Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/acd3767e-6fa0-31d8-a1a2-d8068f4e11b6.roa
File:                     acd3767e-6fa0-31d8-a1a2-d8068f4e11b6.roa (raw, json)
Hash identifier:          LH9lcuk3P+Bv6SHexFtR3hcwDC2Tuixj6c9KZ+8pNZ4=
Subject key identifier:   F3:D7:32:18:83:9B:B6:48:F7:99:D1:E4:43:06:F8:74:90:5B:D9:45
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AECC4132870C86521C04FC4C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/acd3767e-6fa0-31d8-a1a2-d8068f4e11b6.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     400759
IP address blocks:        142.252.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:13:28:70:c8:65:21:c0:4f:c4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=8e237311-e49b-4729-85b9-c33cf88c9787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:93:f6:04:ee:cb:67:17:48:b0:64:07:64:b3:
                    a9:99:3e:b8:05:8b:5e:1b:2e:66:27:d2:e9:96:af:
                    d5:12:dc:7d:77:6f:84:34:19:61:b9:a4:dd:80:b8:
                    2c:02:0f:bf:e1:36:42:b0:5f:18:e9:69:a7:71:47:
                    8f:1c:d6:6b:9d:90:f2:cd:05:61:79:dd:a0:5d:3f:
                    f4:87:e7:c0:fa:62:82:48:42:16:c5:89:75:7e:6b:
                    b7:8b:f9:8f:10:04:5b:e9:49:66:20:a1:b4:a5:4f:
                    4f:4b:c1:a7:4a:6b:64:a6:35:6c:e2:e4:11:1a:3a:
                    58:c7:65:74:98:35:56:a5:07:da:7a:a8:f5:62:08:
                    f3:d2:e1:29:0d:52:68:a3:b1:73:2b:8c:9b:60:6d:
                    c3:63:ad:ed:2e:65:96:aa:44:a0:a5:f6:f0:e7:4b:
                    07:fc:1b:6b:e5:93:3f:fe:0a:57:1f:76:a5:f2:d7:
                    4a:2c:9b:18:72:7c:ad:19:03:c2:32:8f:97:e1:11:
                    ed:8d:d1:c6:42:4c:a1:50:73:c6:80:11:bc:f4:fd:
                    5c:08:fd:c5:7e:45:12:d7:b4:c9:36:ae:de:56:24:
                    1d:c7:25:2c:98:fd:bf:5a:b5:65:54:8d:48:68:33:
                    21:95:cb:83:b4:03:4d:ef:b8:95:1c:0e:7c:3e:23:
                    9a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D7:32:18:83:9B:B6:48:F7:99:D1:E4:43:06:F8:74:90:5B:D9:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/acd3767e-6fa0-31d8-a1a2-d8068f4e11b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:9e:34:7c:31:b0:1d:27:85:03:90:96:b5:9c:22:5b:b0:b8:
         b3:18:04:91:f3:2b:9c:f0:c3:c9:84:13:fe:18:c0:b1:dd:c4:
         dd:40:70:72:57:30:eb:d3:fb:06:42:9f:8f:cb:ef:1d:f3:b2:
         c4:8d:17:fa:35:70:5c:a1:46:01:4f:ca:41:c5:f6:01:db:cd:
         b9:83:1c:d0:08:d5:3e:1c:d3:ad:d3:e0:c4:5a:9c:99:02:32:
         49:fa:18:87:60:ff:3c:83:b5:6f:70:0f:47:04:7c:78:8e:45:
         1e:40:a2:4d:50:7f:50:4b:bc:36:e4:4a:aa:40:71:cf:93:6c:
         5c:3b:d4:a8:d5:3f:2a:75:c2:76:f7:9c:5b:10:07:3d:64:03:
         ea:f5:b6:5d:54:71:14:0a:41:a5:23:e6:12:5d:10:46:77:c7:
         74:e8:14:29:b4:39:97:40:b6:2b:42:a3:98:51:c2:25:0f:42:
         d8:53:db:80:2c:29:0f:b4:d2:0b:f7:14:72:56:bf:2a:72:da:
         2b:55:b2:a4:e1:85:17:82:16:6c:eb:f6:bf:6a:74:41:72:19:
         d4:bc:c9:f8:48:37:cb:99:4c:bd:39:6c:18:51:ca:8c:8f:a3:
         cd:9c:f2:43:1e:b5:8a:e1:b4:d6:37:a6:4c:6b:db:1a:b8:a2:
         b2:4f:82:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:49:37 2025 by rpki-client