Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/994eb5a0-29b2-317c-b378-42757eef8d7a.roa
File:                     994eb5a0-29b2-317c-b378-42757eef8d7a.roa (raw, json)
Hash identifier:          cZ51XmC5FzSOWMDwaYYloi3Z3Ii8q0Y6WW8dnaK3Pac=
Subject key identifier:   3D:39:9E:07:CA:4D:5A:6C:8F:61:5A:A3:CA:30:D9:3C:B1:6E:B2:01
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F406190FDED4DC82641BC7420
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/994eb5a0-29b2-317c-b378-42757eef8d7a.roa
Signing time:             Mon 21 Sep 2026 19:03:46 +0000
ROA not before:           Mon 21 Sep 2026 19:03:46 +0000
ROA not after:            Sun 20 Dec 2026 20:03:46 +0000
asID:                     18779
IP address blocks:        142.252.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:40:61:90:fd:ed:4d:c8:26:41:bc:74:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 21 19:03:46 2026 GMT
            Not After : Dec 20 20:03:46 2026 GMT
        Subject: CN=38233518-7052-4a1b-9745-6b5cd25dfeec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fc:ea:c8:29:0e:46:ae:23:89:09:69:a6:46:
                    2d:34:e9:46:5b:aa:e6:db:3c:9e:21:3b:54:25:bf:
                    06:c0:28:73:6c:9e:b8:08:71:54:28:a1:96:47:7c:
                    57:dc:18:82:36:a5:2b:40:67:f3:83:97:a7:ad:96:
                    5b:67:a8:db:45:d4:21:52:f1:93:78:9a:a5:38:27:
                    55:e8:6e:b4:b9:8a:39:96:cb:6f:27:6d:aa:c5:cb:
                    47:11:fd:a3:64:43:62:d7:96:d7:80:2c:c7:41:ac:
                    af:08:67:cd:44:9e:c4:d4:4f:fe:bd:21:48:05:49:
                    09:3f:bd:f8:26:84:d0:83:94:5d:51:a2:1e:bb:95:
                    90:51:9d:5a:1d:78:cf:80:fa:59:c6:ce:23:c1:9a:
                    60:f3:e3:2e:88:5a:aa:87:13:43:63:c4:e5:eb:30:
                    98:66:dd:ba:ae:17:b7:66:fa:21:8e:b1:26:f5:c0:
                    2d:81:d7:1e:bf:e9:de:5f:5c:ac:cf:04:9b:19:0f:
                    b5:b6:15:09:b5:17:73:91:8f:dd:e1:34:03:8e:36:
                    ee:22:68:07:f9:f7:97:83:5f:9a:d0:0c:f4:b6:77:
                    1a:a1:44:20:62:1e:7d:11:e9:f1:34:8b:d0:b8:67:
                    de:89:03:a7:ab:0f:37:0a:45:eb:33:b0:b6:00:2f:
                    52:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:39:9E:07:CA:4D:5A:6C:8F:61:5A:A3:CA:30:D9:3C:B1:6E:B2:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/994eb5a0-29b2-317c-b378-42757eef8d7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ac:f0:f5:9f:f4:d2:18:aa:59:36:1f:71:c2:b2:42:8e:50:
         e1:8f:96:ac:0d:e5:fe:40:26:02:73:ae:67:b6:56:27:1f:04:
         62:17:9b:20:39:a8:2e:19:ab:fb:4c:41:d5:b3:61:1b:c9:64:
         e4:51:00:23:3e:8c:58:47:72:16:18:31:11:98:7d:cc:70:fd:
         96:a6:aa:a2:aa:10:2f:10:8b:72:4d:17:52:f2:77:54:2f:80:
         82:29:c3:f8:85:08:76:87:cc:fc:45:c2:35:f5:55:4a:74:dc:
         7b:15:4c:c9:1e:dc:74:34:99:bd:f3:37:62:72:cf:3a:76:11:
         d9:86:63:6b:2c:bf:ec:bf:15:9d:72:98:bc:54:e0:47:8f:16:
         69:9f:cf:af:5d:0c:e1:05:25:89:31:f8:f5:97:64:25:d7:80:
         98:af:f7:44:bc:4d:23:f6:2a:32:9b:47:d7:b8:90:79:0d:0a:
         7d:ff:94:68:c5:e6:b3:a2:00:de:b3:d9:3c:e0:a1:c2:9b:8a:
         c1:7a:c6:60:e8:11:28:bc:c2:43:30:4f:a4:8d:4a:a6:8a:83:
         47:a4:24:55:36:d5:f3:61:e1:cc:fb:63:92:fe:f5:08:78:36:
         98:e0:70:5d:08:12:10:2a:36:16:c3:70:f7:6d:0c:1b:26:18:
         09:95:79:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:42:24 2026 by rpki-client