Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0b530622-c673-368e-9559-bd2217b99093.roa
File:                     0b530622-c673-368e-9559-bd2217b99093.roa (raw, json)
Hash identifier:          C82jZ5YMtNGXkdd6ooS9qLVlcRW1CAq8xIJN98faDho=
Subject key identifier:   64:C4:93:FF:55:08:48:32:51:54:27:57:03:2C:55:0E:9F:FA:00:CE
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F6C5850D2AB58B732E370DC80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0b530622-c673-368e-9559-bd2217b99093.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     19318
IP address blocks:        142.252.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:50:d2:ab:58:b7:32:e3:70:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=657131f0-c204-4cbe-9768-4e1d387d3970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:79:a9:13:cc:95:5e:d0:38:d9:45:a8:f2:38:
                    22:33:f1:62:81:78:60:12:4a:27:4c:64:19:ba:f9:
                    4f:3a:26:ef:6d:94:31:69:ee:46:2a:f4:17:dc:ed:
                    78:c9:05:6c:94:77:9a:06:4d:50:cb:2f:3f:15:ed:
                    b3:c9:f0:e8:5e:33:b6:5d:20:67:f3:1c:81:99:64:
                    1f:77:2c:ec:e7:9b:93:b7:8f:9d:0a:af:ee:8d:43:
                    e6:12:e6:dd:f0:f0:81:38:74:de:b2:4e:8e:aa:f4:
                    24:dc:d3:7e:ce:1f:57:c3:c9:af:b9:83:d3:57:38:
                    6f:bb:24:82:2a:02:15:3e:fe:68:e5:58:a1:e3:1d:
                    fd:40:40:15:47:43:24:fa:ca:e3:ec:1c:85:e9:ef:
                    9d:5a:ff:b0:14:60:30:7d:1a:f2:80:2a:45:1d:62:
                    8a:82:44:80:ad:e7:9d:de:06:9a:e9:d9:12:b4:01:
                    d2:64:a5:97:ed:dd:4a:ab:f3:9c:64:0f:b7:14:31:
                    25:c8:b9:c2:ae:c7:1e:f8:0d:73:14:eb:94:34:63:
                    62:1e:8f:13:af:11:db:45:5f:3b:6a:20:72:dd:4b:
                    49:e3:b7:09:71:bd:67:95:d9:da:07:9b:a3:6c:81:
                    27:6c:bb:ed:fc:05:1a:7f:f0:c0:a1:a5:59:13:1e:
                    8a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C4:93:FF:55:08:48:32:51:54:27:57:03:2C:55:0E:9F:FA:00:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0b530622-c673-368e-9559-bd2217b99093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:5d:ae:4a:a5:9c:8b:09:2f:a4:41:f1:be:0c:ab:e4:94:e6:
         4c:f1:d5:cf:77:3f:d5:76:fb:c5:17:0e:19:e1:1e:35:00:58:
         60:14:e3:01:47:7b:76:8e:78:6f:4f:12:a3:2b:35:f1:b9:a0:
         02:11:7a:5b:a5:ce:e0:da:20:6e:1d:98:f9:8e:53:c0:5e:b1:
         90:f8:69:dc:c5:5c:9a:e0:5b:55:73:e9:ca:77:9f:b9:b4:c3:
         9d:7e:97:89:e1:a3:a5:bb:f2:19:80:96:20:f2:9c:d1:d6:48:
         03:b7:98:ec:91:87:cd:c3:88:d6:ad:28:c0:7f:ec:92:77:0f:
         8d:95:0d:69:6c:e9:91:07:37:ef:cb:34:74:53:e0:3e:36:7a:
         c0:f9:f3:a5:29:ce:ae:67:df:c8:9e:66:70:e6:b2:ae:5a:04:
         35:2d:8a:cb:85:a0:c5:e4:98:fd:9d:48:5b:60:5d:e4:c7:7e:
         c2:1c:8b:13:1b:b0:f1:f9:79:f6:04:1a:3b:45:92:05:94:26:
         13:bf:a4:3e:71:27:ce:c0:e6:81:6b:3c:67:4d:b7:84:9b:cd:
         07:43:55:1e:e4:50:bd:2e:09:b8:68:fc:30:18:a6:5e:98:48:
         bd:c8:06:9f:20:5b:73:b7:10:d1:0b:8d:91:75:e6:ab:d2:0a:
         1a:6c:b0:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWFDSq1i3MuNw3IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk
NjU3MTMxZjAtYzIwNC00Y2JlLTk3NjgtNGUxZDM4N2QzOTcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nmpE8yVXtA42UWo8jgiM/FigXhgEkonTGQZ
uvlPOibvbZQxae5GKvQX3O14yQVslHeaBk1Qyy8/Fe2zyfDoXjO2XSBn8xyBmWQf
dyzs55uTt4+dCq/ujUPmEubd8PCBOHTesk6OqvQk3NN+zh9Xw8mvuYPTVzhvuySC
KgIVPv5o5Vih4x39QEAVR0Mk+srj7ByF6e+dWv+wFGAwfRrygCpFHWKKgkSAreed
3gaa6dkStAHSZKWX7d1Kq/OcZA+3FDElyLnCrsce+A1zFOuUNGNiHo8TrxHbRV87
aiBy3UtJ47cJcb1nldnaB5ujbIEnbLvt/AUaf/DAoaVZEx6KTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGTEk/9VCEgyUVQnVwMsVQ6f+gDOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMGI1MzA2MjItYzY3My0z
NjhlLTk1NTktYmQyMjE3Yjk5MDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvx0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABBdrkqlnIsJL6RB8b4Mq+SU5kzx1c93P9V2+8UXDhnhHjUAWGAU4wFH
e3aOeG9PEqMrNfG5oAIRelulzuDaIG4dmPmOU8BesZD4adzFXJrgW1Vz6cp3n7m0
w51+l4nho6W78hmAliDynNHWSAO3mOyRh83DiNatKMB/7JJ3D42VDWls6ZEHN+/L
NHRT4D42esD586Upzq5n38ieZnDmsq5aBDUtisuFoMXkmP2dSFtgXeTHfsIcixMb
sPH5efYEGjtFkgWUJhO/pD5xJ87A5oFrPGdNt4SbzQdDVR7kUL0uCbho/DAYpl6Y
SL3IBp8gW3O3ENELjZF15qvSChpssME=
-----END CERTIFICATE-----
Generated at Mon Oct 12 07:28:35 2026 by rpki-client