Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0c74438a-b141-3397-b0ab-455a5edf0aa9.roa
File:                     0c74438a-b141-3397-b0ab-455a5edf0aa9.roa (raw, json)
Hash identifier:          u/DMEgwZkW4zr0RP+TanPjI4s7dtL/KzEFI7ntxzXzU=
Subject key identifier:   CD:20:6D:5C:F3:4E:9B:09:83:F5:0F:8F:45:57:3A:4A:7A:2C:AB:D5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848C2B641BFE2C1CF7B204756C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0c74438a-b141-3397-b0ab-455a5edf0aa9.roa
Signing time:             Mon 03 Feb 2025 14:00:52 +0000
ROA not before:           Mon 03 Feb 2025 14:00:52 +0000
ROA not after:            Sun 04 May 2025 13:00:52 +0000
asID:                     6939
IP address blocks:        142.252.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:b6:41:bf:e2:c1:cf:7b:20:47:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  3 14:00:52 2025 GMT
            Not After : May  4 13:00:52 2025 GMT
        Subject: CN=fb43000d-e4c7-425e-a1ed-577b54fc39c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:94:b6:73:bb:07:5c:3d:60:7a:56:b6:e5:96:
                    56:16:18:ab:ff:da:94:d4:8d:a7:12:0b:f6:8f:4e:
                    bc:5a:65:a8:ad:9e:62:aa:70:d5:25:86:cd:ed:36:
                    f5:7d:7f:be:07:a4:bb:26:d3:b7:ff:d7:eb:ad:94:
                    52:af:e8:ba:f3:0a:31:ee:8b:42:5f:33:66:ea:cd:
                    cc:65:74:72:d1:41:55:90:87:01:d7:ea:4a:27:03:
                    a0:72:61:07:75:e6:2c:a3:19:f4:0e:fc:c9:08:f9:
                    d9:83:c3:9a:d9:c6:a6:65:a9:50:0e:52:9f:98:e8:
                    73:ab:59:84:90:fb:9d:d0:a8:8f:f8:ee:89:90:97:
                    e4:46:7d:e3:b7:94:04:5d:9b:4b:3f:2b:6e:e9:31:
                    ba:37:69:08:b9:dc:60:6a:71:5a:bd:b3:b9:3d:c7:
                    1b:d2:e9:e9:c1:36:25:d6:1b:a3:5f:90:97:50:30:
                    44:d9:fb:5b:c6:6f:ea:af:54:04:92:de:ea:64:9d:
                    2a:dd:bb:f8:6d:1d:48:74:64:ad:11:2e:19:61:a3:
                    11:79:1a:76:9f:86:68:99:f4:c7:03:70:9f:aa:a3:
                    11:9c:59:92:a6:1f:9a:fd:9b:01:54:30:a2:e1:68:
                    15:7f:db:68:a7:af:a3:35:fc:de:65:cf:c2:54:96:
                    bf:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:20:6D:5C:F3:4E:9B:09:83:F5:0F:8F:45:57:3A:4A:7A:2C:AB:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0c74438a-b141-3397-b0ab-455a5edf0aa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:b2:e6:90:e9:69:bc:27:d6:e7:b1:ab:18:25:33:8f:ff:66:
         f3:27:a4:0a:52:c7:26:48:d9:86:ee:09:ba:9f:6a:7a:96:b9:
         04:70:7e:40:1d:56:62:3a:11:c2:94:20:04:2a:5e:c2:a3:7c:
         e3:42:41:63:dd:b1:29:56:87:cb:38:4f:02:5f:00:bb:55:c3:
         82:1d:d9:f7:69:98:d6:01:72:f4:a9:6a:13:64:40:67:bc:e4:
         b5:f4:48:fb:b6:0f:82:11:27:bb:e2:c8:06:5f:c1:a3:c0:c2:
         9c:e4:6a:c2:d1:9d:ac:3f:1e:ff:54:e8:e3:c6:26:64:b8:02:
         fe:23:97:95:01:06:26:54:7f:77:76:ba:39:9f:d4:dc:68:85:
         6c:68:2c:01:ef:dd:b2:01:ed:27:ac:48:f1:bf:22:fc:27:37:
         5d:89:b0:cd:2a:a6:b3:d5:e1:14:f4:fe:19:74:e2:13:33:31:
         1c:94:52:f1:83:30:49:49:4d:0d:16:72:c5:ad:36:b8:65:6c:
         03:82:3b:82:66:57:94:8b:a1:e0:92:74:70:50:fa:c8:4d:53:
         9a:3e:c9:0b:3f:34:e3:20:f1:ee:bd:b3:d4:0e:a3:f6:dc:73:
         2a:d5:a7:1b:87:6b:69:9c:15:89:2f:5c:96:ad:5e:53:15:30:
         99:37:38:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:19:39 2025 by rpki-client