Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8b195ddf-367b-3b5e-8794-3ddeb9e18a58.roa
File:                     8b195ddf-367b-3b5e-8794-3ddeb9e18a58.roa (raw, json)
Hash identifier:          foi28/O4v9Uvzw2nFofm9yQNQAhk37gpR8AImDWwu3c=
Subject key identifier:   3E:83:84:93:69:75:2D:20:FD:20:4B:6F:47:93:D7:D3:3A:3A:0C:AA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858498E1CDE0BF3D37BF2F673B8A0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8b195ddf-367b-3b5e-8794-3ddeb9e18a58.roa
Signing time:             Thu 17 Apr 2025 10:36:46 +0000
ROA not before:           Thu 17 Apr 2025 10:36:46 +0000
ROA not after:            Wed 16 Jul 2025 10:36:46 +0000
asID:                     18779
IP address blocks:        142.252.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:1c:de:0b:f3:d3:7b:f2:f6:73:b8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 17 10:36:46 2025 GMT
            Not After : Jul 16 10:36:46 2025 GMT
        Subject: CN=8098b710-b601-48bc-8a49-3c977db32178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:eb:55:50:73:87:59:d0:a4:f7:fe:9b:37:10:
                    d2:98:be:da:fe:96:2e:b7:3a:d0:a9:0a:0f:5d:d3:
                    b2:17:f5:40:d2:65:55:56:1e:08:40:8a:36:f6:3f:
                    13:a9:35:f7:4e:6b:8e:71:78:3b:08:f8:9b:4f:62:
                    05:73:06:26:65:30:33:42:72:d9:54:c4:7f:67:f5:
                    1a:74:9e:1e:03:1d:e7:19:6d:c3:ba:f5:0d:28:88:
                    83:28:71:e8:89:4a:99:79:9a:46:1a:28:85:70:36:
                    05:dc:70:3a:e5:4a:4f:dd:ad:4d:30:15:4d:45:35:
                    fd:8b:5e:d5:2d:8f:97:0d:da:cb:7e:75:f1:10:19:
                    31:d9:e3:95:74:51:37:fa:ef:6f:f5:6a:8c:48:62:
                    d6:c3:ee:ae:55:b7:2a:1e:a6:3a:7c:2a:56:24:98:
                    c6:45:77:7c:75:9c:89:af:76:db:ba:ee:6d:bb:ba:
                    99:7c:40:66:db:50:b4:32:91:9f:7d:cb:91:fa:4e:
                    ea:0c:f5:bb:8a:66:1f:d8:c0:90:af:a6:d3:d1:38:
                    29:69:fa:0d:3c:ac:ea:67:4b:33:5c:40:25:7c:61:
                    fb:a5:53:31:70:4f:24:f4:f6:14:bf:db:99:ed:3f:
                    9d:75:b8:03:5c:0f:2c:86:a2:63:8c:e9:f2:c5:2b:
                    9e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:83:84:93:69:75:2D:20:FD:20:4B:6F:47:93:D7:D3:3A:3A:0C:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8b195ddf-367b-3b5e-8794-3ddeb9e18a58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:aa:08:fe:60:a9:f0:65:bc:27:f4:2c:22:5c:78:19:c5:9b:
         7b:11:30:41:27:fb:79:03:a7:d3:e4:fe:e3:f3:81:80:34:cc:
         0d:10:f7:58:c6:6f:17:cc:ea:4a:3e:60:74:c4:ac:b9:09:8d:
         51:20:61:aa:9c:97:6b:b9:eb:a3:cb:30:c8:d0:89:b5:73:fc:
         17:ec:17:1b:46:79:c2:6a:99:37:3e:88:30:7d:62:f8:bc:69:
         88:34:18:fc:27:95:e3:b9:eb:21:a6:84:67:b5:4a:6d:f3:11:
         33:bc:7a:df:5c:a9:bc:4e:51:ce:39:2a:2c:70:f8:40:ef:93:
         f5:52:2f:cf:0d:82:da:e8:52:14:83:09:50:f1:b9:bf:e1:bf:
         77:8a:c9:b3:2d:eb:d0:28:b4:87:b6:f9:c8:f3:f6:57:8e:ca:
         e4:20:55:a9:30:f0:d0:a2:30:13:82:bb:d9:cc:bb:ea:26:bf:
         0e:c1:e9:8b:4b:ea:fe:9d:21:fe:e9:4a:0a:15:bb:27:46:09:
         d6:19:a6:94:0c:ec:87:be:d1:7e:e2:4c:20:84:cd:0d:6e:ac:
         05:7d:8d:d1:98:4e:99:6c:b1:3e:4b:15:c8:0b:0d:de:51:26:
         4f:74:8f:69:36:56:5a:c2:03:4a:8f:6e:4d:fb:e6:02:9a:20:
         16:2d:37:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:54:35 2025 by rpki-client