Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b4659e1a-7d3d-362e-a176-a44690281d0a.roa
File:                     b4659e1a-7d3d-362e-a176-a44690281d0a.roa (raw, json)
Hash identifier:          8C9ds6X8PfoV25uqqPvd3CUWyVkQyTmxFeoWxp3oeXA=
Subject key identifier:   ED:29:45:3E:65:06:50:46:65:BF:A7:0C:5B:4A:F0:36:DF:27:2D:D9
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AECC153330C4B91C27C1BFD88
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b4659e1a-7d3d-362e-a176-a44690281d0a.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     400536
IP address blocks:        142.252.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:53:33:0c:4b:91:c2:7c:1b:fd:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=b5f58a93-0b07-4468-b2ea-97416ecaba8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:85:7b:e4:fc:88:3d:22:58:6b:8b:fa:8a:e5:
                    45:f4:b2:62:01:bb:a2:c4:15:0c:47:a0:57:03:f4:
                    fb:42:54:db:3d:02:43:2f:b6:31:3e:93:3e:27:9c:
                    0f:bc:28:f0:72:2b:79:a2:ff:89:bb:5f:3a:14:8c:
                    ba:6f:71:be:8c:fe:9f:25:6b:24:6b:db:c8:a9:a7:
                    73:91:38:84:87:b2:69:25:2f:6e:48:c3:ac:bb:d6:
                    9f:d7:d2:c9:66:6e:89:95:c1:67:9e:73:04:d8:a8:
                    3b:48:d6:4a:ef:34:de:4b:99:5f:cb:d1:a5:19:5a:
                    b6:37:a0:53:7f:d7:ad:74:9a:87:51:a5:99:7f:62:
                    b3:71:66:4c:d8:4a:0d:09:07:6d:9d:0c:ed:c4:4a:
                    5c:15:b3:62:ce:53:fc:81:9d:7e:85:3e:c9:ce:b6:
                    43:2f:5f:33:48:6f:ca:cd:dc:b9:9c:08:db:e1:ce:
                    fb:a9:d5:41:63:f2:60:03:1a:f8:ab:b1:20:fb:ac:
                    10:3f:ad:fb:81:e3:6d:51:d5:49:af:16:5c:36:e4:
                    e4:d3:47:bb:34:4e:6e:91:af:20:a8:08:05:e4:40:
                    9b:44:e5:7c:12:c7:6f:1c:e9:20:40:ff:8e:bb:3a:
                    a7:c1:ec:aa:3e:e5:a7:ff:14:31:04:7a:c3:2b:28:
                    1a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:29:45:3E:65:06:50:46:65:BF:A7:0C:5B:4A:F0:36:DF:27:2D:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b4659e1a-7d3d-362e-a176-a44690281d0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:b1:9c:e1:20:95:3f:05:05:0c:a5:59:28:35:52:9c:87:e1:
         4a:d4:1e:71:7e:80:a6:d4:f1:fe:6e:17:d8:9f:3c:38:72:d0:
         20:b8:3a:5c:5a:cb:5b:4f:e5:1b:60:28:bb:57:20:3c:29:8a:
         49:a0:ad:31:a0:dd:c6:c2:98:ba:fd:94:c2:ba:4e:b7:b5:15:
         90:1c:0f:97:ac:58:0c:13:bd:72:e6:ec:c3:18:29:17:4d:59:
         97:5c:41:b1:e7:4e:92:77:a3:10:be:e5:b3:d2:6d:0e:7a:b8:
         35:0e:93:0b:b2:9b:c8:81:cb:7c:61:31:b1:b5:0b:24:c7:69:
         41:70:8f:cd:86:64:70:e0:dc:6d:10:71:e7:b4:d5:1e:e2:04:
         ec:2d:42:d5:5c:b1:ae:84:37:03:40:f3:fa:d0:f5:38:d8:d8:
         4a:ce:6d:ea:99:b2:f5:66:23:ac:bd:0b:fe:61:2f:e4:f2:dc:
         76:24:72:6e:e5:d1:e3:70:15:a3:88:bd:63:38:c6:d2:f6:1c:
         e2:2f:cc:cd:3d:61:2d:b1:b7:1b:ad:fc:56:30:1f:86:b5:1b:
         a2:dd:a2:b6:3e:f4:d4:aa:a0:1a:c6:be:90:ae:e7:cb:9c:be:
         56:7a:b1:e0:d4:ce:85:96:73:db:81:69:10:35:73:65:bd:bf:
         49:76:0a:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswVMzDEuRwnwb/YgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
YjVmNThhOTMtMGIwNy00NDY4LWIyZWEtOTc0MTZlY2FiYThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYV75PyIPSJYa4v6iuVF9LJiAbuixBUMR6BX
A/T7QlTbPQJDL7YxPpM+J5wPvCjwcit5ov+Ju186FIy6b3G+jP6fJWska9vIqadz
kTiEh7JpJS9uSMOsu9af19LJZm6JlcFnnnME2Kg7SNZK7zTeS5lfy9GlGVq2N6BT
f9etdJqHUaWZf2KzcWZM2EoNCQdtnQztxEpcFbNizlP8gZ1+hT7JzrZDL18zSG/K
zdy5nAjb4c77qdVBY/JgAxr4q7Eg+6wQP637geNtUdVJrxZcNuTk00e7NE5uka8g
qAgF5ECbROV8EsdvHOkgQP+OuzqnweyqPuWn/xQxBHrDKygaLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO0pRT5lBlBGZb+nDFtK8DbfJy3ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYjQ2NTllMWEtN2QzZC0z
NjJlLWExNzYtYTQ0NjkwMjgxZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvwcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG2xnOEglT8FBQylWSg1UpyH4UrUHnF+gKbU8f5uF9ifPDhy0CC4Olxa
y1tP5RtgKLtXIDwpikmgrTGg3cbCmLr9lMK6Tre1FZAcD5esWAwTvXLm7MMYKRdN
WZdcQbHnTpJ3oxC+5bPSbQ56uDUOkwuym8iBy3xhMbG1CyTHaUFwj82GZHDg3G0Q
cee01R7iBOwtQtVcsa6ENwNA8/rQ9TjY2ErObeqZsvVmI6y9C/5hL+Ty3HYkcm7l
0eNwFaOIvWM4xtL2HOIvzM09YS2xtxut/FYwH4a1G6LdorY+9NSqoBrGvpCu58uc
vlZ6seDUzoWWc9uBaRA1c2W9v0l2CvI=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:52:12 2025 by rpki-client