Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7c85a85b-cedb-3042-9951-a167607c14ca.roa
File:                     7c85a85b-cedb-3042-9951-a167607c14ca.roa (raw, json)
Hash identifier:          jYNOo5AVXDXqpgo7kYJ0JUkMkPBqkxO0U/4uC7x2MlE=
Subject key identifier:   99:F5:CD:94:57:98:30:68:BF:A0:38:5E:93:6E:86:ED:5F:01:2F:BF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584980E72122E9C7BCD4E1603480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7c85a85b-cedb-3042-9951-a167607c14ca.roa
Signing time:             Sat 12 Apr 2025 17:02:59 +0000
ROA not before:           Sat 12 Apr 2025 17:02:59 +0000
ROA not after:            Fri 11 Jul 2025 17:02:59 +0000
asID:                     18779
IP address blocks:        142.252.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:e7:21:22:e9:c7:bc:d4:e1:60:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 12 17:02:59 2025 GMT
            Not After : Jul 11 17:02:59 2025 GMT
        Subject: CN=45d19138-1b93-4534-b7e8-7fdc6693f50f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:78:f1:3e:4a:d6:6a:4c:2c:b1:85:c9:30:e8:
                    e9:9b:bf:08:8b:fd:5e:72:3f:91:e1:84:c7:7c:6c:
                    d8:fb:2c:29:aa:a4:87:8d:f3:86:ac:ef:24:f7:46:
                    c7:33:3f:9b:8e:01:54:e5:e5:0e:92:8c:3a:02:e9:
                    dc:23:5a:6e:34:2e:fd:72:71:e5:89:4a:8f:bb:d3:
                    bc:dd:eb:96:a2:a0:ab:ff:fa:e4:0a:9e:d4:b6:a4:
                    83:6f:9e:b9:33:75:0e:a5:f7:59:04:4f:13:12:16:
                    8a:fc:d9:9f:4b:86:55:e4:af:93:09:c8:f4:62:d2:
                    70:d8:dd:58:65:70:64:10:7a:48:c1:39:bb:59:48:
                    d2:d6:d1:d8:08:3e:a9:25:6b:77:d3:4e:7d:78:ca:
                    2b:70:97:c5:36:8a:0c:67:e4:fb:1d:67:3f:ce:5b:
                    39:47:5c:b6:92:e7:09:40:89:f0:76:3b:49:a9:d1:
                    57:16:28:c3:0f:19:8c:46:0f:29:88:b6:2c:4b:73:
                    5b:37:05:49:c9:b9:b0:95:06:d8:75:0b:78:b8:52:
                    36:bd:dc:33:d0:21:59:50:51:c3:e3:93:8b:bd:40:
                    6c:0e:9a:fc:e0:dd:81:92:ef:d0:fa:ec:b2:d8:32:
                    73:cf:15:6a:96:7d:38:9e:2a:3e:2b:ec:2a:a2:cf:
                    f2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F5:CD:94:57:98:30:68:BF:A0:38:5E:93:6E:86:ED:5F:01:2F:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7c85a85b-cedb-3042-9951-a167607c14ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:93:ff:b0:24:61:ff:4a:72:13:b3:62:fc:c3:b3:4a:c1:1f:
         d7:55:7f:77:ff:9c:f6:98:3c:ba:07:b2:24:75:ae:d7:26:ed:
         f9:50:31:9f:01:32:b2:b5:a3:41:dd:bb:0e:38:9a:c2:07:cd:
         2b:84:1c:33:09:f3:a5:3f:28:ff:47:d9:7e:e9:b4:d9:19:c7:
         c2:62:24:8a:8f:d1:f9:1f:a6:78:c4:0d:b0:e6:a1:22:b5:81:
         f0:c7:ff:17:8f:94:d8:c4:06:30:0a:84:75:58:b9:b0:87:db:
         de:a9:d0:cc:55:1a:7c:eb:f4:1c:c8:37:67:92:53:d9:59:ea:
         80:08:4c:e0:f9:8a:5d:5e:66:1b:c8:76:1f:b6:be:ca:f6:25:
         af:9f:59:ff:f5:fc:eb:77:b3:9c:56:a6:fb:c9:f7:c8:34:74:
         31:6a:b0:4d:17:c8:47:c9:cd:f5:4b:95:5c:fa:bf:c6:ea:20:
         d7:b5:69:15:59:0b:ff:14:36:20:90:77:50:0a:44:9c:20:12:
         cd:ae:e1:aa:8a:5c:de:e5:6a:04:c0:c8:6c:76:90:8b:8c:f1:
         8a:6d:a1:ad:2e:ae:bd:b4:44:dc:cc:34:b0:c5:b7:4e:45:c7:
         8f:3e:00:e6:18:d9:be:ca:51:ad:83:00:5a:d2:95:14:65:b3:
         a4:e1:dc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:18:51 2025 by rpki-client