Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4a8881ea-cc32-3553-98a4-29aa9f8820ae.roa
File:                     4a8881ea-cc32-3553-98a4-29aa9f8820ae.roa (raw, json)
Hash identifier:          TfAPrwqfyHriy4CIOvCtYixV/USflwCw0d/FFY04NC4=
Subject key identifier:   BA:A0:A5:45:EC:B6:29:B2:CD:DE:1F:5E:DF:B7:E8:7D:D0:6E:0E:BE
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858499F24BD533943861B6087EC00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4a8881ea-cc32-3553-98a4-29aa9f8820ae.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     5650
IP address blocks:        142.252.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:bd:53:39:43:86:1b:60:87:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=b446d28b-1249-4b03-b665-6a41cff50455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:90:77:73:fd:b5:17:22:ce:91:98:09:17:7e:
                    69:be:ac:93:7f:f6:65:d9:24:db:ec:71:30:5a:d4:
                    96:f9:a5:85:d8:5a:76:47:fa:6e:74:c7:82:17:d3:
                    d1:a0:bf:3c:5c:00:f2:3f:3a:a2:6f:5b:11:87:2d:
                    7c:d5:b3:f4:9b:75:93:78:14:34:5b:2d:e7:c9:fd:
                    e0:7a:d4:8e:57:b9:3c:4c:b8:89:62:24:af:cf:8f:
                    a1:ab:bb:c3:bf:85:c0:08:a3:30:fd:08:b1:ab:75:
                    ec:8e:78:76:5d:62:7a:e2:fe:ca:98:a2:a6:96:b1:
                    06:b9:61:75:f3:d6:d5:57:8d:01:e8:2f:4d:c1:85:
                    eb:de:1f:0b:4d:2f:14:3c:c3:92:be:1c:dc:f3:7d:
                    48:bd:a3:0a:b5:88:b9:14:30:be:68:84:0c:1d:87:
                    db:6e:49:f7:83:85:06:42:39:84:d5:e6:b4:37:3d:
                    e2:6f:76:62:c3:81:78:f3:7c:42:a4:ac:32:cf:88:
                    f3:49:1d:f9:82:93:80:2d:0f:11:fa:b0:a0:ef:e7:
                    ce:c7:f8:08:79:5e:a2:5e:5d:27:cf:05:de:0f:a8:
                    cf:3f:06:e8:fb:f6:ce:d6:90:c7:4d:14:1d:07:bb:
                    e1:c7:8c:fc:ef:5c:eb:99:06:59:23:68:fe:32:da:
                    db:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A0:A5:45:EC:B6:29:B2:CD:DE:1F:5E:DF:B7:E8:7D:D0:6E:0E:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4a8881ea-cc32-3553-98a4-29aa9f8820ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:61:21:34:87:85:6a:4d:de:b2:59:db:4c:48:5b:44:8d:5b:
         f2:ca:76:f3:c9:46:53:3a:20:77:bb:09:10:38:25:b1:c1:00:
         b1:a2:91:76:6a:2e:a3:7b:e5:ac:31:29:93:57:85:08:59:79:
         48:bd:cf:51:79:27:12:b8:47:36:c7:1c:0b:2e:fd:40:71:fe:
         32:b6:06:1c:5f:51:5d:82:66:b3:69:15:2a:28:a9:f5:de:6b:
         9e:b4:fe:9f:af:7e:e2:e3:b6:79:e0:57:17:d0:3f:2a:13:74:
         0a:5a:24:fd:47:58:e5:66:43:ee:d5:ac:7a:ea:a7:7e:3e:58:
         68:33:3a:99:47:ad:4c:d2:1e:39:89:e4:5f:3b:b9:9c:7d:54:
         82:01:53:69:c8:a5:c9:a0:19:91:28:25:43:cc:c4:b2:8a:07:
         07:76:4c:8a:27:dc:b8:08:fe:d0:39:62:c3:df:c2:ae:12:06:
         b5:2a:1d:ea:47:09:c0:35:22:8d:53:1b:88:69:d6:0a:a0:48:
         49:62:bb:0d:03:62:6b:d1:e1:4b:ed:a3:ea:93:81:ea:7a:5f:
         0d:f1:ba:db:64:b6:55:19:05:5e:bc:b6:7f:04:01:dd:9c:e9:
         0a:f5:8f:e6:7d:6e:6b:22:d3:8c:10:03:37:ba:7c:43:6e:09:
         bb:c8:8a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:23:16 2025 by rpki-client