Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/21be651e-287f-3b53-9680-96b9031eaa80.roa
File:                     21be651e-287f-3b53-9680-96b9031eaa80.roa (raw, json)
Hash identifier:          5C763gswsyauqndZBL9LjYx5mx2tjU3O4sUmC2CDdRw=
Subject key identifier:   D7:54:FC:0D:1D:9B:26:B6:1D:09:4C:E7:4B:9C:4D:5B:F5:5C:58:CC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B64CE68EC45552F6C70B7D900
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/21be651e-287f-3b53-9680-96b9031eaa80.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     44559
IP address blocks:        142.252.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:68:ec:45:55:2f:6c:70:b7:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=7b3ec84b-bbf7-4548-aed3-9ca2bee3974d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:17:0f:e8:41:79:96:8d:42:2a:ea:69:0f:d3:
                    48:09:29:b0:2c:64:a1:e1:c2:1e:2b:3c:52:f7:a6:
                    b7:39:53:30:0a:8b:ea:0c:bd:3d:db:54:df:fc:c1:
                    d1:a1:eb:ee:bb:e8:f5:7f:9e:2f:37:20:12:51:89:
                    7b:8c:aa:e5:23:eb:1e:27:05:65:b3:b6:e3:b7:06:
                    27:f9:3a:85:74:cb:7b:90:7e:ee:a7:4d:a9:c9:2c:
                    b5:9f:b9:03:82:bd:8a:c6:97:9c:b0:30:01:21:da:
                    85:9a:3f:db:68:86:55:78:bc:b2:ad:33:3e:d5:08:
                    ca:e2:11:fc:3a:c2:2d:1e:e1:48:09:d4:77:88:36:
                    42:9b:eb:b7:95:0b:08:23:9a:44:69:5a:e8:9b:bb:
                    56:01:f7:29:bc:3a:b8:28:d0:ec:7d:90:ce:df:50:
                    88:13:c9:da:cc:6d:69:4b:e7:e2:8e:9b:21:94:7e:
                    f7:9d:6d:40:25:b0:09:bb:6c:cf:dc:04:17:b0:2e:
                    38:01:25:11:11:9d:2b:67:4c:79:8c:b5:0a:d0:5b:
                    a4:fd:e7:80:be:90:87:f9:28:6d:75:8d:d5:25:f7:
                    94:65:e1:47:bd:de:f0:f2:31:81:46:f8:f9:f2:50:
                    d6:12:05:aa:d3:c8:3c:f7:c7:70:61:d0:92:80:8f:
                    e4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:54:FC:0D:1D:9B:26:B6:1D:09:4C:E7:4B:9C:4D:5B:F5:5C:58:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/21be651e-287f-3b53-9680-96b9031eaa80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:6b:38:52:2a:21:3a:49:14:c8:d8:8c:5e:7e:29:24:12:fb:
         da:d9:c3:a3:f6:00:15:6e:69:70:62:16:81:33:12:87:66:57:
         8c:73:74:64:c7:7f:3c:74:56:bb:80:4e:7b:bf:c9:72:64:df:
         9a:0e:1b:72:4b:13:cd:f1:45:3d:13:f1:d4:74:ea:c6:0d:e9:
         e2:06:f2:63:d3:09:3c:54:18:f3:4f:3d:63:bf:66:4b:20:e0:
         17:31:bc:38:f3:cf:66:b1:5a:a2:35:98:a7:25:9a:12:12:75:
         8d:24:fa:7b:a0:82:3f:95:10:9b:8c:c7:8b:0c:a1:4c:5d:c8:
         f0:1a:3c:8b:d1:2e:28:2b:d1:0d:19:54:87:98:e3:69:33:cc:
         37:f3:13:a0:e8:d5:45:6b:c2:5b:64:b0:3e:18:5f:6f:bd:2d:
         2b:76:01:a0:76:61:6e:f1:c8:1e:dc:4c:f2:09:86:4b:da:9f:
         4c:a5:e0:a3:f7:65:e9:18:16:14:93:94:2c:e8:ed:f6:5d:10:
         5d:2a:a0:ca:88:ac:0d:07:d1:49:c2:30:51:98:87:3e:91:6f:
         49:23:8b:f8:93:37:f5:a6:8f:b1:86:92:73:b0:b3:53:ad:6c:
         54:65:c1:cd:78:86:b1:bb:17:cf:fe:e1:40:93:7a:c4:9d:91:
         59:ed:c7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:53:27 2025 by rpki-client