Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/db350ef0-2ebe-38aa-8dcb-bf270d0d73c7.roa
File:                     db350ef0-2ebe-38aa-8dcb-bf270d0d73c7.roa (raw, json)
Hash identifier:          FjWcEm5GPVePrL2z46RumjyfH0/h1OmWtaQF/0CC2V0=
Subject key identifier:   F9:D7:B0:FD:0C:9E:D4:D7:56:99:18:BF:F6:FE:74:DD:21:68:C2:AB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A612B066466437EEBFB875630
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/db350ef0-2ebe-38aa-8dcb-bf270d0d73c7.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     18779
IP address blocks:        142.252.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:06:64:66:43:7e:eb:fb:87:56:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=f15cd0cd-44e0-476b-ac18-89e5f08fb837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:42:e7:68:5d:e8:eb:a6:91:b0:dc:d3:e7:8c:
                    a0:51:d4:c5:5e:49:66:4f:4c:20:3d:43:6b:bd:f6:
                    5d:71:ee:75:cf:a3:94:0e:bf:21:9a:8b:63:98:07:
                    bf:10:e1:88:ed:ef:6a:ec:86:c6:4c:79:05:5d:a5:
                    f5:d5:42:a4:97:c5:96:19:28:1b:4b:92:50:58:2b:
                    5a:2d:39:8a:d5:bf:7a:12:8b:a5:5b:a6:dd:7f:aa:
                    84:86:5f:58:93:8a:b0:18:dd:3a:08:fd:de:a1:b6:
                    18:4b:18:15:bb:25:7a:82:a3:f7:af:1f:19:a0:7c:
                    5b:dd:4e:de:2f:e7:da:2b:16:4e:9b:79:f5:fd:d0:
                    d3:4e:2e:e1:0e:04:de:67:6a:d8:49:e7:1c:0f:42:
                    94:f2:27:ba:51:fe:f5:e7:de:e2:bc:c3:7e:55:cc:
                    18:ca:1b:83:58:18:ac:b2:18:1a:29:5a:2e:bb:f0:
                    f9:e8:ba:b1:5b:06:a0:93:4e:f2:e6:fc:57:3d:8e:
                    8c:c3:c8:80:65:e3:92:c0:04:0a:0a:8a:97:c1:58:
                    63:2d:68:73:6f:8a:77:6c:be:7f:01:18:f2:4b:45:
                    a5:21:f2:2c:cb:ef:33:50:47:60:6d:5e:99:ad:f4:
                    46:31:ff:b1:28:5c:9d:af:71:4b:a5:43:06:2f:77:
                    b2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D7:B0:FD:0C:9E:D4:D7:56:99:18:BF:F6:FE:74:DD:21:68:C2:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/db350ef0-2ebe-38aa-8dcb-bf270d0d73c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:33:a6:45:fc:a7:52:f3:48:9f:d7:36:5b:92:a3:c5:66:43:
         7e:d2:6c:b3:a5:1c:99:62:b4:81:cb:5a:bc:55:10:05:3e:ba:
         d8:a5:4f:c2:8e:b4:e3:f8:88:ac:7a:25:fb:73:87:d3:67:16:
         b3:98:0a:5d:90:b4:43:b1:c8:4c:6e:ea:d9:e2:4f:98:08:29:
         bc:ea:1b:ad:a8:77:cd:21:c7:87:39:43:a0:2f:2c:08:45:bb:
         54:84:a7:3a:7e:48:f9:f4:bd:97:b4:fc:9a:c3:d3:75:f7:49:
         05:7e:dd:7b:e3:9d:13:92:f6:53:98:ce:4d:2d:83:10:e4:e2:
         8c:4e:a7:be:4a:86:66:94:65:11:7d:ff:c4:c6:58:d1:30:ac:
         d1:52:97:a8:b3:27:f8:23:2b:41:b8:96:33:55:17:d2:d9:f0:
         e6:23:2e:d1:7b:4e:f1:4f:0c:c7:92:58:91:5a:a3:5f:35:86:
         43:45:56:1a:e7:7e:3c:79:03:22:a0:5a:f4:14:e1:d3:de:ed:
         e0:1b:b8:21:1e:91:5d:b3:83:5e:ec:70:ac:b8:bd:d0:2e:95:
         b3:14:87:05:4d:fc:44:29:11:b5:9e:12:6c:1a:d6:ea:eb:86:
         ce:0e:c2:60:6b:c7:30:15:62:b5:07:ab:6b:85:f5:d2:5a:5f:
         80:45:28:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 22:03:40 2025 by rpki-client