Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/14265259-5b3c-331d-9a37-f683944be1f7.roa
File:                     14265259-5b3c-331d-9a37-f683944be1f7.roa (raw, json)
Hash identifier:          pJW/XcneE3nRC444LVoYivw+/3qsQgz8jJH3g1xqIF0=
Subject key identifier:   59:4C:5F:3C:32:BC:DE:DC:F1:A1:7E:78:96:D9:F5:54:EB:05:95:23
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A7E7BA08EF668235B7B23B100
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/14265259-5b3c-331d-9a37-f683944be1f7.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     3257
IP address blocks:        142.252.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:a0:8e:f6:68:23:5b:7b:23:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=73faf84a-9cd2-4848-aa3b-50e1999a2bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:35:24:85:5e:8c:e5:6b:54:10:f5:b1:6a:73:
                    72:2d:f7:9b:e6:79:56:77:33:cf:0f:8c:88:0e:6c:
                    03:5a:42:94:17:10:85:5f:a2:ec:cf:f7:d3:75:ab:
                    c9:c8:4d:71:6d:07:8c:6e:4c:65:f1:c5:07:59:c5:
                    fa:0d:72:32:27:17:2b:c6:b3:0e:aa:ef:f4:82:54:
                    72:6d:cc:34:9b:17:9a:63:38:88:e5:72:72:22:83:
                    9c:c4:98:8f:36:21:20:d0:fa:e9:95:22:65:72:62:
                    5f:fd:87:b1:90:c0:df:0b:62:ae:21:b3:4c:8f:67:
                    40:a0:9c:4a:3a:71:60:04:84:7c:63:d3:87:16:33:
                    1b:00:da:20:6b:d9:e1:6f:bd:1a:e6:85:2d:e9:78:
                    cb:7f:ca:9d:dc:4a:9f:33:3e:1c:e0:ee:4f:ea:9d:
                    8d:39:04:fc:2f:df:b7:75:f0:04:7d:36:76:8f:0c:
                    02:a8:5a:85:b4:46:86:b6:5a:83:3d:83:f6:cb:22:
                    8a:f5:44:4f:89:93:ec:cb:b1:cf:1a:d2:4b:84:13:
                    b8:d4:51:38:bd:8a:69:d9:d4:66:36:67:8c:36:99:
                    0f:b6:ba:33:b6:61:d9:50:55:03:bd:98:be:b4:30:
                    bf:5d:ad:a8:cf:16:16:b5:f0:be:de:77:2c:58:ac:
                    c5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4C:5F:3C:32:BC:DE:DC:F1:A1:7E:78:96:D9:F5:54:EB:05:95:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/14265259-5b3c-331d-9a37-f683944be1f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:c8:59:9e:6c:2a:63:b7:39:76:b7:62:6c:cf:f7:e3:a4:be:
         f7:0e:0b:79:28:40:a8:eb:fb:05:ea:e4:3c:92:ec:e8:94:58:
         d3:fb:67:12:31:cd:b5:62:2c:45:28:b5:c9:bb:e7:9b:2f:f4:
         f3:af:3c:07:fa:0a:dd:ff:72:bf:eb:23:bd:56:fb:08:a8:8c:
         84:c1:31:e6:87:3d:bc:35:0f:d4:77:f0:49:90:5b:61:69:1b:
         90:88:ac:bc:e3:67:f8:cb:dc:7d:62:60:14:a3:92:7a:37:bc:
         11:73:ce:5b:57:28:b0:77:99:d2:a2:08:f4:61:a7:fe:e6:b9:
         bc:11:66:c0:25:b3:ab:48:53:45:8f:08:6a:75:ef:31:af:b6:
         d0:ac:41:85:f3:a8:72:69:68:f1:73:a7:d9:1d:94:d8:5f:bc:
         bc:e7:09:c6:b2:04:6b:48:88:17:45:02:b4:02:88:6e:8d:0c:
         76:98:57:1a:9e:14:5b:b1:2d:7c:01:ab:40:52:86:34:1e:26:
         86:25:bd:12:70:78:38:4c:89:b4:b8:a7:3d:fb:a8:84:81:1d:
         55:a7:63:19:df:38:dc:18:61:e6:1e:34:7b:19:c7:8f:e1:69:
         3e:37:a0:38:bf:86:f4:ea:53:36:a3:43:6c:79:5b:db:64:24:
         84:0f:5d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:33:09 2025 by rpki-client