Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/86a7529b-646a-30a1-b048-83ab2013c9e9.roa
File:                     86a7529b-646a-30a1-b048-83ab2013c9e9.roa (raw, json)
Hash identifier:          1duUGWoQQdEJlDZRGic97/Lihxax0zYIdfhvU1E4JPI=
Subject key identifier:   1E:C0:4F:19:C7:E4:05:35:88:7B:D0:65:DC:89:A2:20:48:5A:F8:7B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B2381B0813A0C97E5956D0F34
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/86a7529b-646a-30a1-b048-83ab2013c9e9.roa
Signing time:             Tue 09 Sep 2025 15:42:18 +0000
ROA not before:           Tue 09 Sep 2025 15:42:18 +0000
ROA not after:            Mon 08 Dec 2025 16:42:18 +0000
asID:                     9304
IP address blocks:        142.252.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:81:b0:81:3a:0c:97:e5:95:6d:0f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep  9 15:42:18 2025 GMT
            Not After : Dec  8 16:42:18 2025 GMT
        Subject: CN=5549fe53-9095-4b4e-b9d9-cc728c7e886f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0a:37:27:7a:bb:e1:7f:62:29:4a:4a:25:ca:
                    2e:b1:36:ec:be:e5:4f:be:5f:41:fe:62:c6:02:3c:
                    21:08:39:39:da:94:01:e3:65:ba:82:63:c8:fb:01:
                    3a:60:a3:1c:66:d9:35:aa:25:f7:4a:17:3a:80:d3:
                    88:84:9e:8b:c0:d1:cf:7c:30:5f:e2:c2:48:3d:67:
                    e4:32:50:e7:c6:24:ee:9e:be:3b:f1:fa:8e:41:60:
                    a6:3f:ff:9a:64:34:b4:35:48:81:6c:f7:c4:b6:c0:
                    56:a9:86:03:c2:f8:3b:c0:89:61:01:b1:37:16:f2:
                    fd:58:03:03:4c:bd:65:c0:34:63:ae:ea:f5:a1:a5:
                    08:54:a7:45:c8:fe:68:6b:b4:08:fe:f2:c7:40:69:
                    ce:89:a9:0b:7d:35:d6:70:e5:ba:01:0a:d9:8f:e8:
                    91:b1:21:8e:45:10:38:e0:1f:6a:37:21:38:68:11:
                    62:85:74:0d:c6:be:7b:7f:9b:d6:a6:94:54:a7:49:
                    9a:32:7e:db:7d:ed:46:9f:af:08:50:d0:e7:a3:c8:
                    28:09:c6:31:19:bb:e0:58:d0:d0:c3:06:66:99:f9:
                    fb:ad:f5:3f:5c:a6:bd:6b:2c:1d:26:50:1d:90:54:
                    81:ce:51:5b:a7:74:0f:01:8e:fa:5f:82:85:27:20:
                    f1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C0:4F:19:C7:E4:05:35:88:7B:D0:65:DC:89:A2:20:48:5A:F8:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/86a7529b-646a-30a1-b048-83ab2013c9e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:a8:54:c7:ce:2e:43:d1:75:87:17:28:19:0f:3c:b6:11:78:
         48:95:33:d6:27:83:51:3f:00:99:0b:20:f4:e1:47:30:0c:dc:
         45:cd:31:a2:de:be:42:7c:fb:84:14:6e:34:bf:14:e3:2c:fb:
         a6:10:c3:72:b2:9c:86:0c:36:00:a6:5b:05:e4:49:f3:01:a6:
         34:85:31:63:f3:30:a3:5c:00:2f:b2:6d:d8:8f:1e:e8:77:bd:
         b8:b3:c7:44:80:06:74:91:fd:9f:f7:f7:36:21:b4:45:d0:86:
         78:76:6c:9c:e3:da:f8:2d:8b:f6:de:17:46:32:c4:c2:30:71:
         cd:8f:fc:84:aa:7e:e4:0c:b8:c3:00:48:6e:67:e9:35:fb:10:
         95:10:f7:21:30:47:1e:a3:cb:d7:40:34:c9:12:e5:07:7f:fa:
         dc:78:fa:6c:65:fa:e0:80:f5:df:0e:70:ed:7a:81:a7:da:78:
         9c:82:8e:77:7e:be:83:ec:34:42:16:fe:ae:c0:33:ba:76:ef:
         9d:ce:0e:01:b4:59:a1:0f:99:15:b0:10:16:f3:8b:07:86:dd:
         ed:73:0f:bd:f1:6f:0c:ad:cf:5c:3a:00:49:e8:42:2f:98:0a:
         66:24:60:48:a1:de:4b:61:ee:08:84:34:d2:a2:81:ed:f3:64:
         ec:95:ff:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:07:45 2025 by rpki-client