Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aa634e94-f843-32e8-960a-08d2b6d4b6fe.roa
File:                     aa634e94-f843-32e8-960a-08d2b6d4b6fe.roa (raw, json)
Hash identifier:          9kTrEmjNt8PLYaNC7IgVGTkHN60AJ/vejQIV0yZ10Mk=
Subject key identifier:   7D:89:DF:14:DC:A4:40:54:75:0E:9D:D7:57:C1:8D:0B:D6:D1:5E:4C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EC0A7148054EA125D0F06B080
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aa634e94-f843-32e8-960a-08d2b6d4b6fe.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     199843
IP address blocks:        142.252.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:14:80:54:ea:12:5d:0f:06:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=8e404988-33d3-4399-b1ef-47eb17a3973e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6b:41:82:8f:4c:91:09:b6:0a:f2:c5:d9:b4:
                    2f:8b:8c:6a:99:03:c5:bf:b4:52:ff:8d:f8:04:3e:
                    6f:84:e6:98:23:d2:09:64:5a:0f:9c:ee:2a:ac:48:
                    03:71:c1:eb:b9:a7:f2:65:6e:52:44:d9:47:f7:f8:
                    21:02:51:b0:8f:5e:85:a1:dd:9a:c4:37:1f:98:67:
                    33:00:23:30:62:76:7a:61:35:3d:17:a2:b8:16:cd:
                    61:4b:34:fb:e4:2a:d4:69:46:90:9a:be:81:0d:d8:
                    62:07:54:04:84:9b:53:67:ff:9c:eb:07:72:cc:4c:
                    c0:cb:72:59:2e:ad:1d:36:f6:8e:ec:05:71:38:df:
                    61:ce:3a:32:02:06:25:3d:e8:08:01:d4:ff:55:86:
                    22:f1:e1:95:26:a3:12:91:b8:ce:d4:d3:f3:d0:1a:
                    eb:10:27:11:21:17:2c:1e:86:de:01:04:f5:fb:b1:
                    f2:d3:6a:03:a9:89:6a:64:57:27:6b:e7:b4:b8:e6:
                    95:43:c6:8a:f3:c5:9b:96:6f:ab:00:4a:08:34:25:
                    96:ae:76:f0:90:f4:6b:47:5e:26:95:78:49:4c:6a:
                    f1:25:0a:06:16:22:00:04:fe:ac:3b:dd:3d:d9:89:
                    a9:28:15:3a:b7:c9:d4:7b:40:84:b1:f3:d9:5b:d9:
                    7b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:89:DF:14:DC:A4:40:54:75:0E:9D:D7:57:C1:8D:0B:D6:D1:5E:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aa634e94-f843-32e8-960a-08d2b6d4b6fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:c0:5a:4f:57:d1:d7:1b:48:a0:7d:75:5a:a8:65:ce:f9:3e:
         99:7b:13:5e:b4:5c:52:9e:f4:82:2a:d4:84:10:5e:20:dc:7e:
         c9:de:59:b0:4f:ed:d9:97:e9:06:2e:f9:7f:03:61:fc:08:57:
         22:e7:92:88:b1:52:cd:58:eb:96:02:cc:3d:f3:0d:35:5f:b5:
         72:64:51:d2:ea:1c:5b:b2:f8:fb:f9:8c:80:85:1b:9a:90:8b:
         2b:17:cb:61:e6:48:ee:0e:2a:03:e0:9c:39:12:a5:a5:83:5a:
         4d:cf:8d:ea:42:c2:bc:56:f5:af:d8:69:05:42:1b:69:5b:30:
         b9:83:3a:f2:62:85:aa:e9:3f:24:74:5f:17:54:89:67:52:b9:
         5e:db:af:92:a9:e1:f1:20:18:09:30:99:3b:d3:cc:17:4a:4b:
         63:5b:ca:2b:3a:a9:a7:e8:fd:ad:5e:02:c4:e0:b5:fe:06:a7:
         a2:55:e4:35:5f:2b:9f:54:1e:64:ab:21:99:89:31:1d:2d:bc:
         0f:29:e1:f4:aa:00:4f:09:bc:c1:28:82:04:58:02:6e:73:d7:
         24:96:1e:8f:9d:57:59:34:2a:6a:a3:dc:ee:eb:71:79:d6:0d:
         1f:84:ff:ee:8f:a1:84:f0:3a:37:ec:76:8a:eb:9e:d0:47:18:
         1a:a7:9c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 09:40:59 2026 by rpki-client