Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/656b8895-6727-31ac-b9ec-30e82b718ba7.roa
File:                     656b8895-6727-31ac-b9ec-30e82b718ba7.roa (raw, json)
Hash identifier:          VTUAXZ7kdaW0lZIVQLZo1rn8/0U7UzUu2iR0UZ7Ni8I=
Subject key identifier:   1A:62:50:7D:F7:91:43:41:4F:DA:EA:C1:DD:18:D1:BB:EF:D8:34:D0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A612B05C9EF94DCF971FEA980
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/656b8895-6727-31ac-b9ec-30e82b718ba7.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     18779
IP address blocks:        142.252.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:05:c9:ef:94:dc:f9:71:fe:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=4e0f9591-3185-46a4-918d-ab4e1c0a5285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2a:ac:35:db:98:5b:a3:ad:f4:72:da:b2:ba:
                    7e:97:4e:3b:42:87:c0:a9:1f:96:71:21:c4:fa:c2:
                    c9:48:72:3c:96:11:18:7b:44:ac:1d:70:b5:c8:51:
                    b5:7d:45:03:40:2d:e6:a3:c6:5a:18:e6:7d:22:e8:
                    77:34:e6:db:f8:9f:43:55:3a:ac:25:cb:76:a6:d4:
                    b2:d1:ae:18:c3:0c:49:69:29:da:cc:8c:74:d4:94:
                    35:aa:31:5f:c1:2f:c2:49:a7:8a:40:5a:5e:70:ca:
                    a4:0d:79:59:26:b9:61:59:9a:1b:4d:72:00:87:16:
                    b5:6b:4b:85:ca:e1:e1:36:36:73:ce:ee:df:a2:13:
                    e7:0a:d1:27:9b:52:31:10:b7:2d:0e:d0:f3:f1:9e:
                    25:08:60:5d:e8:11:6c:c7:fe:cf:53:fa:14:ba:91:
                    77:10:95:70:30:9e:bb:8e:e1:b5:52:87:0e:20:a5:
                    c7:00:e6:ae:0b:6c:59:a5:54:46:91:86:3e:3a:b3:
                    7e:6a:82:4d:85:a5:08:1d:7c:8c:d0:cc:d5:14:f3:
                    bb:c5:2f:78:88:27:60:fd:c8:e1:5c:c0:3f:f4:ad:
                    24:35:1f:83:80:15:06:35:0c:49:69:9a:15:b7:e7:
                    d6:73:da:e8:be:06:e7:e9:1a:e1:5a:51:6c:56:9b:
                    23:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:62:50:7D:F7:91:43:41:4F:DA:EA:C1:DD:18:D1:BB:EF:D8:34:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/656b8895-6727-31ac-b9ec-30e82b718ba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:a6:46:21:0a:f9:2b:a2:34:80:7e:9d:d7:b1:66:7c:a5:fb:
         da:8e:f1:69:1f:9c:6c:4a:31:62:2d:10:d1:c2:27:02:58:dd:
         57:be:56:bb:68:f8:6f:8c:96:7a:e4:2c:22:20:ec:16:bd:38:
         7f:2c:40:2f:7d:b7:b8:2f:f8:a6:cd:c5:53:9c:ce:cc:6d:ed:
         ca:44:f2:6c:53:ac:6c:02:c9:0c:5a:79:88:84:8e:19:bd:e7:
         18:39:45:77:21:a8:a2:43:6e:f3:9e:17:eb:ff:4e:c6:84:c1:
         a3:8e:f5:f0:2d:56:7e:7b:35:c5:df:44:8d:ff:c1:16:65:19:
         17:41:59:8a:94:08:ac:ee:f9:d7:c6:16:66:b2:26:df:7b:ad:
         42:17:2f:ec:34:7d:d0:c9:48:55:10:e6:47:6c:b8:a9:e8:97:
         09:ed:31:79:b0:ca:b2:fd:6b:84:87:e9:c2:e4:ba:4f:26:82:
         ce:ba:0f:c2:77:f9:52:6e:f6:d0:5a:89:d8:bf:00:74:05:f7:
         98:b1:95:22:b2:b8:d4:76:42:53:e5:05:66:0c:85:bc:d7:cb:
         45:79:e1:51:9c:1c:96:40:64:bd:bb:44:ec:0a:fa:6c:7c:c6:
         f0:f1:ec:d4:a1:9d:90:21:69:ff:49:e9:20:9c:aa:a0:40:fc:
         b1:ed:b7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 22:18:36 2025 by rpki-client