Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f573c4bb-3a50-34e9-be7e-6883f22b7315.roa
File:                     f573c4bb-3a50-34e9-be7e-6883f22b7315.roa (raw, json)
Hash identifier:          YT2Knv0fINtAzr+aOV9uLrQZvHr8xGhv5BBRYmKc5yE=
Subject key identifier:   EE:FF:6F:D2:B9:FB:97:B1:E0:E5:0D:3A:87:9B:C2:D6:BB:AE:F4:7B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AFC1C0603A587441E349A8780
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f573c4bb-3a50-34e9-be7e-6883f22b7315.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        142.252.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:06:03:a5:87:44:1e:34:9a:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=86bf93c5-d7c6-4824-b3e9-fcf4e862bf47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8f:83:e6:c2:2f:a0:60:fb:fc:61:6e:db:0f:
                    fd:3c:47:55:52:51:ca:c8:30:3f:96:08:dc:44:d4:
                    ec:77:d5:85:d2:1c:98:6a:b5:bd:7a:00:d1:10:30:
                    70:4d:f3:2c:76:21:0b:df:aa:c4:5c:03:bb:c7:a5:
                    4f:ef:0a:c7:72:03:75:a3:3d:4a:57:5c:1b:08:4c:
                    25:4c:d6:2f:2e:b6:a3:51:a8:9d:c8:a2:2b:77:b5:
                    19:56:c5:f3:31:fc:cb:51:9d:43:88:82:52:3a:04:
                    48:d1:65:eb:e2:66:d0:30:e6:ed:2e:19:d4:05:35:
                    70:d0:60:42:b2:2c:96:9f:e0:db:8e:e5:d1:3a:24:
                    6f:4f:bf:eb:5d:08:77:2d:d8:71:8c:ef:53:9d:d0:
                    6d:a3:64:fc:a3:32:cc:03:9c:f8:d9:f5:d5:46:79:
                    ce:51:e7:85:af:91:d9:dd:1a:fa:0a:48:2d:ed:c2:
                    6d:69:02:95:17:41:c2:7e:c4:99:d7:9a:37:f1:f3:
                    1b:3b:e1:44:b2:cc:e8:98:3c:66:6d:12:4a:84:12:
                    3c:50:d4:c5:a3:a6:b6:ed:df:46:e9:ff:3a:b9:c0:
                    ea:ac:26:83:c5:5b:52:d7:18:f3:90:38:38:b4:ed:
                    0b:e6:09:82:0d:32:d4:52:4c:5f:10:b5:d7:33:ce:
                    9d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FF:6F:D2:B9:FB:97:B1:E0:E5:0D:3A:87:9B:C2:D6:BB:AE:F4:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f573c4bb-3a50-34e9-be7e-6883f22b7315.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:4c:33:0b:e0:f0:ca:d7:79:7a:f7:13:c1:80:56:f2:60:8c:
         ad:de:a7:40:27:8f:62:8f:af:8a:19:89:e3:f1:10:be:b5:88:
         89:36:4e:49:a0:43:f7:94:e2:7c:db:71:73:b2:5d:3e:f7:83:
         04:c3:94:4c:cb:24:ef:7d:af:23:7b:58:17:9d:15:55:e4:a2:
         e2:65:56:22:78:a5:4a:1c:28:68:64:63:9c:12:de:0d:34:fa:
         2e:1a:74:a9:39:95:2d:1f:b9:9f:47:8f:b1:12:27:75:f6:44:
         ad:3a:97:0c:34:e0:c5:f8:c1:4e:ff:b0:19:33:b1:06:25:64:
         5c:ca:12:9f:43:95:cb:1b:53:3a:83:98:98:e4:2b:8e:d7:fd:
         ee:25:a2:7b:96:ae:c8:74:20:6a:ed:32:70:51:fe:85:5c:10:
         cf:c7:c2:f0:7c:92:44:11:4c:30:44:fe:60:d0:f0:09:e1:e6:
         7c:60:9b:83:cb:65:17:79:2d:f6:2e:1b:ac:20:61:82:76:94:
         36:d5:5e:3e:08:e4:87:39:63:8c:60:20:2e:9b:c4:51:79:fe:
         9b:42:51:3b:d9:b0:5d:ba:7a:22:b7:80:b5:dd:47:3c:7c:25:
         cd:9e:7f:35:8a:cc:c1:1d:1c:a8:fb:db:ec:60:4b:1b:80:ee:
         48:fd:5b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 18:18:09 2025 by rpki-client