Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/70e12473-7659-313a-ae38-8b65f34ab89a.roa
File:                     70e12473-7659-313a-ae38-8b65f34ab89a.roa (raw, json)
Hash identifier:          zQTvT3Ztm7jhQma3A8g3Si82Nr1ZKWFakbmqf/QB7Rc=
Subject key identifier:   1A:A7:83:A5:05:F1:AB:61:0F:39:4E:A4:AE:E6:4C:D5:22:A8:3C:49
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EA7902CE06CC70831D02CAAC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/70e12473-7659-313a-ae38-8b65f34ab89a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     18779
IP address blocks:        142.252.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:2c:e0:6c:c7:08:31:d0:2c:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c6fa20cf-74f3-43cf-a54e-c40f4d429816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:40:03:11:01:c6:c1:da:16:83:f3:79:eb:f8:
                    95:db:c2:43:d7:e0:f3:f1:e2:d6:d5:1f:fa:20:17:
                    8a:8d:8e:e6:84:f4:b7:6f:97:85:3b:6a:ea:0c:8c:
                    67:c2:f1:7b:03:6d:43:8e:8a:fe:f9:84:3a:70:02:
                    56:b5:8e:08:ea:e7:66:ca:32:06:9c:10:2b:66:a0:
                    f9:87:4b:04:d7:31:7e:74:57:85:36:55:41:6d:69:
                    82:89:6d:92:d1:7b:de:44:d0:03:cf:82:04:fe:14:
                    5c:f1:0a:22:72:5f:c6:ba:02:a1:1f:b5:b7:03:4d:
                    2e:e6:45:85:e2:85:32:b3:b4:74:3d:e2:e1:57:1b:
                    c5:a2:af:d8:69:c0:7a:2b:17:91:bb:59:52:63:1f:
                    01:bd:a7:ba:27:f0:11:8a:0d:a0:15:a8:df:06:b8:
                    7e:91:cb:7a:f5:78:9e:53:bc:c9:e8:63:40:6f:c3:
                    cc:a2:38:05:91:fc:28:e3:4a:8c:d5:1c:68:14:c4:
                    1b:6a:79:b3:09:44:56:d2:08:47:31:48:9d:b1:9d:
                    15:1c:a0:37:01:3d:c6:7b:3d:50:c5:88:84:60:22:
                    14:95:27:fb:a3:56:aa:9a:77:bc:7c:20:20:95:87:
                    42:c8:a3:01:ae:11:bf:c4:a9:80:2e:26:f7:4f:cf:
                    50:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A7:83:A5:05:F1:AB:61:0F:39:4E:A4:AE:E6:4C:D5:22:A8:3C:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/70e12473-7659-313a-ae38-8b65f34ab89a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:b6:98:f9:82:14:ea:91:d7:59:a5:d1:57:6c:7d:6d:b0:ea:
         fd:a2:7c:b4:0a:fd:83:a8:87:9e:1f:2f:d4:95:de:c3:a8:e8:
         81:44:94:93:d2:e7:a7:5a:6b:9d:0e:1b:0d:89:a7:e6:b6:a1:
         44:01:af:7b:0b:38:7c:c1:4d:50:2b:42:96:8c:15:13:e6:ae:
         26:cf:5b:01:85:8f:c7:d8:cc:98:86:e2:9a:6a:16:94:9b:c5:
         dd:d2:55:74:92:f5:5b:ed:65:99:9d:56:56:0e:01:02:ea:69:
         46:71:b6:8a:37:68:38:e9:06:ae:4f:27:bc:e3:6c:58:b4:70:
         29:45:86:51:ce:f3:68:04:f7:42:2e:95:bb:70:8e:86:8e:8d:
         0d:96:27:34:35:ee:8d:32:7d:d0:ab:b2:18:79:25:64:41:f6:
         c4:d4:64:15:92:a6:36:93:08:50:d8:9f:bd:02:f7:73:ba:b3:
         2c:bc:2c:98:f9:db:97:05:00:b8:0d:f1:53:73:84:1d:6e:72:
         1f:8d:5a:21:60:5f:84:6f:94:a3:64:27:dd:db:5c:b6:f4:00:
         08:40:af:8b:ac:6c:76:11:f6:49:12:0d:e4:01:b6:ed:fe:31:
         3a:a4:a3:1e:a4:b2:8b:72:68:b2:25:f6:44:88:bf:58:2d:08:
         12:ce:aa:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 22:49:56 2026 by rpki-client