Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f182e0f3-804e-4487-8410-621fe31d5d60/52a76528-cf8c-3e2a-99c0-e909e2d9c1a7.roa
File:                     52a76528-cf8c-3e2a-99c0-e909e2d9c1a7.roa (raw, json)
Hash identifier:          8s7DZcR+ga38kYIFYMuMg/e3kPYmsEwwiBcuG8n8mF8=
Subject key identifier:   8C:43:B3:22:C5:23:DD:B2:1C:1F:AE:18:7A:20:C7:CF:BB:68:B9:1F
Certificate issuer:       /CN=f182e0f3-804e-4487-8410-621fe31d5d60
Certificate serial:       010D0C9F4328584A6F207E026D2B8308F4211C60
Authority key identifier: 47:89:6A:58:42:AE:68:BA:51:FC:A1:76:59:99:C2:E1:5E:6B:89:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f182e0f3-804e-4487-8410-621fe31d5d60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f182e0f3-804e-4487-8410-621fe31d5d60/52a76528-cf8c-3e2a-99c0-e909e2d9c1a7.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     13576
IP address blocks:        142.54.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f182e0f3-804e-4487-8410-621fe31d5d60/f182e0f3-804e-4487-8410-621fe31d5d60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f182e0f3-804e-4487-8410-621fe31d5d60/f182e0f3-804e-4487-8410-621fe31d5d60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f182e0f3-804e-4487-8410-621fe31d5d60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:7e:02:6d:2b:83:08:f4:21:1c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f182e0f3-804e-4487-8410-621fe31d5d60
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=a5c7e7fd-46a9-48e0-9370-77bb1d4dca7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6f:6f:73:ba:50:4e:ba:0e:ce:93:ec:ff:b7:
                    b7:97:cc:58:b2:fc:f1:a8:50:3d:af:5a:a5:b2:a1:
                    e3:e5:3f:d6:2b:e6:a2:81:51:be:27:8f:9d:8c:3f:
                    f4:45:80:9c:2d:f5:61:1e:64:28:d3:59:a3:f6:6b:
                    83:6b:5d:a9:11:0f:e2:c7:40:3c:64:3f:dc:ea:15:
                    a7:ef:49:05:dc:3a:3a:03:3b:fd:16:ea:6f:26:7c:
                    0f:00:1b:e3:da:22:95:da:d8:e7:e0:7c:bf:de:9b:
                    72:1b:4e:80:bf:72:36:30:c8:c7:ab:1e:0b:3d:b0:
                    60:f4:f2:47:cb:08:8a:b2:00:be:d4:c6:b2:ab:1b:
                    b3:9c:29:30:fe:f2:2c:64:4f:63:1c:ff:5e:e9:1c:
                    5e:f8:ad:8d:33:aa:76:de:21:78:ce:81:cc:35:68:
                    95:c9:88:0c:33:67:e2:e4:e4:80:4a:57:ce:14:7d:
                    7d:0f:87:6e:ed:06:12:98:2b:5e:b7:ce:ac:6f:cd:
                    ca:f3:16:92:68:56:e8:03:26:f1:33:50:57:bc:cf:
                    57:c9:fb:d1:82:2d:54:9b:1a:6b:89:ec:3b:b4:7d:
                    8c:ab:1b:d6:80:75:af:e1:9c:5c:ea:b4:95:a7:f3:
                    e1:51:3a:00:4b:64:72:d6:f5:52:82:86:a0:42:12:
                    0f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:43:B3:22:C5:23:DD:B2:1C:1F:AE:18:7A:20:C7:CF:BB:68:B9:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f182e0f3-804e-4487-8410-621fe31d5d60/52a76528-cf8c-3e2a-99c0-e909e2d9c1a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f182e0f3-804e-4487-8410-621fe31d5d60/f182e0f3-804e-4487-8410-621fe31d5d60.crl

            X509v3 Authority Key Identifier:
                keyid:47:89:6A:58:42:AE:68:BA:51:FC:A1:76:59:99:C2:E1:5E:6B:89:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f182e0f3-804e-4487-8410-621fe31d5d60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.54.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:37:6d:7c:8a:90:14:26:57:19:5f:a7:b3:42:15:e5:17:3a:
         6c:a4:72:5a:4c:34:a1:21:9b:13:b3:1e:f9:f0:35:61:5b:5b:
         65:5b:4b:8a:e6:c7:94:d4:fb:23:8e:9e:23:8d:3c:ef:ea:c1:
         2a:71:85:fd:cc:0b:62:0a:ef:e0:6f:d8:e7:34:d6:f5:bf:b3:
         f0:35:4f:c4:25:a2:4c:86:f6:71:b0:ae:a4:41:89:52:bd:05:
         3b:17:75:c0:59:0f:df:8d:33:ef:ff:e2:80:1c:13:d9:27:10:
         36:61:d6:36:77:8c:f9:69:54:19:ef:7b:d0:82:b4:33:2d:40:
         00:c6:c5:32:78:45:81:b0:f4:64:3a:8c:f7:76:e1:c5:c2:bc:
         8c:33:0a:e6:51:14:ba:c6:57:be:a3:82:a9:3f:3f:c6:dc:0c:
         ac:7f:18:49:2b:4a:51:3b:b4:fa:54:f8:ca:46:3a:0c:1d:a7:
         37:89:3f:f2:fe:c8:a0:26:b3:56:6d:4b:ac:67:46:96:dc:d8:
         cb:e0:a7:e2:af:7e:ac:6a:ef:92:34:24:02:45:e8:53:4d:4a:
         c2:ee:8b:72:95:1c:c1:93:82:7e:08:86:e6:41:56:1e:ed:ee:
         a4:38:78:38:1d:19:8a:cb:ec:05:21:d7:d9:74:60:2c:4f:5f:
         b1:7a:dd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:15:43 2025 by rpki-client