Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/939ab8c6-33fc-37a1-86c6-b9889699541f.roa
File:                     939ab8c6-33fc-37a1-86c6-b9889699541f.roa (raw, json)
Hash identifier:          Zv5s+YYykqces62jC6uRBlUeuY1YmVCRbvDqkCmDAMw=
Subject key identifier:   4C:1C:6C:00:C8:71:76:72:67:A2:AF:EA:E6:56:51:7E:B8:31:17:C1
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B715D0D6E39B5D11E2F458040
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/939ab8c6-33fc-37a1-86c6-b9889699541f.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     44893
IP address blocks:        142.252.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5d:0d:6e:39:b5:d1:1e:2f:45:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=07794d8c-c21d-4be2-875f-a4a16bdbb482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d0:03:3e:c1:0f:6e:31:bc:fc:7c:b6:95:48:
                    95:10:eb:83:de:a6:e1:21:e0:64:9e:ec:db:5c:62:
                    ab:70:85:d8:fc:af:b9:80:27:6c:51:b0:d4:2b:f8:
                    91:cd:c0:ff:0c:1d:18:1a:b1:55:8b:b8:be:7a:19:
                    71:5f:83:c0:31:4c:7d:ec:89:c4:4b:8a:15:b9:57:
                    9f:22:d4:14:01:00:55:a3:06:82:a5:61:64:02:08:
                    4c:b0:99:dd:74:21:b3:89:f6:38:30:dc:21:e8:09:
                    84:f8:82:f5:aa:6e:10:bd:f6:fb:26:d4:25:fa:6f:
                    00:a8:da:15:b8:cc:4b:f4:f1:71:b6:ce:f6:6c:d3:
                    3a:68:9f:a3:23:45:9c:7e:e7:f7:01:4d:ee:ca:63:
                    42:09:d0:58:ac:7d:18:b2:3d:1a:cf:50:89:0a:b1:
                    5f:21:a6:cc:d3:c5:c6:9b:06:64:66:0b:27:bc:06:
                    da:d9:89:d2:77:fb:da:bd:23:08:d2:49:97:a5:70:
                    4a:a7:c9:26:20:30:87:65:1b:f6:97:ab:d7:94:3d:
                    dd:89:1d:17:e2:96:3a:d6:93:e9:a9:bf:ec:11:fa:
                    31:03:c2:f4:43:9b:cc:03:02:12:19:6c:a5:71:d3:
                    8a:20:93:e3:d5:3a:ab:75:a4:26:5f:cc:18:d0:65:
                    1c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1C:6C:00:C8:71:76:72:67:A2:AF:EA:E6:56:51:7E:B8:31:17:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/939ab8c6-33fc-37a1-86c6-b9889699541f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:30:36:8e:eb:eb:d1:1a:d2:b8:0a:e4:b4:36:34:74:5a:11:
         5e:74:85:6a:d6:e1:88:42:1b:69:f7:90:d3:c9:78:2a:ad:15:
         f4:3e:af:5b:0b:6d:ca:78:2e:08:62:05:3f:d1:e9:88:b7:64:
         7f:fd:88:43:14:3b:89:3d:80:ff:8a:f0:40:59:ba:d9:1a:6e:
         2c:61:c2:29:b1:8a:36:3d:31:52:ec:15:db:5a:49:28:86:f4:
         3f:b9:17:77:05:8b:b9:72:dc:e6:4f:f0:96:09:f1:ce:8d:88:
         36:a8:f1:d2:89:90:a9:1f:bb:ae:71:57:9c:dd:7a:7d:39:10:
         de:cb:15:2f:4d:54:c8:ab:4a:58:27:c3:72:bc:23:1d:db:09:
         16:c7:e2:87:6a:0c:50:6a:a3:99:0c:2c:1f:c0:04:59:fa:87:
         c3:c0:ed:45:7f:bb:b7:52:6e:fd:11:6c:04:8d:7b:61:40:96:
         6b:3a:db:91:76:29:f3:4f:4d:d1:ae:ca:ae:d7:df:52:7c:c5:
         45:bb:f7:31:7e:7d:2a:0d:90:5c:89:87:10:31:ef:5f:0e:3e:
         b8:a6:06:70:ae:b5:30:6b:1a:95:2a:45:f8:74:7d:8c:e0:ce:
         54:19:3d:76:73:d2:0d:5e:c8:a8:bf:28:75:00:6a:89:bb:00:
         96:bf:46:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:08:52 2025 by rpki-client