Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/67c9174b-e498-32f8-a077-d83c90681323.roa
File:                     67c9174b-e498-32f8-a077-d83c90681323.roa (raw, json)
Hash identifier:          XJUOHp5TIMzLA+/8jFwGQOfBqsEv51uqqMZWiEqNwzM=
Subject key identifier:   59:DF:BE:62:C6:1C:78:9F:CB:29:2D:CC:D0:B5:69:CD:60:AC:2B:FF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A3B41339EE14DDE718A913560
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/67c9174b-e498-32f8-a077-d83c90681323.roa
Signing time:             Wed 18 Jun 2025 11:04:50 +0000
ROA not before:           Wed 18 Jun 2025 11:04:50 +0000
ROA not after:            Tue 16 Sep 2025 11:04:50 +0000
asID:                     35554
IP address blocks:        142.252.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:41:33:9e:e1:4d:de:71:8a:91:35:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 18 11:04:50 2025 GMT
            Not After : Sep 16 11:04:50 2025 GMT
        Subject: CN=9bd5efd1-5627-4d99-8536-e1557d2ad162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:95:84:e3:74:b0:35:b1:e9:27:fd:40:d2:16:
                    4e:f7:ee:51:c6:cb:e9:48:6b:36:75:86:99:da:3a:
                    a7:87:dc:7a:6d:0c:88:bd:5a:56:b1:2c:e2:eb:f2:
                    6c:70:f3:bb:a7:49:94:91:50:b3:bc:ed:78:0c:dc:
                    2b:53:e2:c1:49:25:4d:66:71:b3:4d:f0:56:c6:08:
                    95:68:37:d2:f4:a8:88:7f:a7:81:01:17:10:3f:a3:
                    cb:61:49:5b:97:79:fe:bc:10:f6:5b:12:6f:80:f6:
                    69:31:28:b5:24:ef:2f:8f:99:05:d0:d4:b8:74:c8:
                    34:c1:9a:81:38:05:20:e0:0d:72:c1:7a:18:64:9e:
                    f2:9a:95:c8:c3:a0:94:cf:e0:33:3c:d7:df:e7:e4:
                    91:18:4c:e7:28:d1:bd:c2:3a:61:58:d7:d2:f0:69:
                    14:61:3b:f4:20:51:ee:22:6d:6b:e0:2c:ec:c7:70:
                    02:77:41:d3:5e:68:ff:50:0b:fe:51:ce:e2:8f:3f:
                    5a:8a:26:b9:8c:67:5f:bd:b8:4a:d6:15:86:e4:9c:
                    9f:9f:78:00:a8:a1:9f:d8:ec:28:c4:d6:56:fb:70:
                    54:46:e2:19:50:48:e2:8f:15:fc:4f:eb:52:84:75:
                    e1:da:ac:aa:75:c5:90:e8:77:08:71:34:70:a6:5b:
                    2b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DF:BE:62:C6:1C:78:9F:CB:29:2D:CC:D0:B5:69:CD:60:AC:2B:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/67c9174b-e498-32f8-a077-d83c90681323.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:44:a6:48:cc:db:7e:df:58:bb:7f:87:9e:98:97:23:54:f5:
         2e:73:00:a7:c4:20:0b:54:a8:41:54:f8:ae:33:13:fa:54:bf:
         65:94:62:0c:38:40:6e:81:19:ff:73:7c:4b:a6:cd:a6:ff:bc:
         10:e5:cb:a8:17:55:d7:43:e5:ab:fd:d3:63:4e:cc:07:aa:c6:
         8b:fb:d7:f2:9c:1b:f5:96:18:ed:5b:bf:16:10:99:31:5b:82:
         80:b4:2d:2a:66:0b:c9:78:bf:55:ab:13:50:f2:94:61:02:2e:
         75:c2:09:6d:33:d6:50:8e:e0:21:cb:63:04:b0:84:9f:51:eb:
         be:34:31:57:f0:55:40:89:03:01:96:c6:fd:7e:06:21:f4:f7:
         38:82:d6:26:50:58:a6:b8:b3:6a:8c:f1:29:df:20:26:16:82:
         f9:67:4c:a2:54:e2:90:d1:ea:ba:74:90:d1:4a:bd:92:f7:7c:
         7f:6d:75:c6:8e:62:22:b4:49:c3:7a:7f:c1:f8:7d:0f:68:f4:
         bf:c2:66:85:e8:d9:0b:7c:0c:d7:e0:a5:27:a0:89:09:d7:ce:
         f8:aa:ad:79:4b:86:6b:ad:61:97:a4:12:6c:a1:ff:56:80:1b:
         a0:f9:17:5b:f6:0f:95:a8:80:8f:06:ce:a0:32:5e:04:8a:c1:
         e0:6c:ae:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 05:33:16 2025 by rpki-client