Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9ca711e9-05b8-367c-abec-96212ba6e6f3.roa
File:                     9ca711e9-05b8-367c-abec-96212ba6e6f3.roa (raw, json)
Hash identifier:          8vuc/EyDtdUPHBLvWHo1cRGiOgxAcLdj5jv7dpFZlT8=
Subject key identifier:   64:93:6A:CE:C8:29:8E:B8:04:34:1E:64:05:C3:FA:1D:7A:25:67:16
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A8C70D6B8AA9324C91704F480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9ca711e9-05b8-367c-abec-96212ba6e6f3.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     10557
IP address blocks:        142.252.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:d6:b8:aa:93:24:c9:17:04:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=4fd9634c-479f-4716-a0bf-973cc854bb91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f5:cd:cf:9d:a9:64:60:e2:eb:df:52:17:4b:
                    a3:1f:d2:e5:36:23:54:58:bc:d9:60:bf:cb:05:75:
                    49:65:ab:c0:03:7e:a8:e4:66:e2:48:98:ad:a2:c1:
                    ce:ec:9d:17:76:43:88:7d:e2:98:6b:75:89:f3:8e:
                    37:3f:c2:8d:23:ca:f6:f0:3a:41:24:80:ac:0d:18:
                    8d:0b:68:94:34:fe:55:fc:9a:3a:ef:22:72:db:d1:
                    e6:e0:b7:d8:00:62:ae:27:04:9a:75:90:b2:79:86:
                    7b:6d:21:13:50:5e:3b:34:d4:a3:27:a2:60:f4:3a:
                    6b:c7:80:21:92:8c:4e:50:83:49:d3:b6:74:20:85:
                    17:05:44:c4:81:4f:1e:4e:1d:8e:c2:2e:41:72:6f:
                    10:e8:19:81:22:a0:24:5a:fa:6e:51:0a:52:ef:c2:
                    3a:c0:e9:9b:9a:ae:7e:f7:d5:c9:a0:06:3d:e6:74:
                    2b:68:a4:0e:e5:bd:89:84:c0:16:6b:6b:e5:48:ee:
                    37:b9:e9:16:82:c4:4a:0d:d5:8f:87:fc:01:c9:73:
                    66:95:51:97:9b:a2:f9:a4:d7:81:00:0c:22:05:63:
                    b4:d7:8d:d6:22:32:7c:97:de:8a:5a:c1:ab:05:09:
                    7f:19:02:62:e8:31:47:20:d5:f9:e1:ed:3a:5b:fd:
                    a6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:93:6A:CE:C8:29:8E:B8:04:34:1E:64:05:C3:FA:1D:7A:25:67:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9ca711e9-05b8-367c-abec-96212ba6e6f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:47:05:9d:fe:cb:ed:91:f9:8d:03:61:08:50:ef:8f:80:f2:
         ba:2e:5f:e1:90:c7:f2:4d:45:0e:21:9c:a9:88:96:c7:06:5a:
         0f:37:f4:c9:2e:43:de:b0:04:ae:1e:fb:cb:c1:92:12:8f:a8:
         f3:ab:7e:c4:54:e8:56:55:99:fc:01:ea:f1:a8:9b:1a:f0:36:
         5f:96:18:e6:53:25:05:c7:26:f7:0b:e3:9b:64:d8:c2:5f:ed:
         de:51:18:b2:fb:20:a5:c5:71:31:e6:04:6a:b8:75:d6:c8:93:
         fd:12:39:c2:c5:36:33:f7:3d:b2:fb:46:c8:cd:ac:63:34:8f:
         be:47:4c:02:40:4d:75:8d:04:b1:65:6f:c6:d1:fd:67:e1:2e:
         bd:3c:10:76:97:43:23:49:bf:f1:e4:ff:04:7f:30:0b:45:2b:
         d7:4b:62:23:1e:89:79:24:10:db:84:7e:bb:a3:81:b7:1e:8f:
         fd:a1:0a:27:d5:18:0a:f7:5c:69:16:34:9b:e9:e7:d3:7b:80:
         3b:11:38:8a:ab:3c:8f:15:83:c3:20:d3:bd:25:fd:2c:48:15:
         70:0b:a8:72:69:6d:66:e1:30:ac:5c:7e:83:6e:81:c6:62:ba:
         16:e0:4c:75:06:29:b9:10:88:f8:10:27:42:de:42:76:4c:38:
         a2:40:d1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:16:50 2025 by rpki-client