Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6255ef8f-55f3-34a9-a11f-c109ce7ee348.roa
File:                     6255ef8f-55f3-34a9-a11f-c109ce7ee348.roa (raw, json)
Hash identifier:          lP4lvC876xOkBTmYbhhGapMwB+1jb81KY0ZxUPYetqg=
Subject key identifier:   B1:81:25:85:ED:05:A6:BF:F3:E2:9F:6F:A2:C4:96:A7:DB:41:EA:F2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B4A32070604D6F4FC5713F0C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6255ef8f-55f3-34a9-a11f-c109ce7ee348.roa
Signing time:             Tue 23 Sep 2025 12:18:19 +0000
ROA not before:           Tue 23 Sep 2025 12:18:19 +0000
ROA not after:            Mon 22 Dec 2025 13:18:19 +0000
asID:                     9304
IP address blocks:        142.252.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:32:07:06:04:d6:f4:fc:57:13:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 23 12:18:19 2025 GMT
            Not After : Dec 22 13:18:19 2025 GMT
        Subject: CN=23b5481e-56fd-4c66-9305-7f8f93ea2b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:04:e3:40:5a:de:0d:16:a1:ba:73:ed:22:ba:
                    7c:4f:7b:a4:18:82:c2:0c:85:70:e5:e5:3f:67:7a:
                    fb:bf:ea:d1:3e:00:0b:09:72:ad:d9:af:04:5f:f5:
                    3b:b6:5c:2f:60:39:6e:26:70:04:9a:02:f6:c5:e1:
                    3a:ad:ea:51:df:d9:f2:2b:df:fe:ba:38:ed:6d:14:
                    53:11:8d:15:a3:e4:f2:26:90:76:85:92:28:ea:45:
                    0a:a3:59:dc:bb:24:89:e9:06:3d:8a:a9:d7:f0:6d:
                    d7:df:90:29:3a:15:8e:74:ed:93:7a:64:07:61:ba:
                    20:17:11:8a:48:5f:0c:49:92:1e:45:27:b3:41:89:
                    a0:4c:1d:03:3d:85:8b:4c:c0:db:33:37:d4:2b:96:
                    3b:b4:9d:18:a3:3e:d5:a5:d9:f5:dd:c4:b1:82:12:
                    d2:b2:25:7e:23:cf:13:e4:41:9c:e3:00:78:23:bc:
                    d7:7a:51:d5:7c:bd:39:d9:f7:a9:ed:f4:d2:15:2a:
                    f1:43:d6:04:17:63:20:48:33:e3:4f:02:a6:89:55:
                    1c:29:56:c4:80:d5:d3:97:1b:49:0e:8e:da:6a:46:
                    a7:53:f6:30:d4:58:d3:f3:48:c1:4d:51:f2:7a:42:
                    c0:03:29:38:a3:d8:7d:6f:66:52:10:6d:fa:d6:13:
                    7c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:81:25:85:ED:05:A6:BF:F3:E2:9F:6F:A2:C4:96:A7:DB:41:EA:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6255ef8f-55f3-34a9-a11f-c109ce7ee348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:69:f4:dc:33:77:32:08:12:0f:65:c5:d3:22:7a:3d:54:d7:
         fa:ff:10:e1:68:c9:a2:7d:fa:d1:21:22:f3:30:bf:28:90:bc:
         71:4e:ca:f9:ba:5a:13:43:3c:9c:8e:cb:97:e8:7b:38:ca:35:
         ba:f7:7f:c8:48:89:92:c8:68:85:ae:62:d7:89:fb:68:a3:ff:
         e1:4e:86:50:8b:db:cd:23:28:3b:72:58:cc:8a:58:63:d3:db:
         74:67:78:45:48:ae:ad:6e:91:59:2b:8b:ba:f4:c2:71:2b:b2:
         1c:ff:05:01:68:8e:9a:82:e0:74:cb:c3:84:0d:e6:64:d0:f9:
         e7:41:e7:21:96:1c:1c:98:c9:d9:b1:49:6b:61:4a:e0:df:b8:
         e0:12:a4:50:fc:22:f8:43:2c:5a:6d:7d:d7:d3:d8:7c:fc:0c:
         81:9a:82:fe:c3:10:46:52:91:b1:40:fd:8f:1a:b3:12:42:06:
         ff:90:aa:ca:ff:bf:67:9b:79:26:03:ea:69:4d:d2:a4:d2:ee:
         98:d0:8a:2a:03:eb:dc:c3:ba:9b:34:7d:ab:d3:08:b1:73:1a:
         2a:94:18:b6:5a:15:98:0a:49:b7:6b:c8:bd:1f:2b:1a:50:ce:
         32:19:89:5b:2b:9c:96:81:ab:b0:6f:bc:f2:0a:0c:e9:34:af:
         0c:d8:47:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:08:00 2025 by rpki-client