Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09d437f2-a439-3d36-b4a8-2c961f4b576c.roa
File:                     09d437f2-a439-3d36-b4a8-2c961f4b576c.roa (raw, json)
Hash identifier:          UGtwOrrSP6Zuv9iZJF1vlzy/0cnzQMCeSKKklahx/jo=
Subject key identifier:   A7:F9:98:4A:8A:5D:8A:31:46:80:BF:5E:87:94:2F:6A:C4:5C:0A:3A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584980E7398E6DD51F4263A25280
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09d437f2-a439-3d36-b4a8-2c961f4b576c.roa
Signing time:             Sat 12 Apr 2025 17:03:11 +0000
ROA not before:           Sat 12 Apr 2025 17:03:11 +0000
ROA not after:            Fri 11 Jul 2025 17:03:11 +0000
asID:                     18779
IP address blocks:        142.252.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:e7:39:8e:6d:d5:1f:42:63:a2:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 12 17:03:11 2025 GMT
            Not After : Jul 11 17:03:11 2025 GMT
        Subject: CN=506a6fec-65c8-4984-af0e-efb6268f680b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d1:4b:60:5d:a1:ef:9d:26:8c:12:c0:a8:c8:
                    15:b2:f0:1c:db:19:34:87:4d:22:96:a3:0d:f8:72:
                    84:ef:60:98:7e:3f:ae:53:0f:48:42:d7:20:88:5d:
                    b1:90:73:31:0f:36:36:1c:84:63:b9:b4:37:dc:e7:
                    43:cd:0d:95:9a:2c:0e:37:7a:15:a8:7c:a6:3e:83:
                    84:3d:a0:a9:ba:87:86:4c:ac:74:93:c2:57:b3:2e:
                    c8:54:88:92:d2:5f:e7:03:ca:8f:4e:dd:96:34:1f:
                    b9:1a:db:b5:09:f1:4f:05:e4:f9:b6:d1:32:e4:ab:
                    b1:51:63:b6:f9:ee:25:85:75:a0:91:13:48:85:41:
                    96:f7:9a:2f:ef:2c:75:a1:c5:54:0f:85:05:e2:e1:
                    50:48:12:2d:cb:79:d8:35:26:d7:c6:45:5d:ab:81:
                    11:62:43:3b:99:d7:27:fd:a9:d5:dc:bc:ae:d5:c8:
                    39:c5:79:70:4a:d0:54:dd:9f:77:b8:44:10:1d:98:
                    a2:73:e6:75:7e:de:68:31:25:4e:d5:94:18:1b:53:
                    72:50:d8:82:79:98:a5:66:2d:0d:ee:a4:98:26:56:
                    94:58:bc:64:e5:fb:d7:0e:a7:a8:59:9c:5f:ed:48:
                    34:33:22:00:71:86:e7:53:36:94:d7:ba:60:1f:41:
                    63:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F9:98:4A:8A:5D:8A:31:46:80:BF:5E:87:94:2F:6A:C4:5C:0A:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09d437f2-a439-3d36-b4a8-2c961f4b576c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:c2:c0:e0:a0:bf:fa:ad:2c:f0:1f:58:43:45:a5:87:c4:0d:
         83:39:2f:40:22:e9:b2:5c:8b:7f:ee:a8:92:b5:9c:76:cd:48:
         76:1e:a9:63:c6:2c:64:a0:a7:67:60:72:0d:45:0e:8b:42:4c:
         90:9e:6b:d5:c3:d5:e8:8b:dc:48:8b:be:a5:f0:9e:ee:ae:0d:
         04:cd:7b:65:e8:10:e2:6e:28:64:91:91:d6:af:67:ec:c3:8c:
         44:d1:b5:66:fd:0e:5b:8c:e4:30:36:52:47:7b:ad:c4:56:ab:
         c5:d5:49:2f:f3:18:49:fe:55:b4:15:fb:5d:c2:cf:23:29:44:
         50:f2:96:32:33:1e:1a:e7:c1:8d:f0:5e:21:43:af:ac:0b:e6:
         49:74:6a:7c:08:9b:32:c2:72:58:e4:2a:f3:e9:7f:93:8b:5b:
         fc:7c:c7:e0:b0:85:87:b3:15:7a:0e:4c:80:0a:b3:65:92:33:
         e8:52:bf:65:40:59:6c:10:35:9e:a4:9e:f3:f1:b2:e2:b1:11:
         47:49:30:ca:e8:57:9c:d1:e4:4d:6e:c6:73:c5:ff:40:62:c4:
         97:61:34:a3:97:d3:4e:48:e2:96:be:73:33:97:f9:19:6a:a1:
         49:f8:5e:4c:5c:16:4c:38:2f:ea:66:55:7e:5d:5c:ed:99:d4:
         33:8a:9a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:12:41 2025 by rpki-client