Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b4517742-6d4a-3863-84a6-24a6cf5e8028.roa
File:                     b4517742-6d4a-3863-84a6-24a6cf5e8028.roa (raw, json)
Hash identifier:          TKTmlBHAOwCJC3rX7/t5oC32AJJH7b9VXzsTdTIcbwo=
Subject key identifier:   84:80:DC:7F:92:14:F5:09:C2:40:DE:E8:E7:B6:D9:3F:B7:DF:84:61
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F4989D76A8C8870073AD11D00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b4517742-6d4a-3863-84a6-24a6cf5e8028.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     3561
IP address blocks:        142.252.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:d7:6a:8c:88:70:07:3a:d1:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=15981aad-9143-4e00-bec5-6dfdb13241de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8b:42:55:6a:d9:aa:01:51:49:f5:02:6f:61:
                    6f:ed:7e:1b:56:de:e4:75:3c:e1:a3:d5:99:50:fb:
                    cf:9d:4a:0a:78:93:72:4d:f9:a5:9c:9e:2a:30:7c:
                    6f:d7:49:89:dd:8f:82:07:77:e4:a8:e5:8f:9f:02:
                    51:8a:ee:22:c1:da:a5:f1:63:57:42:52:cb:ad:e8:
                    b5:87:ab:91:2f:9b:8f:0f:ee:a5:41:33:e8:f7:fa:
                    93:7d:d6:7c:cb:2b:80:e3:85:57:bb:d2:71:cb:95:
                    6a:bf:dc:9b:ce:41:7a:3d:43:20:b7:fc:70:4d:38:
                    71:63:d9:4d:62:a2:17:28:51:d2:62:48:f4:8e:24:
                    ce:9e:9f:ae:5a:b5:7e:73:21:b9:26:1c:63:7b:3d:
                    6f:a4:20:f2:22:5c:22:3c:84:66:28:13:d8:11:0d:
                    f9:78:af:8e:2a:01:e6:45:06:95:e8:83:0b:ad:78:
                    6e:f0:13:19:e5:b5:be:e3:69:6f:96:a5:1c:00:d0:
                    96:74:e1:69:e7:8b:69:89:70:b9:53:14:d7:b7:42:
                    83:9b:21:03:fb:14:a8:8b:27:43:04:45:ed:1e:66:
                    68:6c:93:11:8c:c4:7b:36:53:c2:fb:f6:09:8b:9d:
                    b4:21:1e:17:18:19:4e:3b:f8:4c:6c:43:53:d6:93:
                    ad:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:80:DC:7F:92:14:F5:09:C2:40:DE:E8:E7:B6:D9:3F:B7:DF:84:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b4517742-6d4a-3863-84a6-24a6cf5e8028.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:35:81:60:29:9d:1b:34:bc:e6:ed:7b:d2:66:f7:f7:4c:83:
         00:36:83:ed:6f:ae:91:25:b5:3f:43:08:84:89:ca:27:8d:f8:
         d3:af:41:e5:1e:09:44:cf:ff:f9:a0:1e:33:0a:8b:08:a0:4b:
         a4:ae:c3:b2:60:9f:1c:45:5d:e6:76:86:b6:e3:a1:67:b0:a1:
         10:13:0b:24:e8:80:71:9b:c5:97:e6:68:34:3c:db:10:74:84:
         1d:63:77:7f:c4:e4:22:03:7b:e1:80:61:15:ea:32:f9:97:b8:
         2f:4c:95:83:94:f5:e3:0c:13:a0:69:5d:97:6d:76:0a:5f:b0:
         2c:52:3c:44:8d:c4:30:0b:eb:0e:07:d0:39:f0:db:8f:da:56:
         29:93:e2:f2:1a:4c:d0:c7:dc:d0:60:14:3c:50:61:1f:2a:54:
         47:59:f5:97:f2:28:e5:85:97:ad:18:64:0c:d9:51:fb:7d:78:
         8b:a3:13:0c:f4:cd:10:d6:35:61:75:79:03:4b:ef:bc:a2:a9:
         11:b7:a7:6f:b4:4c:1c:de:91:50:3a:92:7f:9e:30:64:e9:a4:
         6b:d3:4a:8a:1d:a5:17:49:88:f3:89:37:4e:1e:37:25:cc:8a:
         bf:1c:4b:5d:23:dc:36:34:fb:d5:ed:04:e4:65:75:0d:6a:12:
         78:28:6a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:33:13 2026 by rpki-client