Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d52f47d0-8348-3eab-be8f-7b142bfb6965.roa
File:                     d52f47d0-8348-3eab-be8f-7b142bfb6965.roa (raw, json)
Hash identifier:          rmAlfzntXYFCKLSVH2o0/r3fvJWd+g2PdQQXmlWH8ak=
Subject key identifier:   6F:B8:50:4E:BE:18:A6:4F:09:8E:75:EA:08:55:0F:9C:50:A5:61:DC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B64CE7830471B0D3B663C2800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d52f47d0-8348-3eab-be8f-7b142bfb6965.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     44559
IP address blocks:        142.252.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:78:30:47:1b:0d:3b:66:3c:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=d6062787-0112-4961-aef6-247481e493b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:be:62:0f:8e:15:66:d5:ec:72:f8:ea:bb:75:
                    e7:ef:b1:54:47:3b:38:f7:85:28:f3:06:83:bb:5f:
                    8d:85:01:50:98:25:d0:76:4b:9f:86:9a:98:8d:6b:
                    83:3a:29:5d:33:23:27:40:1e:a4:01:90:85:f4:80:
                    85:a7:c8:8b:f0:e7:54:11:cd:60:10:2f:a8:c1:c9:
                    17:95:bd:15:f9:a8:85:8e:17:f7:aa:73:fc:d0:76:
                    aa:47:76:00:3a:5a:d4:0b:9a:c8:85:72:ec:3c:b3:
                    f5:d5:bd:75:0a:e9:8e:cf:0f:4f:7b:b9:e5:88:d6:
                    51:5d:0c:20:73:1c:b5:72:9b:69:8b:2c:b5:16:93:
                    d0:bc:bd:10:e6:d4:3f:34:e3:6d:75:42:54:b7:fe:
                    65:97:50:ec:3c:6a:b6:dd:12:44:62:23:42:e1:38:
                    50:1a:78:32:44:97:33:45:4e:14:4e:34:8a:01:d9:
                    c0:e8:82:56:3f:2f:25:2f:ef:c5:0c:d2:2c:38:49:
                    b9:17:1e:29:e2:29:23:75:c3:3e:42:8e:ac:ef:5e:
                    f5:27:29:80:5c:8d:f5:2f:b3:a6:a9:6e:18:3e:a1:
                    c9:48:f1:ff:c8:c4:18:3e:35:6a:ee:c4:6c:2d:fd:
                    eb:a5:2a:77:90:c4:9b:10:ee:09:b3:54:ba:80:01:
                    1a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B8:50:4E:BE:18:A6:4F:09:8E:75:EA:08:55:0F:9C:50:A5:61:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d52f47d0-8348-3eab-be8f-7b142bfb6965.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:17:4d:46:79:30:a2:13:89:a7:4c:cd:c8:7b:ba:3d:22:96:
         1d:45:bf:30:a8:e7:9a:1e:f4:ba:b0:11:b2:cd:76:e7:24:f2:
         be:ec:98:65:3f:f5:31:4d:e9:4d:b2:9e:47:8d:70:4c:93:4d:
         32:dc:01:5d:94:5b:32:f1:f9:2c:49:08:d3:27:e0:34:19:80:
         c5:92:5f:21:86:d8:27:89:9e:85:f6:96:6e:7d:b5:cb:14:de:
         ba:d9:b4:ec:25:df:6c:3e:a8:0d:f8:1e:d2:a5:75:be:7d:44:
         e6:a2:4d:63:7a:85:0b:26:dc:d7:70:5c:d5:c3:ed:0a:20:c0:
         3a:b2:b8:8e:a5:12:77:c4:d0:8d:f3:d1:de:01:1f:2b:22:b3:
         01:a2:e6:58:b6:8e:da:a6:9f:77:82:23:b4:8e:03:46:1d:e3:
         d1:06:33:fb:26:e0:2f:da:33:52:b6:b2:92:80:0c:22:7f:e8:
         43:c7:18:33:16:3e:e7:c0:ca:27:77:1a:4e:dc:f1:a9:07:6a:
         6e:27:62:75:15:3b:f5:70:d7:50:58:67:ae:ea:5f:88:2d:7d:
         7a:66:5d:58:a6:b1:95:e5:d4:7a:6e:d3:85:20:92:87:31:4c:
         31:fd:21:4a:65:9f:f9:d2:e1:03:95:26:a1:ab:db:4a:dc:93:
         7b:72:9d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:12:19 2025 by rpki-client