    b2:eb:bc:c5:6d:0c:8e:d3:c5:78:6c:de:a2:97:1c:
                    0d:01:8e:57:af:f2:f6:ef:b9:f1:de:e1:0d:67:ae:
                    71:d4:a9:97:38:ea:71:e7:6b:e5:ee:fe:47:7b:96:
                    72:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:60:47:E4:39:EC:DE:CC:73:69:59:3F:F8:E9:7E:7A:D8:7A:76:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/448dac26-a6cf-3633-8d2e-c219ada6ae05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:ba:d8:bf:62:48:5e:d7:2e:e5:53:5b:2e:17:30:b8:9f:82:
         ef:c1:81:97:7a:21:a2:6a:e3:d5:33:71:f8:d5:c9:a1:9b:66:
         d9:19:ea:0d:c9:23:b1:74:de:a6:7d:c8:18:e8:eb:49:40:9d:
         b7:3f:9f:79:71:2d:27:84:40:bb:39:b8:f9:7f:8e:45:61:6e:
         0f:b8:23:a0:e3:cb:39:3d:62:d3:91:13:f2:da:84:19:09:f2:
         3a:2a:96:f6:fe:fa:2e:c8:62:5e:8f:bc:fe:2f:33:c7:e3:71:
         cf:21:cc:ec:52:5c:d4:49:d5:db:bc:2e:a4:73:d2:49:f7:2f:
         0f:9c:8b:a0:ee:8e:8c:ba:b8:06:07:90:dd:7b:d7:83:64:93:
         d8:fb:4e:22:5d:9e:d4:8a:ba:4f:b5:a9:ca:51:65:49:11:3d:
         b7:25:30:d2:cb:96:20:c1:d4:46:83:8f:39:a8:e2:a3:f0:95:
         f5:a2:0c:e6:b3:c2:5b:61:45:17:0f:9d:f9:e8:c9:85:e8:f5:
         1b:33:8e:80:85:82:11:ef:9b:0f:9c:58:db:cb:19:2e:35:ce:
         91:c7:64:8b:2f:81:40:40:58:fa:b3:94:f5:c5:38:4d:6a:77:
         84:b4:67:45:12:b3:20:24:3b:58:af:6f:e0:b0:e7:fc:c1:f6:
         85:70:e3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:11:39 2025 by rpki-client