Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/15ee388b-5dd5-3b2a-80df-da556b9ef759.roa
File:                     15ee388b-5dd5-3b2a-80df-da556b9ef759.roa (raw, json)
Hash identifier:          wTbpc+7iJd8bihWzWxLqrdaSxaaOJZ/5fBf8esO9lBI=
Subject key identifier:   51:D3:35:85:A4:94:6C:1F:FB:C7:E6:85:27:2F:C2:7C:C9:A5:7E:47
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584980E5609686617D393DEED280
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/15ee388b-5dd5-3b2a-80df-da556b9ef759.roa
Signing time:             Sat 12 Apr 2025 16:59:28 +0000
ROA not before:           Sat 12 Apr 2025 16:59:28 +0000
ROA not after:            Fri 11 Jul 2025 16:59:28 +0000
asID:                     18779
IP address blocks:        142.252.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:e5:60:96:86:61:7d:39:3d:ee:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 12 16:59:28 2025 GMT
            Not After : Jul 11 16:59:28 2025 GMT
        Subject: CN=b15bd2d5-202b-48e5-b54d-69b7ca743dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:79:b6:20:1b:f8:6d:85:7e:1a:b6:39:39:3e:
                    f5:24:a6:dc:5d:92:15:48:49:f0:bd:73:9c:a8:52:
                    6e:3c:d6:f1:09:b1:7c:f3:57:32:04:33:ff:c8:07:
                    a5:d9:c7:81:dd:e5:32:34:60:99:8c:c9:22:99:f7:
                    b6:46:9f:26:58:f7:e5:2a:ef:8a:cd:b1:c0:bf:6b:
                    57:44:86:f2:63:68:90:05:5f:66:ac:b5:ce:53:48:
                    a4:4f:1d:6e:6e:92:fb:c2:4f:90:74:43:90:20:ed:
                    95:7e:b9:e0:04:fe:d9:03:ce:0a:1f:6a:b3:06:b3:
                    81:9c:0a:55:c1:86:13:c9:b3:e7:c9:04:af:f5:fd:
                    4a:56:8e:7f:78:85:f5:0b:f0:87:fa:fb:60:18:1e:
                    3c:b7:96:04:7e:f0:27:30:79:50:07:46:ab:7a:6f:
                    fa:70:09:bb:aa:09:4d:fe:63:50:2e:88:e1:7a:9a:
                    d1:5a:26:41:5b:eb:3f:06:82:59:d6:ec:c4:48:2e:
                    92:55:99:fd:44:36:ca:3f:9f:da:5b:f3:a7:b5:2e:
                    a9:9e:68:9b:44:cd:b2:2c:18:54:b8:d4:cc:43:d6:
                    36:a6:60:92:b1:d9:f9:8b:ca:66:65:12:19:3e:22:
                    0d:bc:e4:2d:24:b8:45:6a:4c:eb:40:1a:30:18:70:
                    21:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D3:35:85:A4:94:6C:1F:FB:C7:E6:85:27:2F:C2:7C:C9:A5:7E:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/15ee388b-5dd5-3b2a-80df-da556b9ef759.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:b8:30:cd:e0:4f:4d:75:e9:ab:0e:a6:34:f2:35:ef:e7:d4:
         26:9e:5b:53:eb:63:32:24:6c:c0:07:0b:45:94:96:14:16:65:
         2a:a5:d9:02:0f:3c:b3:3c:d4:c7:ae:65:9a:57:5f:15:c7:0a:
         ca:22:57:40:7f:20:8b:f9:19:95:15:1d:d1:59:b2:17:e5:ac:
         b6:f6:39:3e:76:81:d3:63:06:8b:7d:77:63:2d:de:35:72:39:
         43:a7:85:ff:67:6b:43:f6:bd:e6:10:b7:90:85:e6:03:ee:46:
         a7:25:ef:85:8b:0f:4a:3b:a6:68:42:e3:e9:f5:8b:99:d4:25:
         8f:bd:25:90:63:53:b1:9c:5f:73:41:16:2b:72:94:9d:7a:25:
         b7:82:db:e7:68:79:6a:5a:38:c9:f5:33:cb:8d:93:2b:cb:21:
         84:46:a3:de:bb:b3:d1:ba:01:85:92:22:1d:ce:ee:71:9f:36:
         b9:c1:58:d6:6c:a8:79:d2:3b:21:4d:2b:20:0c:17:76:12:19:
         6e:3f:b6:c4:17:fe:f6:8b:9f:31:af:10:9f:51:e3:ca:e3:81:
         1e:38:92:7d:ef:e6:85:89:28:62:cb:5e:74:12:62:d2:d8:af:
         1e:c9:a9:c8:63:00:9a:2e:bb:ee:05:5d:a8:c4:37:64:ec:e8:
         32:82:25:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:57:05 2025 by rpki-client