Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/67c9174b-e498-32f8-a077-d83c90681323.roa
File:                     67c9174b-e498-32f8-a077-d83c90681323.roa (raw, json)
Hash identifier:          C8Rg6Gl7QF3YI+e9BER4Ek7TuLs/4qzS1rD/fCav//I=
Subject key identifier:   C9:F0:36:31:50:61:E9:FD:87:15:08:B2:EA:27:28:78:7D:70:1E:6A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F3E48042F343A8595D28D0080
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/67c9174b-e498-32f8-a077-d83c90681323.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     35554
IP address blocks:        142.252.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:48:04:2f:34:3a:85:95:d2:8d:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=ebeb7bf4-779b-4e78-9509-f3245f2c8617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2e:33:19:ec:60:4d:ad:08:a2:a2:aa:34:8d:
                    76:e8:e2:ed:e6:7d:1c:cf:f9:5d:52:23:34:9f:42:
                    c1:1a:ff:f4:18:5b:85:3b:9b:a2:82:00:4b:58:c8:
                    15:da:c0:33:77:d3:1e:a4:b2:87:e7:de:a4:1d:19:
                    03:99:d1:4d:93:ef:89:25:99:ad:00:c4:02:60:81:
                    61:aa:db:d8:ec:36:02:05:a6:3b:a3:fe:23:f1:8e:
                    5a:84:ea:f6:fc:56:07:0a:33:0c:bb:1b:46:4a:83:
                    c0:21:e8:a5:d1:3e:02:38:06:24:4b:d3:2e:d8:51:
                    10:ba:a6:8a:ab:fe:95:4f:b2:9f:3f:45:ad:96:b1:
                    94:0f:04:6b:42:7b:25:1f:d0:ad:1a:20:18:b8:0c:
                    9a:5e:5f:32:3d:1e:51:1a:38:82:d1:ed:2d:67:c9:
                    31:e2:60:f6:fc:11:df:74:e0:7c:2f:fc:29:16:6f:
                    a8:87:d3:1f:eb:99:ee:bc:2d:7d:f4:cf:2c:6d:95:
                    d8:1d:cf:8c:fd:96:08:22:73:93:78:9b:5a:fc:5e:
                    1c:b7:ad:ca:b2:38:b5:b2:fc:6d:ed:99:20:c5:48:
                    1d:c5:e4:96:b3:df:89:97:20:34:34:b9:43:c5:0b:
                    bb:3b:ae:b7:37:78:f1:a8:53:28:0b:50:4e:83:3e:
                    40:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F0:36:31:50:61:E9:FD:87:15:08:B2:EA:27:28:78:7D:70:1E:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/67c9174b-e498-32f8-a077-d83c90681323.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ba:4d:03:5d:13:24:35:22:30:a4:44:88:6a:44:49:be:a9:
         89:44:57:49:51:7b:4a:67:02:52:02:76:8a:18:db:1f:b5:16:
         96:c1:87:4b:6d:6f:c3:9e:27:91:65:89:2b:5d:eb:e9:6d:bc:
         8f:ec:32:d1:fe:5a:99:c3:e2:06:29:af:5b:78:fb:c8:0f:cf:
         2c:61:0d:ee:cb:06:52:2a:6c:b7:ae:7e:8c:43:a7:96:a6:88:
         bc:eb:8b:c0:b4:60:c6:3d:d8:72:08:85:46:98:31:cf:41:21:
         55:4f:a5:07:ed:b5:c2:58:db:d2:26:a0:4c:da:b3:a4:22:40:
         76:7c:1d:0a:84:0e:c8:80:cf:39:f9:a7:74:cb:90:03:da:82:
         20:13:f4:b9:cb:45:11:23:31:d0:20:13:de:fe:6a:ff:df:47:
         0f:f5:e1:cb:f7:7e:3e:f9:d4:5c:f5:d2:fa:cc:fd:a7:9f:ab:
         55:47:68:e3:e3:27:84:a9:49:7d:44:5d:84:a3:61:59:bf:33:
         92:19:8d:6f:b4:ae:2f:bd:32:6e:a5:23:2e:49:32:c2:3d:03:
         3d:19:47:9d:c3:05:4a:7a:94:92:6a:2c:0d:99:1b:a9:42:ec:
         8a:b9:be:88:06:9d:7d:09:fc:e4:2b:bc:ab:df:11:b0:fe:41:
         28:38:85:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:19:41 2026 by rpki-client