Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/637ffaad-493a-387f-9213-a1686bb04fdc.roa
File:                     637ffaad-493a-387f-9213-a1686bb04fdc.roa (raw, json)
Hash identifier:          mKRRVqAWPpWnJHgA7zxfsa0TmHyWlvhmGFBkGODLUu0=
Subject key identifier:   43:B4:C9:5D:8B:79:BE:69:2D:73:13:AB:24:C6:97:8D:0D:D9:5A:C0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F3E48084EA9121C7530121260
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/637ffaad-493a-387f-9213-a1686bb04fdc.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     35554
IP address blocks:        142.252.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:48:08:4e:a9:12:1c:75:30:12:12:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=1338f718-8de7-4afb-9748-dda283be514f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d8:2a:65:3a:a4:01:b2:45:62:38:fe:6d:7a:
                    eb:5e:00:38:77:63:4c:75:02:a3:1d:9e:9a:f9:6a:
                    78:4c:8d:f1:11:ce:0a:1a:1d:8d:b2:99:b5:e6:4b:
                    92:0e:b9:55:d3:12:f0:16:47:a9:32:d9:4d:7a:4c:
                    48:ac:18:27:17:d1:91:70:ba:6c:7c:bb:be:1f:8a:
                    c3:80:55:28:ca:3b:e0:ee:76:37:27:d7:ed:a2:c9:
                    99:5a:6f:fb:71:46:df:4a:d8:cd:b3:02:a3:71:5b:
                    5c:f6:b2:8e:b4:af:62:51:de:d0:79:be:c3:a7:97:
                    7e:a0:a3:53:64:d4:d8:a7:0f:44:54:18:f7:c4:8d:
                    94:cf:27:25:53:80:20:ed:d4:e6:57:c6:42:54:43:
                    c9:10:fb:dd:aa:8d:14:06:8b:4f:53:48:38:c2:be:
                    e7:88:57:d7:06:9e:b7:95:d2:4f:57:63:de:11:6a:
                    6d:5e:07:68:43:9a:ed:a4:a3:f6:75:54:ab:10:08:
                    d4:f4:be:40:f2:de:7f:27:e0:34:b8:98:73:6f:e7:
                    aa:a4:c9:63:13:9c:14:46:f8:a1:cb:7a:26:6c:96:
                    3f:3f:d2:0b:b6:2d:bc:00:e5:25:5c:b2:9f:16:73:
                    a3:8e:15:9a:e9:d0:c0:70:2e:59:cf:49:cd:6b:2b:
                    b8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B4:C9:5D:8B:79:BE:69:2D:73:13:AB:24:C6:97:8D:0D:D9:5A:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/637ffaad-493a-387f-9213-a1686bb04fdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:dc:73:6c:2d:67:05:b7:1b:bc:d1:2d:40:8e:50:4a:e1:82:
         79:5e:7a:41:36:ee:f8:2e:19:b6:28:c5:0e:a8:b6:82:d5:a4:
         bb:e3:21:f9:8f:7e:31:e6:cf:ff:47:c0:cf:00:03:63:b1:20:
         fe:2a:01:a1:9b:c1:f4:ed:a4:f0:46:be:77:15:1f:1c:9a:05:
         9f:14:74:14:a7:ae:7b:f4:7a:97:59:5a:3f:99:ba:f5:6d:9c:
         24:62:25:8e:59:8f:a0:a7:83:2d:e7:af:05:63:fa:c6:8e:08:
         5b:17:ed:1a:02:0b:aa:b0:5e:d9:8b:de:26:1c:88:a2:b9:04:
         d9:87:f5:73:bf:a4:20:78:c9:b8:ba:62:ab:79:cf:3c:24:49:
         86:b8:59:7b:13:92:df:a1:47:68:ed:33:b3:d2:09:6b:2c:a4:
         62:da:07:d7:e6:1e:46:bc:d6:93:c8:88:33:35:3d:2c:f4:26:
         03:e5:31:42:be:09:52:32:cc:4d:e0:88:26:1e:fc:b9:f9:5b:
         17:2c:fd:17:dd:a0:51:05:6d:4e:d2:94:bc:90:fb:a6:a7:d5:
         9c:08:de:63:e3:aa:0b:ac:2a:43:8c:5e:82:a5:45:1e:c8:d2:
         cc:ec:d5:e0:c9:f4:46:52:d3:7d:44:8b:d2:4b:18:a6:69:ba:
         b7:d4:af:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:39:36 2026 by rpki-client