Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/43a97bc7-4308-3929-b2da-87d0a19c29b4.roa
File:                     43a97bc7-4308-3929-b2da-87d0a19c29b4.roa (raw, json)
Hash identifier:          lRQgcQeILbBYbv+CXrph7EnFQk2cBZGs0B9/fbwMtZg=
Subject key identifier:   93:E4:FD:CB:E5:01:DF:6B:8D:DE:9D:72:90:00:03:5C:C3:41:BF:6D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858496879D2F85D1B2FD4621D1380
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/43a97bc7-4308-3929-b2da-87d0a19c29b4.roa
Signing time:             Thu 03 Apr 2025 23:03:21 +0000
ROA not before:           Thu 03 Apr 2025 23:03:21 +0000
ROA not after:            Wed 02 Jul 2025 23:03:21 +0000
asID:                     400536
IP address blocks:        142.252.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:68:79:d2:f8:5d:1b:2f:d4:62:1d:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr  3 23:03:21 2025 GMT
            Not After : Jul  2 23:03:21 2025 GMT
        Subject: CN=93ade540-aa56-4a72-ad2b-0eb343b3e19c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:54:a0:04:b9:df:f7:cc:5d:97:bb:01:d4:8b:
                    be:42:06:55:93:f5:af:a2:56:39:56:54:be:4b:ea:
                    0a:83:7c:8b:78:ad:be:ec:bb:1f:84:03:12:b2:f2:
                    41:ef:dc:76:1b:8c:ed:13:d6:ee:cb:a2:ce:3c:64:
                    60:4f:12:f3:38:2b:c0:e5:8e:d0:0f:26:61:82:31:
                    fa:19:b1:a1:f1:50:a3:c3:21:fa:6f:29:7c:d8:24:
                    21:dd:48:19:0b:a3:3d:a2:3a:03:f4:b5:87:97:d4:
                    c3:60:09:e5:86:cd:62:b6:62:af:c2:34:e7:5b:87:
                    e3:24:10:41:d3:b1:52:6c:5a:4c:64:a1:bf:c5:62:
                    10:1d:98:cf:11:bc:d1:01:09:68:e7:eb:cf:38:43:
                    24:00:bd:43:32:1e:cb:9b:0c:ff:5a:27:e6:7e:83:
                    e2:b8:e4:9d:e8:bf:ec:0c:d8:34:22:69:ba:3d:31:
                    df:f8:09:cb:92:bf:1c:a4:83:12:1b:1f:fe:81:78:
                    0d:27:b0:9d:e6:c0:3e:8f:46:97:6e:29:88:cd:dd:
                    61:6e:2e:80:b7:92:6d:ac:61:9e:65:ff:b5:ad:1d:
                    65:ff:d9:a6:fd:1a:61:9f:5b:c9:c0:84:ad:67:0e:
                    ff:12:41:f6:b5:65:21:bd:11:18:bd:91:5c:e6:38:
                    5f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E4:FD:CB:E5:01:DF:6B:8D:DE:9D:72:90:00:03:5C:C3:41:BF:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/43a97bc7-4308-3929-b2da-87d0a19c29b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:a5:2c:d4:bd:a4:a4:2d:85:c0:43:40:5d:3d:d4:dd:cd:4b:
         7d:a9:11:f6:d7:53:35:70:f6:1e:ea:3d:5a:05:55:8a:d5:21:
         f9:3b:18:76:e1:6b:da:44:ec:30:6e:16:54:27:3d:1a:bc:cc:
         54:d9:34:da:9a:1b:db:0e:1d:8f:31:87:30:68:8c:39:f7:06:
         48:d9:ed:48:62:1b:98:9c:22:e5:d8:3f:d1:60:3c:ee:34:fa:
         ba:4d:17:ef:44:22:64:dd:2f:a8:b5:1e:9d:38:e6:6f:4e:ba:
         a5:1c:fc:6a:57:3f:12:19:e4:41:31:4c:33:57:a5:87:22:91:
         8c:9b:0b:4d:a6:cd:c8:99:12:66:c2:8f:3d:fb:e9:e3:a9:fb:
         f3:1b:69:21:49:01:13:69:18:ab:2d:fb:0e:95:47:cb:3e:bc:
         fd:93:9d:7f:39:fb:a4:69:aa:9c:a7:e3:53:1e:da:83:59:5f:
         b7:a7:aa:1e:c4:d2:45:48:5d:ba:91:b3:ab:d8:82:44:5f:79:
         80:68:ea:41:1a:3a:bf:1b:93:9c:25:d0:1f:f3:e7:bd:94:68:
         ff:4c:60:a3:bc:5b:3c:de:45:46:88:4d:9e:10:79:b1:d4:c9:
         94:c1:24:16:d8:a2:d7:9b:ef:6d:37:f0:63:50:2d:6b:e8:f0:
         a2:f6:10:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEloedL4XRsv1GIdE4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDQwMzIzMDMyMVoXDTI1MDcwMjIzMDMyMVowLzEtMCsGA1UEAxMk
OTNhZGU1NDAtYWE1Ni00YTcyLWFkMmItMGViMzQzYjNlMTljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplSgBLnf98xdl7sB1Iu+QgZVk/WvolY5VlS+
S+oKg3yLeK2+7LsfhAMSsvJB79x2G4ztE9buy6LOPGRgTxLzOCvA5Y7QDyZhgjH6
GbGh8VCjwyH6byl82CQh3UgZC6M9ojoD9LWHl9TDYAnlhs1itmKvwjTnW4fjJBBB
07FSbFpMZKG/xWIQHZjPEbzRAQlo5+vPOEMkAL1DMh7Lmwz/WifmfoPiuOSd6L/s
DNg0Imm6PTHf+AnLkr8cpIMSGx/+gXgNJ7Cd5sA+j0aXbimIzd1hbi6At5JtrGGe
Zf+1rR1l/9mm/Rphn1vJwIStZw7/EkH2tWUhvREYvZFc5jhfwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJPk/cvlAd9rjd6dcpAAA1zDQb9tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDNhOTdiYzctNDMwOC0z
OTI5LWIyZGEtODdkMGExOWMyOWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvyJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF6lLNS9pKQthcBDQF091N3NS32pEfbXUzVw9h7qPVoFVYrVIfk7GHbh
a9pE7DBuFlQnPRq8zFTZNNqaG9sOHY8xhzBojDn3BkjZ7UhiG5icIuXYP9FgPO40
+rpNF+9EImTdL6i1Hp045m9OuqUc/GpXPxIZ5EExTDNXpYcikYybC02mzciZEmbC
jz376eOp+/MbaSFJARNpGKst+w6VR8s+vP2TnX85+6Rpqpyn41Me2oNZX7enqh7E
0kVIXbqRs6vYgkRfeYBo6kEaOr8bk5wl0B/z572UaP9MYKO8WzzeRUaITZ4QebHU
yZTBJBbYoteb72038GNQLWvo8KL2EPw=
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:36:18 2025 by rpki-client