Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec272414-8057-3b68-93a0-832e7600b00e.roa
File:                     ec272414-8057-3b68-93a0-832e7600b00e.roa (raw, json)
Hash identifier:          U5Zr22i3ay56noEjPqBb425W/gAkMEydlw3KK7UC8TY=
Subject key identifier:   68:C7:F9:F4:AF:43:1D:5F:47:95:78:B1:0B:47:3B:C8:FE:0D:55:79
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A612B036B4ABBF89DE2A046E0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec272414-8057-3b68-93a0-832e7600b00e.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     18779
IP address blocks:        142.252.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:03:6b:4a:bb:f8:9d:e2:a0:46:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=e9220b09-c9de-47b6-a055-77171621b041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ce:ca:93:d1:c2:19:d1:d6:05:93:eb:e6:74:
                    98:b0:d0:48:02:56:18:26:3c:73:7e:d1:8e:7d:23:
                    38:53:44:db:7b:7e:60:92:aa:80:bb:5a:31:a0:4e:
                    74:e6:56:d3:99:bd:6e:a6:a2:03:d6:ea:62:aa:19:
                    e8:fc:4d:ab:f0:50:f2:23:d1:1c:70:6c:1f:03:86:
                    26:53:26:6a:70:58:4c:c0:8f:f3:64:c3:6a:56:b0:
                    f0:b3:f0:d5:c3:e7:6f:3c:66:1f:30:44:5d:68:1a:
                    b6:ee:e3:53:9b:ef:a1:49:54:cc:69:0f:70:04:67:
                    82:4e:d0:a0:71:8b:c0:87:e8:cc:8c:a3:0d:26:50:
                    fa:71:91:72:6f:bd:e6:9e:3b:ad:ec:22:91:3c:db:
                    d8:64:2e:3a:d8:02:28:f2:a4:85:57:77:f2:9a:a5:
                    e5:7f:15:40:4b:48:e5:3b:ce:5d:e9:80:76:0b:1e:
                    39:42:97:68:1a:8d:30:5f:cf:98:5e:74:5f:f8:a7:
                    b5:24:3a:a5:8c:28:fe:03:1a:b2:89:bd:c8:db:a8:
                    26:27:cd:a7:07:cc:08:1b:2e:1d:74:68:45:7d:c3:
                    60:ee:97:77:7d:8f:f0:ad:52:de:21:31:98:1a:5f:
                    e4:64:1b:55:39:53:32:ed:9a:e6:5c:cc:71:a5:49:
                    59:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C7:F9:F4:AF:43:1D:5F:47:95:78:B1:0B:47:3B:C8:FE:0D:55:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec272414-8057-3b68-93a0-832e7600b00e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:05:6e:b9:ed:1e:56:64:9f:82:6a:ae:bd:e5:22:4e:6d:d9:
         f5:3c:c3:24:85:8b:75:1c:32:ed:06:cd:48:07:78:19:86:d0:
         7a:d5:83:b4:38:a9:4b:e8:46:04:6b:b6:87:80:c7:c8:9d:da:
         41:05:8f:6c:3b:5b:fd:e1:7c:4a:2d:25:60:30:0b:c0:61:0b:
         60:e5:b4:6f:10:0f:0c:1a:23:bd:f3:8a:45:60:f9:29:e1:94:
         32:ec:22:1a:b2:f5:71:49:28:8e:bf:cc:65:8d:e2:46:32:16:
         52:cc:39:bc:60:91:97:b3:b8:35:1f:82:a9:ea:3a:cb:e9:c9:
         ea:7e:02:db:14:e4:5c:ae:3e:e8:ca:d5:a4:c5:91:7c:a3:77:
         a1:0d:62:c2:a8:1b:77:9d:ae:2a:d2:fd:73:cb:c5:51:9d:aa:
         0c:2f:85:ea:9a:24:9e:a3:37:3e:a9:af:b6:4b:05:a2:79:35:
         a5:a2:b1:3f:50:7b:a8:7e:82:42:55:9d:30:e2:10:06:84:69:
         f7:13:b3:4c:d9:0d:3e:9b:ce:3b:c6:c8:f8:a4:0a:79:12:7c:
         2f:45:c4:18:d2:65:7e:de:a9:3d:c9:0f:89:c8:bf:1f:60:66:
         c9:0d:7e:08:40:a0:19:45:c6:87:5c:0d:06:a1:b6:e2:5e:0e:
         20:f6:eb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 23:22:32 2025 by rpki-client