Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ea0d0a9f-7233-32f1-87ac-5be0a05bac1b.roa
File:                     ea0d0a9f-7233-32f1-87ac-5be0a05bac1b.roa (raw, json)
Hash identifier:          eAd9sU8Qlxnq0dftyIyVNDIjKcybnRkq2P7lIF3oAYc=
Subject key identifier:   83:83:B3:76:69:44:E9:A9:78:AC:DD:94:27:4E:AA:C5:D1:67:B7:77
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B14A01941A4671F71B1DA5F0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ea0d0a9f-7233-32f1-87ac-5be0a05bac1b.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     44893
IP address blocks:        142.252.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:01:94:1a:46:71:f7:1b:1d:a5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=6e742f96-710a-4614-8d5f-3aad192c4a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5e:60:c0:24:4f:a2:30:03:b5:3e:97:a6:47:
                    8f:4d:46:20:94:8a:ad:96:44:a2:1d:95:86:4d:96:
                    77:a7:f6:64:17:8e:c6:74:82:16:ce:05:4c:81:59:
                    82:12:40:b5:c2:1c:bd:6f:71:72:82:5d:e5:07:8d:
                    82:eb:70:2c:44:69:61:5b:9d:83:85:23:91:dc:d8:
                    8a:cf:9f:b4:f7:36:55:1c:6f:f9:82:04:90:21:63:
                    6a:46:10:a5:64:0a:6f:60:9e:10:a3:8c:eb:8d:93:
                    8e:f1:b1:6a:c7:16:51:c0:d7:ed:fa:86:a2:d5:ad:
                    18:0b:d0:ec:99:8d:68:a2:67:42:cf:24:be:92:37:
                    23:d6:a4:9b:c0:fd:41:1f:15:e6:3e:0d:9c:9a:59:
                    0f:7a:40:49:3f:a9:3e:9c:f4:60:f0:95:c2:70:a4:
                    d0:a4:b1:1a:d1:50:cc:b6:e9:fc:fa:03:22:90:47:
                    1a:1d:64:37:21:18:2c:26:3c:62:71:c1:7c:64:a0:
                    64:5d:af:da:63:c6:c3:e5:84:f9:a0:93:85:c4:66:
                    c1:78:3d:9b:f4:f2:c6:b0:ac:30:09:7e:b8:92:36:
                    f5:1a:16:17:be:ed:cd:f0:b3:0a:56:d2:4a:fa:62:
                    c4:93:ca:07:0c:fe:94:1d:e6:78:51:7f:df:3d:ce:
                    f0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:83:B3:76:69:44:E9:A9:78:AC:DD:94:27:4E:AA:C5:D1:67:B7:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ea0d0a9f-7233-32f1-87ac-5be0a05bac1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:67:14:38:7e:e6:68:0c:d1:9b:a1:a8:01:78:18:c2:5d:94:
         c2:e2:19:01:70:66:fa:cd:22:af:77:61:99:4b:7f:76:c4:5b:
         64:8d:ba:85:db:25:0d:92:c7:16:cc:1a:06:02:a7:fe:c0:78:
         a0:cd:c0:a9:e4:f7:ea:1a:40:ac:f8:d3:21:ff:35:99:4c:00:
         f7:a2:70:77:2a:d2:c9:2d:d5:7a:db:7f:64:42:b6:28:cc:20:
         2e:7d:0e:7f:3e:cb:4e:e6:ec:c4:ca:d8:4d:8a:2a:ab:19:03:
         73:6d:ba:8b:cc:82:95:e2:d8:b9:3a:cf:88:f4:e4:97:87:74:
         7c:2c:73:23:f6:30:b0:5d:21:99:f7:83:83:87:c8:e3:9a:3d:
         74:69:18:8e:b4:28:6e:eb:ab:45:e4:20:0a:46:0f:2b:68:83:
         9b:cc:ba:4e:1d:e2:33:78:71:33:26:d6:8d:c9:18:65:d7:38:
         9f:f8:0d:7b:c9:e0:83:10:43:8c:78:25:ec:91:fb:9b:f0:99:
         7e:2e:ae:65:e0:07:ca:79:73:ee:60:bf:f7:52:5b:a6:4f:90:
         f4:de:b8:5c:ec:78:4e:cc:d9:bc:5a:ae:8e:7c:6f:e8:0d:11:
         4c:c7:ef:e4:e5:69:62:93:aa:12:42:30:ab:9b:d6:18:e3:fd:
         33:93:82:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:41:08 2025 by rpki-client