Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/94a14785-318d-3ad9-b298-2836a64cde11.roa
File:                     94a14785-318d-3ad9-b298-2836a64cde11.roa (raw, json)
Hash identifier:          8k+wV8DFapvwBloLcRCtgvrdsba5MHF46L2lYXYj7hc=
Subject key identifier:   08:F5:7F:46:A3:03:EB:4A:59:2E:0D:B0:7F:E1:9B:5A:95:59:D3:8F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F3E47CFCFF1FC0C1DF5B16160
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/94a14785-318d-3ad9-b298-2836a64cde11.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     35554
IP address blocks:        142.252.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:cf:cf:f1:fc:0c:1d:f5:b1:61:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=27fbba18-785c-43c5-bcee-0778ee4ed8a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4c:13:a0:dc:c7:a9:db:a7:77:8a:24:55:9e:
                    53:62:ef:cc:ad:7b:f5:11:44:0c:86:93:1e:3e:75:
                    23:d9:53:95:1b:61:1a:60:3d:0d:ed:5a:1d:e2:a1:
                    2f:60:11:ba:e6:55:0d:7e:4f:cf:64:86:81:bb:19:
                    c8:60:86:5d:0f:8c:29:24:30:54:01:21:41:47:08:
                    a3:ee:77:aa:cd:5e:97:cf:09:7c:09:a3:ab:b3:09:
                    6f:15:95:f0:18:86:d6:2b:59:e3:17:d8:39:4d:32:
                    fc:1a:63:09:9b:98:1f:7e:87:ce:a1:22:03:f8:16:
                    ed:ae:94:66:84:19:7a:a6:db:ae:eb:2a:4b:cd:0a:
                    29:09:7a:93:6d:55:72:9e:46:b8:4f:0f:69:14:45:
                    70:e8:db:0f:09:db:01:c1:22:d2:e6:cb:b3:4a:81:
                    27:a8:92:6a:92:74:31:ad:83:ea:c3:0e:93:27:4e:
                    cc:ff:bf:27:dd:fe:db:f6:95:06:d4:61:e4:ef:ae:
                    06:94:dc:44:dc:6b:e5:f4:59:65:d2:be:12:50:e8:
                    8c:8d:7e:71:ec:5d:2e:de:69:eb:02:29:09:68:9c:
                    9d:02:7d:0d:3c:2f:fa:3b:23:0c:91:5a:be:5c:21:
                    d0:c2:a6:7b:5c:db:af:09:e2:18:31:0f:e4:16:04:
                    e2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F5:7F:46:A3:03:EB:4A:59:2E:0D:B0:7F:E1:9B:5A:95:59:D3:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/94a14785-318d-3ad9-b298-2836a64cde11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:ac:76:7f:a8:7d:8a:4a:69:66:84:0e:97:27:ed:d7:b2:ea:
         f6:20:10:a6:45:96:8c:b3:41:fe:21:94:65:38:a1:fd:41:02:
         11:8c:6d:02:ad:e0:ff:74:6a:5c:f8:a2:fa:46:1b:c3:60:07:
         0c:33:00:d3:d6:5c:6d:d9:10:be:ef:85:db:db:e8:d0:ac:97:
         9d:06:37:3f:cc:97:61:d0:64:5e:c7:dc:00:5d:c7:74:c1:ac:
         c4:7e:ea:1c:7c:fa:b1:6a:fd:06:b1:19:f7:18:59:44:09:ae:
         61:1d:7a:4e:8e:30:6a:fe:3b:29:e2:69:20:54:71:bc:6b:27:
         bf:30:c1:29:82:e3:eb:7d:5f:82:67:31:54:46:7b:c9:99:05:
         11:de:ed:51:0a:2e:9d:87:59:49:64:b5:33:63:46:33:ad:18:
         8f:82:39:54:9a:67:e5:79:06:b0:86:db:fb:2b:cb:27:39:da:
         32:8e:33:1e:08:2e:27:11:0e:93:54:53:44:fe:ee:43:a0:75:
         2c:1a:9b:16:a3:b3:dc:20:a2:25:76:73:11:c9:c3:a8:4a:b7:
         1d:d2:66:9d:0b:57:b0:94:b5:b0:48:2b:1e:06:10:b4:72:b4:
         0d:28:60:e1:4c:17:6c:16:e7:6a:98:5c:7c:1a:5c:ee:6a:1b:
         08:fd:e2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:03:26 2026 by rpki-client