Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a649ba89-9ab0-367b-89f7-229eb391907e.roa
File:                     a649ba89-9ab0-367b-89f7-229eb391907e.roa (raw, json)
Hash identifier:          eCHGyXJ9+zXN+e/cpbr9OaKkNsgZQWQ8sMIFc/NvINk=
Subject key identifier:   0D:81:3E:3D:33:87:E4:5B:D0:F3:84:42:16:F6:18:EA:2D:84:33:BF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F4986C43DACF9680E3EF31D80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a649ba89-9ab0-367b-89f7-229eb391907e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     3257
IP address blocks:        142.252.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:c4:3d:ac:f9:68:0e:3e:f3:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ad8b2862-6dd5-4465-817f-e382aee8fd98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c5:95:3f:22:a8:a6:f3:f5:ea:74:46:90:63:
                    6e:dd:9b:91:2b:98:85:72:e7:0b:6b:f2:f1:fa:12:
                    bf:d7:46:f3:2f:57:3d:a5:9a:48:15:49:c2:84:e5:
                    87:f1:41:ec:3c:ee:27:6a:10:08:11:c2:7a:51:2f:
                    5d:48:15:e1:3d:6f:f7:c5:f9:de:4a:f8:f6:e4:40:
                    1b:56:e6:6c:0f:64:de:d3:d4:a0:87:e0:0a:af:04:
                    07:60:78:5d:94:6b:97:ff:c0:9b:2c:ef:c4:b4:89:
                    66:43:2e:9c:70:03:a6:48:5a:d6:fa:cb:80:52:50:
                    e4:90:c2:df:61:fc:44:6b:98:90:e8:2c:10:bd:ba:
                    b0:65:04:36:53:2f:41:b7:f8:dd:b9:c9:7e:5e:8b:
                    bb:78:55:6c:d8:57:17:b1:ea:31:98:22:ad:fa:d0:
                    35:78:af:ae:77:51:27:9e:bf:5b:62:81:ea:d8:bb:
                    0d:eb:4e:b2:47:eb:60:c2:dc:7e:b8:58:9f:f4:b5:
                    1a:4d:fb:7b:70:ac:79:87:92:00:0f:01:17:ef:16:
                    59:5d:f6:3f:1a:36:e5:79:a3:b3:39:2b:37:1b:b2:
                    2a:70:cc:91:05:ea:c8:bf:28:c7:23:e3:57:ba:bb:
                    e7:1d:b0:3e:c7:b0:64:ee:b1:39:fe:0e:32:71:a4:
                    ee:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:81:3E:3D:33:87:E4:5B:D0:F3:84:42:16:F6:18:EA:2D:84:33:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a649ba89-9ab0-367b-89f7-229eb391907e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:09:39:30:fe:a7:1c:b0:d5:a8:34:ec:10:4b:c7:ce:96:84:
         1f:3a:54:65:96:62:60:ef:f1:89:04:78:b9:6f:46:c1:86:88:
         fa:66:52:fa:53:0d:3d:83:ee:72:e4:a2:a8:16:e9:cf:76:be:
         25:c2:42:ca:9d:51:68:db:87:59:84:a4:4e:91:3c:2b:51:4b:
         1d:94:a6:bb:3c:2c:48:a9:24:5b:1e:97:e2:1e:27:4c:4b:e0:
         fb:95:bd:85:06:11:d0:d0:59:54:90:26:21:5b:df:cf:d6:3c:
         df:fe:67:f7:ed:eb:b6:a8:30:f5:31:3d:36:82:d4:6e:77:b6:
         df:39:ce:44:36:46:76:62:f8:91:ef:98:2c:5a:99:c4:d3:be:
         77:2d:3e:d7:ea:c1:1e:0e:be:59:a8:76:7d:b7:c5:57:01:2a:
         ef:94:a3:43:f1:67:75:0b:a0:ba:b3:da:26:f0:d8:bc:d2:a8:
         46:80:4d:52:9a:c6:b7:98:78:5e:67:e0:b4:da:b9:36:07:9c:
         c9:ef:c5:d5:76:1b:e6:15:b8:3c:d8:cc:59:da:f0:5e:60:79:
         e2:a9:0b:43:b2:0f:b5:a5:ad:4e:f7:3b:ea:4e:ad:9c:c3:1a:
         37:5e:ea:16:75:1d:7e:6d:f3:84:46:26:8e:fb:08:9a:00:de:
         db:70:57:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:50:19 2026 by rpki-client