Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/935ef5b8-ae10-378a-b09e-aa48aa9809dc.roa
File:                     935ef5b8-ae10-378a-b09e-aa48aa9809dc.roa (raw, json)
Hash identifier:          eP1frrvJzdMiSgDFHGBAoLyIztPIy16TB/jackUZ+K0=
Subject key identifier:   56:70:73:3F:DB:3D:32:28:2A:6A:0C:D7:F1:E1:6A:83:63:EF:24:D9
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A94D0E065AA39A9F167815580
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/935ef5b8-ae10-378a-b09e-aa48aa9809dc.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     62240
IP address blocks:        142.252.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:e0:65:aa:39:a9:f1:67:81:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=0ce4daf0-4966-44d8-8106-e82648fd8d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b9:c7:ef:f9:cf:0d:8f:fe:ee:ac:d8:af:6f:
                    8e:92:6e:7f:6a:3c:0c:6c:16:12:3b:52:18:bc:7f:
                    9c:4c:d1:6d:74:43:9a:bd:d5:98:b4:08:76:cd:13:
                    5b:91:c5:86:7c:d5:4d:f1:db:7e:30:0c:c7:a9:74:
                    6e:4c:01:22:93:cb:e0:f3:da:93:45:26:d1:e8:81:
                    08:a0:62:7c:76:4e:d1:64:0c:ea:48:fd:39:84:4c:
                    5b:02:e4:e1:57:f4:fa:55:c8:82:f6:43:a9:be:d8:
                    84:09:c9:c2:ab:10:cc:fc:a5:7f:a8:f0:da:a9:b3:
                    e8:7b:b3:f8:42:7f:b2:7b:e7:d3:10:db:cd:a7:56:
                    21:21:62:6d:ef:8d:b9:1e:bd:65:c9:f9:5d:01:d8:
                    5b:ef:4a:3d:c3:dc:c5:0c:e0:de:d2:7b:4e:05:f1:
                    3e:33:ac:51:38:1e:4e:4f:01:45:22:17:0e:4b:3a:
                    06:f5:17:f9:c3:96:dc:6b:d2:48:17:a5:5a:2f:b8:
                    e1:90:4e:69:c7:80:14:09:3b:79:73:f4:dd:12:9e:
                    56:20:c2:f7:6f:50:85:68:6c:84:c2:10:9e:fa:de:
                    0b:a3:93:2b:44:fb:f2:ee:8e:85:72:f9:1c:69:a8:
                    bd:8f:e2:7e:79:26:82:fc:e3:80:8a:e5:9d:4f:b1:
                    f7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:70:73:3F:DB:3D:32:28:2A:6A:0C:D7:F1:E1:6A:83:63:EF:24:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/935ef5b8-ae10-378a-b09e-aa48aa9809dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:e3:d4:7d:60:70:6e:e3:9b:9e:0f:9d:38:4f:76:da:77:10:
         a6:f5:2c:06:3a:d5:8a:a7:6c:87:44:c5:8b:db:88:f1:be:f8:
         57:7a:98:6e:61:e5:0d:6c:8b:cc:11:7a:a0:23:c5:90:85:70:
         ef:36:5f:00:35:56:30:69:f9:00:4e:5d:ab:60:db:ab:53:82:
         de:a2:28:7b:00:8c:5e:84:db:6b:42:82:1d:d1:18:d2:71:41:
         03:be:e6:3b:5b:5f:bb:16:d6:02:98:37:4e:66:f9:8d:b0:cb:
         0c:16:de:a0:ca:2c:d1:73:0b:1d:8f:b0:d2:46:a2:46:cc:18:
         40:c8:c9:30:40:0d:9b:bf:50:8f:20:90:d0:e0:eb:4c:3d:fe:
         d0:5f:27:47:ab:0c:f0:a9:1c:7c:24:d8:b2:04:9b:43:d9:35:
         c7:b2:2d:e5:23:d6:da:b7:29:c9:b5:5f:be:9b:45:86:10:ff:
         18:55:d6:55:5e:f2:61:dc:20:75:2a:23:6b:bd:3b:45:5b:e9:
         66:8b:10:43:a5:ea:77:79:d5:40:9f:b7:2b:83:e3:e4:77:0c:
         a9:77:fc:0f:23:b1:81:7f:c1:9d:14:8f:45:ee:15:d8:37:ad:
         dd:dd:50:50:75:74:16:1b:77:53:9a:73:35:0b:d0:0b:8e:90:
         69:c5:52:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:54:56 2025 by rpki-client