Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/955f3a04-020b-3de3-a057-2ce2758a7a1e.roa
File:                     955f3a04-020b-3de3-a057-2ce2758a7a1e.roa (raw, json)
Hash identifier:          Muty8iAPy/u+CaulhtJvVeI6EFI1ZAeoVzg+Gn8KzF4=
Subject key identifier:   4A:F9:2B:4E:C9:57:04:BA:57:36:0D:26:00:AB:81:9D:FA:DC:4B:E8
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A612B02FE5368C659FB2429F0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/955f3a04-020b-3de3-a057-2ce2758a7a1e.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     18779
IP address blocks:        142.252.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:02:fe:53:68:c6:59:fb:24:29:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=8f65c613-ba30-40f2-bac5-511690f4dfda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:80:46:76:52:e6:b0:85:91:3e:21:7a:fa:a3:
                    bc:6d:52:35:33:cc:e7:38:cf:dd:e3:ea:9c:8f:a1:
                    e4:b5:c8:b3:2f:1f:3c:b7:ab:f4:db:6f:f4:05:87:
                    5d:e2:c5:1a:40:d4:cf:48:cc:9f:a7:c9:5d:6e:62:
                    be:53:e0:7a:a5:df:ba:65:d0:b1:27:03:e2:34:ff:
                    31:c2:62:8a:92:82:dc:e1:b3:ad:21:30:82:fb:c0:
                    db:2a:ca:59:08:a1:07:bb:b4:d5:eb:fa:6a:5e:82:
                    b9:91:b8:15:40:6c:b8:ce:1d:46:e4:ff:02:0f:e2:
                    5e:3b:8f:ab:3c:93:f8:e5:63:58:72:86:60:95:4f:
                    9a:72:7f:ca:3d:ad:8f:0f:8b:5f:8d:4e:27:50:86:
                    87:75:99:c5:a6:b7:c7:84:d6:89:7c:4c:17:c1:59:
                    66:07:fb:98:b9:5e:c7:d3:33:33:fc:10:d7:48:ac:
                    54:dc:cf:1e:f3:eb:51:44:20:a3:20:0e:aa:0b:8f:
                    4f:63:bd:7d:e5:48:dc:1c:87:8a:41:e7:05:99:dc:
                    13:8f:4e:ce:d4:17:70:17:2c:d8:21:28:91:f5:88:
                    66:58:09:52:84:42:f4:a1:e8:51:6d:48:db:c9:46:
                    f9:4a:1e:e6:53:a9:07:84:48:35:b8:34:10:8d:64:
                    12:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F9:2B:4E:C9:57:04:BA:57:36:0D:26:00:AB:81:9D:FA:DC:4B:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/955f3a04-020b-3de3-a057-2ce2758a7a1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:5a:0c:71:3a:9c:96:e0:06:26:a5:cc:40:72:03:64:ae:d2:
         6c:3a:49:9c:25:b6:15:ab:10:f4:61:bf:ca:51:61:53:a0:a6:
         8d:99:7d:77:c7:df:07:37:20:19:9b:db:c6:0a:bf:81:94:5c:
         b9:02:03:12:af:a4:f8:e1:ed:4e:df:f3:d2:57:4c:7b:14:45:
         4d:f7:62:d0:2f:75:e2:2e:63:90:27:e9:6c:de:8a:34:c7:a7:
         1a:79:b5:6d:ed:13:8d:99:8e:fd:56:e3:02:1f:a2:0d:f9:ce:
         75:78:1f:c5:29:a8:2c:0d:0e:0c:0e:79:6e:e2:1e:f5:5f:6f:
         3a:68:59:f3:02:3a:c7:f7:9e:c8:37:40:82:bc:0d:7f:55:b5:
         75:ec:ac:c8:27:97:e7:97:4a:ea:49:2e:f4:32:f9:8f:aa:9f:
         01:28:79:d8:40:9b:fe:e4:cf:a0:60:e9:b0:7f:62:d2:11:3a:
         52:e7:a9:96:f6:4c:19:63:59:65:68:99:88:ee:e6:96:32:84:
         6d:4a:bc:41:9a:66:55:e7:9b:a9:0c:2a:43:9c:68:c3:ef:0f:
         e0:ec:f2:04:81:9b:fa:6b:04:12:3a:c2:54:9c:6b:b1:d1:24:
         a5:d5:41:d0:a8:e2:27:fd:26:98:52:85:25:bd:27:56:b2:21:
         0b:a7:dd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 21:11:26 2025 by rpki-client