Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/01ef4bb9-f1b6-31ca-bc81-2cd4a38b26c3.roa
File:                     01ef4bb9-f1b6-31ca-bc81-2cd4a38b26c3.roa (raw, json)
Hash identifier:          HG8rcH3vaUwgh+EooPOMP58bzk8SAz/N91QI5qEolLE=
Subject key identifier:   A9:75:76:F3:30:66:F7:AD:7D:DB:48:BE:B5:17:D5:A8:7E:DC:41:E0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AF0D9C3C534FD36EB5CB6E260
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/01ef4bb9-f1b6-31ca-bc81-2cd4a38b26c3.roa
Signing time:             Fri 22 Aug 2025 12:13:32 +0000
ROA not before:           Fri 22 Aug 2025 12:13:32 +0000
ROA not after:            Thu 20 Nov 2025 13:13:32 +0000
asID:                     54500
IP address blocks:        142.252.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:d9:c3:c5:34:fd:36:eb:5c:b6:e2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 22 12:13:32 2025 GMT
            Not After : Nov 20 13:13:32 2025 GMT
        Subject: CN=367b47b8-6bfd-4af9-9058-2eaab9102625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d9:c1:b2:0b:4f:80:ba:b8:63:a6:d9:31:5a:
                    aa:b1:05:2a:73:61:b0:77:d0:44:44:86:28:d3:a1:
                    49:4e:7f:5c:94:40:80:b3:12:c7:66:e2:80:79:85:
                    1c:bf:5e:b1:92:23:ba:3c:25:e4:c4:3d:a5:c7:1c:
                    a3:7d:88:cb:b5:fb:33:e9:4b:2a:3d:1f:ba:f5:ce:
                    22:74:1b:c5:74:48:30:a7:55:b8:8b:6c:07:db:09:
                    0a:52:be:d1:ae:e5:f4:a9:06:6a:26:00:71:c7:02:
                    e5:51:00:bd:88:ca:47:1e:07:ba:59:58:60:6e:aa:
                    c4:dc:0a:17:6d:bc:55:29:50:a7:d9:a3:9d:7b:b6:
                    4b:91:ed:ca:76:ed:76:98:f5:4f:1d:dc:c2:3c:a8:
                    e9:28:e3:91:f7:e3:ec:25:f8:9f:36:58:64:3b:96:
                    4e:81:0e:83:e8:e4:5e:9c:b4:6f:eb:13:1f:f4:ab:
                    cc:8c:e4:ff:cf:bf:b5:a4:14:29:53:49:1c:10:09:
                    67:f6:bf:8c:6e:7b:7b:c7:a1:ec:3f:22:b1:06:1c:
                    69:33:3f:eb:0c:7f:ed:15:bb:6a:6e:d3:2a:30:fa:
                    17:18:45:ff:08:fd:e7:02:f7:98:18:fe:a4:49:b1:
                    fb:0a:ba:2d:97:65:dc:6b:2e:9b:f1:2d:9d:14:9d:
                    02:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:75:76:F3:30:66:F7:AD:7D:DB:48:BE:B5:17:D5:A8:7E:DC:41:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/01ef4bb9-f1b6-31ca-bc81-2cd4a38b26c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:d2:d5:2e:00:d8:1b:55:f1:63:41:4c:2a:9e:38:c0:8c:f2:
         8b:3b:19:75:a1:60:51:5e:c8:2d:93:ce:fe:44:11:5a:3c:31:
         f6:e4:dc:52:39:6e:d7:42:1c:fd:59:a8:10:6b:80:52:c0:bf:
         ae:9b:c4:24:3d:ea:ef:96:e6:b9:07:c5:69:d8:eb:f9:3f:2a:
         95:4b:88:f1:33:1e:52:61:8b:5a:09:b8:54:55:56:de:56:75:
         58:e6:12:b6:dc:ad:1a:51:fa:4f:c7:98:31:3f:d9:4c:39:a0:
         83:83:2c:67:e8:75:70:4a:00:4d:3e:67:5a:1f:bf:f7:bb:20:
         d9:db:7b:6e:98:3f:ee:89:b3:d9:91:86:69:47:44:58:09:e7:
         91:8a:53:2f:56:e9:bd:06:07:b8:87:bc:f8:72:d2:55:5d:c1:
         e8:d3:ae:96:97:c3:65:2f:b1:ed:bf:4e:84:61:a6:57:e1:3f:
         5c:9b:e0:62:31:0d:1c:24:b9:46:87:f1:88:6f:6b:a9:b2:2a:
         d5:00:13:de:b2:d3:3d:9c:33:19:cc:0a:cd:2f:fa:19:0d:a5:
         e1:44:24:1c:2f:cc:b7:9c:98:30:da:c9:24:ad:f1:06:b5:ea:
         ca:71:f1:20:a6:0b:7c:aa:19:5d:1b:54:e2:c1:93:db:ce:7e:
         20:a1:30:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:42 2025 by rpki-client