Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/38f48824-5614-3523-b565-6ded65ed24c0.roa
File:                     38f48824-5614-3523-b565-6ded65ed24c0.roa (raw, json)
Hash identifier:          2Fb40XO81ctbdOpCYG7VikSkOM6DdkoqKrhNPOnD6ws=
Subject key identifier:   F8:54:32:FE:D4:9D:D1:08:D5:D4:66:2B:22:34:0F:4A:34:5B:5B:87
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A7E7B7D9A01C6743FB308B900
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/38f48824-5614-3523-b565-6ded65ed24c0.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     3257
IP address blocks:        142.252.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:7d:9a:01:c6:74:3f:b3:08:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=caef48e6-513d-443e-b057-1c3170c6c3f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6b:ee:93:4a:0c:67:10:53:d9:63:1c:33:d1:
                    3f:c8:db:ab:07:d7:f2:be:14:76:0e:ff:f6:d8:2d:
                    2f:ba:54:0c:31:96:e7:8a:c7:87:4d:d6:31:21:ab:
                    8e:3c:c4:76:85:12:e2:ef:a7:13:0d:0d:6a:5d:0c:
                    99:d5:37:88:04:f4:f2:59:e3:d1:10:ff:78:10:de:
                    49:7b:40:b9:e0:e8:b8:ee:74:a9:9a:2a:3d:3f:e9:
                    0b:22:35:58:76:53:9b:95:fc:87:5a:85:e5:b8:7b:
                    37:30:cd:4c:44:66:3e:49:5f:71:b8:f3:59:02:ca:
                    ef:f4:3f:f4:ff:5b:c8:30:e5:b5:c6:8f:92:36:81:
                    59:bc:af:9a:2f:cc:ea:22:70:79:bd:62:5f:8a:b0:
                    4e:d4:af:4c:4f:da:9c:a2:08:30:70:89:d1:4a:73:
                    59:dc:df:42:b5:5c:d6:56:ae:20:b5:d5:d5:f1:b4:
                    c1:83:56:dd:5c:08:4a:ce:c7:d1:21:28:25:74:f2:
                    8d:17:47:6a:a9:84:d6:c8:a9:22:c5:72:87:f7:f4:
                    b1:79:bb:0b:d2:52:b8:1e:0c:0d:ba:2b:f3:26:05:
                    fe:b6:bd:35:3c:54:5e:e7:48:d7:55:cf:67:f1:a5:
                    20:1d:59:b9:63:3f:3f:9b:09:8a:74:e8:81:99:c7:
                    0f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:54:32:FE:D4:9D:D1:08:D5:D4:66:2B:22:34:0F:4A:34:5B:5B:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/38f48824-5614-3523-b565-6ded65ed24c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:bf:29:40:99:32:60:52:8e:f0:35:72:18:63:78:cc:cf:cb:
         35:62:04:51:aa:a4:21:b6:69:9d:8c:a8:08:24:a9:41:3b:e5:
         8e:af:d5:a2:86:b0:fd:c2:ca:28:f5:a6:5e:04:ab:90:3e:52:
         01:a8:22:0a:9d:5b:c3:20:b5:71:0a:c3:36:90:7f:47:40:36:
         40:95:2f:d5:5b:4d:ff:69:7c:3b:9c:3d:ee:30:e5:d1:cb:e7:
         cd:a6:a6:41:d7:7e:29:cf:49:77:86:05:48:ad:50:63:da:dd:
         bc:18:48:3b:1d:7a:85:6f:ad:da:7d:e4:52:b9:ff:2f:17:d5:
         a6:0b:38:b6:65:0c:81:fc:1e:be:e7:29:45:d4:10:31:c1:e7:
         91:d0:13:38:d3:e8:0b:16:cd:78:14:ea:51:e1:8d:a9:b0:95:
         a8:5d:cb:b1:a4:3c:f8:49:3d:19:ee:e5:62:ce:1d:ae:17:70:
         25:b2:84:e9:24:8f:63:6a:03:9e:34:b0:27:52:cc:8c:b6:8b:
         8d:eb:89:f3:d0:31:ed:ad:1a:0e:6b:7c:46:cf:5e:e5:fe:ff:
         fb:77:c3:11:54:43:9b:a4:15:95:33:77:33:03:8d:73:0b:78:
         77:32:a4:12:ad:5b:7a:19:ec:80:81:98:cd:ed:b0:d3:89:27:
         6f:e4:5f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:37:32 2025 by rpki-client