Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/956cb9a0-5586-376e-a3af-4c3d74ffd8a9.roa
File:                     956cb9a0-5586-376e-a3af-4c3d74ffd8a9.roa (raw, json)
Hash identifier:          2DxGx5i/PopyTw633SVwKKXdM1rpgmIDcqKRXIyUf/c=
Subject key identifier:   2A:D1:CB:37:82:1B:5F:33:7A:DD:F1:F8:40:C4:7C:95:A0:0C:24:63
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584E1333989F586E5D6EE456B6C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/956cb9a0-5586-376e-a3af-4c3d74ffd8a9.roa
Signing time:             Fri 05 Jun 2026 21:52:50 +0000
ROA not before:           Fri 05 Jun 2026 21:52:50 +0000
ROA not after:            Thu 03 Sep 2026 21:52:50 +0000
asID:                     214238
IP address blocks:        142.252.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:33:98:9f:58:6e:5d:6e:e4:56:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun  5 21:52:50 2026 GMT
            Not After : Sep  3 21:52:50 2026 GMT
        Subject: CN=244a360a-0b9f-478e-8560-1bbddef708d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1e:b0:4d:58:69:e7:40:ea:46:0f:3c:be:ce:
                    db:5b:2a:55:b8:af:cd:a6:df:bc:fe:88:2e:5e:fd:
                    22:22:ef:9e:fc:37:c6:3f:f5:b2:f2:c2:df:13:53:
                    28:25:ad:0f:09:5b:a0:15:88:d8:a2:52:fe:8c:8b:
                    fd:1d:cf:a0:64:2e:40:c9:e8:38:37:dc:8c:19:30:
                    35:af:b8:e3:18:27:a2:4f:f3:c2:2d:31:6b:b0:c6:
                    cf:1c:30:d0:96:2b:45:b4:bb:ed:b7:1d:85:e2:28:
                    69:5f:e4:38:76:87:9f:06:53:2a:55:18:d1:60:1d:
                    25:da:3e:96:c9:9f:25:05:9e:b4:af:3a:62:2e:0a:
                    56:f5:3b:04:6d:44:54:d7:8a:ef:4c:8b:85:f0:e0:
                    6a:fa:fd:1a:8c:a6:63:e1:a3:b5:51:46:9e:15:62:
                    36:39:a5:7c:d1:ec:86:ce:6b:c2:4b:ef:ea:08:8c:
                    ed:98:23:27:1c:0a:95:ca:38:00:c6:a4:b3:5f:1c:
                    ab:e1:4d:af:ee:e3:53:97:dc:33:4f:30:11:27:55:
                    8c:e4:a9:1c:3d:22:4c:41:9b:e5:13:bc:c2:93:52:
                    75:7e:07:44:36:3c:6b:19:40:0e:04:b6:bd:76:1c:
                    c0:46:1f:28:8e:e3:58:6e:6c:4e:37:e8:87:e5:33:
                    3c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D1:CB:37:82:1B:5F:33:7A:DD:F1:F8:40:C4:7C:95:A0:0C:24:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/956cb9a0-5586-376e-a3af-4c3d74ffd8a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:da:7f:85:0f:4f:9f:5a:6f:0c:81:14:ac:37:5b:9b:d5:e5:
         c4:31:d5:dc:d8:67:64:c4:18:66:72:18:f3:91:96:46:60:23:
         f5:9b:92:0c:1b:18:9a:a9:94:6a:05:16:e7:cd:f9:f2:8b:b7:
         ba:d0:37:d3:f4:2f:03:43:38:0b:f7:bd:29:9c:a1:aa:d6:6f:
         5b:c2:26:c8:33:8b:96:a2:6e:57:23:ac:d6:0b:22:f2:c6:d6:
         77:00:9e:e2:7b:ff:9e:1d:ea:35:0b:9c:e3:c8:b1:9e:a6:fb:
         51:1d:8b:83:75:60:c9:6c:ff:08:90:d9:66:84:24:3c:d0:8e:
         19:a7:2c:cb:a0:f9:70:57:67:24:89:e2:79:33:07:d0:35:2c:
         9d:56:1f:85:14:8e:57:d2:b7:d9:0a:67:a7:67:59:94:71:fe:
         7f:7d:a8:cf:a7:d4:7c:73:b8:2a:b2:cd:0b:21:9f:80:e0:20:
         0d:2c:21:eb:c7:c5:59:b0:84:03:70:b0:43:bd:30:a2:d4:f1:
         37:ca:dc:b0:fe:79:a1:78:02:27:40:cd:4b:b1:30:7f:37:97:
         76:30:8d:73:3b:f3:e3:d2:8f:38:9c:46:80:9b:ec:e7:eb:6e:
         9d:30:53:11:e6:e0:6d:8a:d8:a6:59:cb:8b:7f:7b:55:21:5e:
         36:eb:b6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:49:37 2026 by rpki-client