Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1b9f122d-0602-3813-87b4-c8cfb10be663.roa
File:                     1b9f122d-0602-3813-87b4-c8cfb10be663.roa (raw, json)
Hash identifier:          tj8FkE1OlBxVut6meg9h7QF8REJHNIki4KOcP0vqmmQ=
Subject key identifier:   E2:C1:8C:65:79:E0:DB:DB:29:89:F1:FF:75:41:3F:DD:E4:B0:C8:46
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AE8913D7656EA45595B089380
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1b9f122d-0602-3813-87b4-c8cfb10be663.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     62240
IP address blocks:        142.252.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:3d:76:56:ea:45:59:5b:08:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=7b152da4-6af2-43c2-9ae2-93812d80cb45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:19:54:32:f1:ba:67:50:29:b5:ec:09:b9:1e:
                    d3:81:8f:84:da:42:1a:38:c5:64:55:13:c8:7c:57:
                    fe:56:29:14:24:91:3b:08:dc:99:c5:02:5a:c0:fd:
                    4b:0c:ec:90:20:41:7a:d9:a5:2d:37:6f:95:d7:82:
                    3b:01:04:12:ce:1c:13:5e:c8:e7:9a:b4:82:fd:64:
                    06:cc:c4:ee:be:2a:f3:70:28:d3:bc:48:f7:0f:ef:
                    76:38:95:89:50:d4:d5:31:43:12:b7:20:67:cb:26:
                    aa:76:2f:e4:e0:e0:74:16:e4:00:96:fe:a4:10:c7:
                    ec:83:5f:16:71:3e:de:fa:55:b1:1e:ad:0b:49:43:
                    62:6b:b2:bb:3d:de:b5:70:11:e5:2b:04:4a:b3:11:
                    c3:6b:3a:17:4f:62:c8:1e:81:b0:0d:c5:cf:f1:27:
                    21:0e:ea:3c:cb:61:0c:bf:c9:ab:62:e5:4e:1c:03:
                    f1:2c:67:54:50:d0:1f:31:d3:30:a2:99:10:59:71:
                    a6:43:fd:e6:4f:ca:50:68:aa:3e:fe:03:95:88:f2:
                    68:f1:10:13:7d:b0:21:72:65:ec:3f:be:7d:94:5c:
                    d0:32:96:cd:2a:8a:1c:8a:23:89:19:98:32:71:ad:
                    2b:02:2f:52:35:f1:06:26:26:5d:d5:b1:37:67:1d:
                    fc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C1:8C:65:79:E0:DB:DB:29:89:F1:FF:75:41:3F:DD:E4:B0:C8:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1b9f122d-0602-3813-87b4-c8cfb10be663.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:9e:28:84:ae:ba:be:2c:75:62:be:9b:c7:84:c4:30:e9:b9:
         ce:0e:1f:d2:bc:c5:cd:0e:6a:72:ed:f5:f1:d1:72:2a:0b:d7:
         9b:32:6f:17:1e:6a:9f:d0:5f:a2:63:f2:a4:f0:4c:b8:81:ee:
         4b:b7:72:80:13:bf:06:3f:18:94:d2:fb:80:ea:c6:49:f8:0b:
         15:b3:55:a2:23:6d:3d:2d:54:81:e0:a7:f7:03:87:b8:f8:de:
         31:1c:3e:4f:4f:b9:34:14:f1:2c:a7:1b:5a:20:ba:03:ad:4e:
         db:fe:4c:65:4c:e6:5a:fc:9e:49:31:1f:cd:3c:8d:0a:6d:7b:
         9a:01:93:16:ac:6a:e4:ee:78:4f:45:ea:f1:db:d8:bc:ae:c1:
         d4:bf:0a:9c:7e:9e:db:b1:21:e2:b0:3c:d6:80:5d:c2:f5:78:
         ae:09:80:3e:1c:ed:88:08:a0:c2:db:c9:24:c8:a4:81:ff:65:
         c8:84:1f:bf:64:ed:c7:40:b4:9c:00:26:34:f2:89:2a:95:c6:
         c4:88:6e:cf:06:14:0f:7d:fd:8e:bd:ee:27:1b:62:01:c6:ea:
         0c:1a:71:d2:9a:b7:f9:b9:2a:f0:31:21:52:c6:40:2e:93:1e:
         1b:fa:c8:8f:c7:fb:4c:3e:19:03:a3:fc:2a:2e:0f:85:2a:c8:
         e4:37:56:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:52:41 2025 by rpki-client