Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42a55bf6-ae47-3020-a989-9215951ce1bb.roa
File:                     42a55bf6-ae47-3020-a989-9215951ce1bb.roa (raw, json)
Hash identifier:          qtNPZ4+WSIZGKw4t82HPteW22lxxaVV4RZnxchjxAXI=
Subject key identifier:   9D:0D:B5:40:8B:6B:17:F5:EF:12:BF:F3:54:34:A0:59:E1:B3:82:E9
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B68FCACCB49A90C1BDC0EEA20
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42a55bf6-ae47-3020-a989-9215951ce1bb.roa
Signing time:             Sat 04 Oct 2025 13:00:40 +0000
ROA not before:           Sat 04 Oct 2025 13:00:40 +0000
ROA not after:            Fri 02 Jan 2026 14:00:40 +0000
asID:                     18779
IP address blocks:        142.252.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:68:fc:ac:cb:49:a9:0c:1b:dc:0e:ea:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  4 13:00:40 2025 GMT
            Not After : Jan  2 14:00:40 2026 GMT
        Subject: CN=7a68b220-6788-4b1a-8886-3b91d016e4dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f1:4e:08:73:86:de:f9:05:53:62:d6:e3:7b:
                    b4:e4:6b:2a:57:26:14:cd:44:43:67:27:eb:75:bf:
                    11:39:f0:c1:84:3d:dc:90:d6:35:d4:84:d0:0a:96:
                    bc:46:a4:67:1b:44:ef:87:9f:ba:79:23:40:06:d4:
                    e9:66:0a:64:a3:98:12:a7:87:1a:3e:79:a5:e9:b1:
                    0f:37:ee:07:aa:f2:0f:e8:7a:ed:51:3f:89:c5:53:
                    e1:f9:50:fa:20:2d:db:46:c5:4f:5b:1e:33:f3:b7:
                    f8:2b:51:87:69:7e:d4:3c:09:44:5a:97:d9:5f:55:
                    ef:8a:bb:e2:ec:51:aa:15:4f:87:30:f5:26:e2:71:
                    de:c5:24:a7:44:31:5d:4e:01:14:3a:52:3b:98:60:
                    fc:5e:0f:95:56:50:ff:46:d4:cf:6d:e9:06:89:f2:
                    b3:a2:f6:18:c4:d4:b3:f1:0c:bd:a6:66:11:1a:8d:
                    11:95:6b:4f:2f:63:eb:1f:74:7c:fb:b2:00:62:8b:
                    a2:7d:92:c5:f7:62:6d:2f:90:78:45:90:34:82:4f:
                    21:e6:b9:1f:46:17:03:16:91:cb:93:92:e6:86:34:
                    8b:79:97:9a:0d:d1:2f:f6:63:e9:b3:3c:f3:18:12:
                    f1:d3:ad:3d:9f:4b:e9:68:06:e4:c3:95:ac:c0:44:
                    16:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0D:B5:40:8B:6B:17:F5:EF:12:BF:F3:54:34:A0:59:E1:B3:82:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42a55bf6-ae47-3020-a989-9215951ce1bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:22:cc:4d:98:f7:a7:1e:d6:8d:7b:d1:9a:eb:78:fd:96:5a:
         d3:88:34:55:bb:01:e4:c4:a0:77:8d:64:b1:08:96:df:e2:82:
         d4:d7:c6:cd:62:8a:5c:69:19:bb:b5:59:dd:ef:38:ba:05:b8:
         e1:1e:6a:0e:37:ec:31:a0:02:65:1b:30:2a:16:fd:52:4f:1a:
         84:b9:a4:ed:aa:ab:f8:56:25:1f:43:d8:c9:1e:fe:1a:e2:c4:
         4b:a3:7d:f0:80:3e:a4:ec:60:26:09:08:b4:2c:d6:38:5b:54:
         73:e6:27:a3:63:8e:b9:96:56:ab:f4:a6:7f:64:b9:d5:59:92:
         18:2e:86:08:0e:8c:f3:d9:cf:92:e0:51:ea:34:4e:e0:9b:93:
         98:04:b4:74:52:e0:49:f1:94:63:0b:31:49:d3:c5:e3:5d:dd:
         3c:36:71:63:0a:05:7b:06:51:39:42:4e:43:25:0b:c4:af:89:
         67:20:cd:25:24:0b:39:b9:23:2c:f0:97:f8:34:de:11:f5:2d:
         bb:e2:4b:c1:6e:45:9e:a6:a1:19:53:ac:32:a3:2a:62:4e:87:
         8c:16:5b:9e:d3:4e:c2:80:2d:ba:55:c5:23:e5:92:de:1a:1d:
         6f:1e:81:3f:ab:3a:01:23:bf:28:af:ce:1d:3e:c0:4f:80:ea:
         fd:4c:95:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:33:09 2025 by rpki-client