Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/74aa9c46-43d8-3e16-bc87-f19709716581.roa
File:                     74aa9c46-43d8-3e16-bc87-f19709716581.roa (raw, json)
Hash identifier:          dp8z9S8srUBiFRkYA3aev2V9pU/oYTL1m/+AdEQnZSQ=
Subject key identifier:   62:91:94:72:39:F1:7E:C1:64:A2:51:EA:69:DF:30:E1:B7:9D:20:B9
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B41E721BBCD66A355A5653740
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/74aa9c46-43d8-3e16-bc87-f19709716581.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     18779
IP address blocks:        142.252.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:21:bb:cd:66:a3:55:a5:65:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=79835f40-97eb-4e60-bd60-5abc82d1ccc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:42:dc:02:90:e5:63:49:c1:45:43:3e:23:56:
                    a1:6b:4d:b3:89:e2:3a:7b:fb:0a:3a:11:7a:6d:70:
                    0d:b7:b8:cd:35:74:07:e6:7a:05:e0:71:da:1f:17:
                    f5:64:48:b7:81:37:be:2d:dc:0b:ae:9f:58:77:eb:
                    70:e3:da:85:40:5d:1f:0a:ba:e5:07:74:72:35:e6:
                    4d:ed:02:57:94:8d:a9:6d:42:a2:17:76:a6:cf:45:
                    13:8c:3b:dc:72:a6:a4:5f:e7:66:34:50:72:53:12:
                    98:ef:81:cd:60:2d:01:61:75:38:7b:40:f8:06:1a:
                    c1:aa:e5:4f:93:7f:0d:eb:08:3f:ab:02:a4:49:2b:
                    d0:64:68:b5:6f:92:a8:49:09:38:0e:b5:5a:8c:9d:
                    b3:8c:73:40:71:24:24:37:4d:c9:49:84:28:58:03:
                    19:86:f7:39:09:c7:41:28:bd:ba:c0:83:1c:58:d2:
                    fc:0a:c6:09:21:d4:72:2c:83:9a:ee:9b:e8:06:5b:
                    5e:55:5d:ef:79:36:94:dd:29:ef:7d:c6:41:95:a7:
                    ba:60:0a:da:71:8f:9f:dc:69:2c:cd:4c:e5:3f:80:
                    7f:34:70:05:c3:73:40:88:bd:70:81:66:ec:68:1b:
                    bb:95:55:02:09:9d:ac:48:a2:b8:80:f1:8a:be:26:
                    4e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:91:94:72:39:F1:7E:C1:64:A2:51:EA:69:DF:30:E1:B7:9D:20:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/74aa9c46-43d8-3e16-bc87-f19709716581.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:fe:4e:31:59:f8:07:1d:eb:b8:ec:8b:dc:4e:a5:bc:e9:ab:
         7b:1e:5e:dd:a0:b6:b0:3d:62:6f:e3:c5:a2:2d:d1:0c:19:d4:
         c8:c5:92:c0:01:38:4f:f3:c9:ea:83:50:24:fb:72:9b:e2:42:
         bf:50:34:57:81:0a:59:85:b5:e1:43:9f:04:ad:08:45:ee:3d:
         0a:38:5f:8d:aa:8c:c5:e2:b2:f3:69:eb:68:41:a6:05:55:76:
         6d:14:00:30:9d:56:e6:e4:f7:42:2e:2c:5f:b6:b0:bc:2c:3f:
         c6:73:45:4e:d8:9b:cd:dd:87:aa:db:03:ba:2c:a0:23:55:ce:
         e0:6e:ca:d6:e9:2f:b8:90:8f:6c:67:1b:6d:05:99:bf:32:a3:
         fc:15:16:69:81:53:e0:6d:a0:b1:e8:28:02:91:0f:22:39:08:
         46:f7:82:a7:54:45:09:57:f8:98:b8:58:ea:3f:2b:61:3a:1b:
         27:8c:84:71:5d:40:db:58:ab:a7:48:6d:df:42:51:a2:5f:d6:
         1a:cb:4a:c3:54:a3:86:33:66:b8:c8:c6:ff:86:4e:4c:26:f4:
         17:95:33:a5:69:29:11:e8:24:ba:6a:10:ed:d4:11:59:03:3d:
         7a:d0:4d:c6:6f:08:76:60:b3:0b:89:ac:ff:53:4d:3c:1d:16:
         98:a9:4f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:13:41 2025 by rpki-client