Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c3fb8d17-1154-36be-9e89-bd29922d7db6.roa
File:                     c3fb8d17-1154-36be-9e89-bd29922d7db6.roa (raw, json)
Hash identifier:          1phvyZTQBTeNtFeoqM0iHCEu7e/59j5AxSGzFc1/l4s=
Subject key identifier:   4A:70:15:BF:26:F3:EA:1D:7F:0D:8A:3E:43:0E:F7:AC:B2:95:89:9B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B14A01A4F24627BE2D468F80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c3fb8d17-1154-36be-9e89-bd29922d7db6.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     44893
IP address blocks:        142.252.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:01:a4:f2:46:27:be:2d:46:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=80154431-2b02-4a4f-8809-2d6e8dc079fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6d:42:1e:b8:80:d4:13:a2:8c:2c:cd:0c:05:
                    91:fd:e8:ea:ab:a9:52:e3:2a:44:ec:b0:21:e7:37:
                    72:43:38:44:a8:63:22:c1:04:70:1d:d2:bd:67:a7:
                    3a:30:ae:fe:73:27:0c:82:b2:f2:28:88:9d:5a:5f:
                    64:e7:f3:6e:40:8b:3a:31:3e:dd:8f:d8:f9:aa:83:
                    31:c0:12:f1:5e:51:74:fe:0c:0d:60:38:f9:87:d1:
                    0a:ad:fa:4e:0e:4b:48:c0:4f:54:a1:7e:05:27:03:
                    5c:6f:8a:3d:f1:cf:17:2d:42:c3:df:8e:2d:e7:92:
                    71:a2:db:8b:f5:cd:11:a0:f0:07:6f:73:8a:ae:d3:
                    09:0f:07:40:f8:b7:b6:01:0e:48:9d:aa:e8:81:f4:
                    97:2a:18:3b:97:3a:73:40:35:b3:9d:c1:03:42:62:
                    3a:7f:ef:43:f4:fd:93:06:cf:0b:c0:84:25:78:68:
                    3e:0e:b4:8c:e0:4a:77:e9:3e:03:64:75:91:35:cc:
                    74:ce:76:c8:e4:c0:0e:15:82:ce:79:92:2d:3e:54:
                    f6:c5:08:9f:d0:80:1c:4b:3e:82:4c:8e:cb:ee:91:
                    fb:01:35:8c:fa:76:20:b1:1f:c6:e6:03:fd:21:f2:
                    b1:da:a5:0f:a4:ab:2d:a9:d8:27:8e:e1:26:54:c3:
                    06:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:70:15:BF:26:F3:EA:1D:7F:0D:8A:3E:43:0E:F7:AC:B2:95:89:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c3fb8d17-1154-36be-9e89-bd29922d7db6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:4b:b2:a2:d1:7e:99:16:ba:63:3b:f9:a1:d3:92:d6:d8:5a:
         3b:e0:87:40:74:df:59:35:2d:c4:9d:19:74:7a:20:58:2d:4f:
         c9:58:14:63:d2:bf:03:31:84:e6:3b:cf:fc:89:d4:a7:3d:19:
         52:6f:1f:e9:f2:6c:93:e5:0a:81:d5:2e:1f:02:51:b7:5b:69:
         6c:72:c1:c7:98:96:65:a1:5f:1b:99:9f:e5:3c:21:cf:55:b9:
         1c:3a:d1:65:92:a0:9e:9a:8a:97:5f:32:3f:1c:4c:0b:98:97:
         cb:cd:49:c5:4a:a5:f6:b6:00:f2:dd:6a:3f:fb:68:74:75:bf:
         63:6b:3c:40:eb:b9:2c:4e:0b:45:11:5c:db:4b:b7:8f:7b:a8:
         8f:d9:99:8f:c4:74:71:20:c4:10:ee:af:7e:23:7e:c4:ab:12:
         34:9e:1a:d3:f5:87:5b:eb:b6:54:a9:a2:f5:79:f5:15:fc:99:
         22:d8:6d:49:24:8f:29:9a:db:a6:cf:81:50:f9:dc:b1:8e:66:
         11:ab:ee:b3:95:75:8d:f5:4d:b0:3a:cb:ca:3e:fe:b2:a9:65:
         c3:52:73:28:8f:75:49:d8:46:55:ab:36:32:9c:a4:d9:f4:23:
         5c:8d:4d:c7:ab:36:8a:31:07:c0:3f:13:35:26:73:8b:68:e8:
         1b:a7:73:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:52:18 2025 by rpki-client