Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d42aa29d-8be8-3d24-a021-d53832dbf2b8.roa
File:                     d42aa29d-8be8-3d24-a021-d53832dbf2b8.roa (raw, json)
Hash identifier:          eMgepiYOdhZtCHiRlecAMF1GFKzMlfDpkDO0k7o3bv0=
Subject key identifier:   43:45:15:99:13:14:2B:D3:24:80:29:9E:56:F7:7A:FA:3E:51:AC:7A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584E38D4434E16C86749FEBFE300
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d42aa29d-8be8-3d24-a021-d53832dbf2b8.roa
Signing time:             Fri 19 Jun 2026 09:21:28 +0000
ROA not before:           Fri 19 Jun 2026 09:21:28 +0000
ROA not after:            Thu 17 Sep 2026 09:21:28 +0000
asID:                     10753
IP address blocks:        142.252.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:38:d4:43:4e:16:c8:67:49:fe:bf:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 19 09:21:28 2026 GMT
            Not After : Sep 17 09:21:28 2026 GMT
        Subject: CN=92899c15-d03d-4883-bb72-d4b91949fcf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:46:35:28:bd:80:2f:b2:f7:8b:86:3a:77:14:
                    2e:1a:fa:93:b2:69:81:46:b3:35:ed:05:36:e2:d5:
                    3a:f8:1b:f9:df:ac:a7:59:3e:d9:93:ef:35:73:cf:
                    7d:9f:b8:f4:50:0c:5c:12:7d:23:11:e6:30:83:62:
                    cd:e0:37:95:ed:e3:5f:a5:f0:34:67:2d:af:91:2e:
                    c8:90:ba:ff:cd:d8:53:28:2a:cb:cb:1a:42:11:73:
                    f2:17:ed:6b:e2:23:53:7d:b2:06:95:c8:66:b5:a0:
                    9d:b7:4f:5c:28:0f:03:5e:98:8c:a5:56:d4:b2:91:
                    17:91:81:cc:b9:bb:ba:f2:2e:ff:40:34:8f:06:19:
                    4c:bf:c4:60:01:91:29:99:dd:42:0a:4b:a6:02:e3:
                    fd:0a:bc:f8:55:e6:fa:56:46:3b:0b:56:50:a3:d0:
                    74:63:42:1d:11:86:5c:3c:11:c7:44:93:73:9d:1a:
                    57:d6:36:6c:85:30:9d:1f:08:b4:87:0b:ac:54:7e:
                    d1:d2:e3:5d:7d:44:19:8d:2f:21:37:3c:5a:df:ff:
                    ca:cc:9c:06:f2:5b:39:f2:65:a1:28:4d:dd:07:e5:
                    13:81:86:ea:83:88:44:76:02:80:ea:a5:f6:b8:9e:
                    bd:71:90:a2:fe:90:59:d5:82:24:9e:9a:23:62:68:
                    5d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:45:15:99:13:14:2B:D3:24:80:29:9E:56:F7:7A:FA:3E:51:AC:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d42aa29d-8be8-3d24-a021-d53832dbf2b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:1b:6e:03:94:d7:31:86:a5:1c:ee:a0:dd:38:e9:f6:cc:e7:
         d4:64:ad:67:bc:35:f4:f5:d6:39:6a:db:b6:97:7e:89:66:ed:
         d4:5a:73:6b:a5:7d:1c:5e:ca:01:18:fa:e7:01:42:05:db:06:
         04:2f:ac:06:d9:58:88:db:86:3a:dd:2a:1b:6b:84:a4:f3:f5:
         26:6b:15:69:cc:5b:dc:bd:b1:15:da:94:60:06:94:13:d9:2d:
         dc:25:fe:8d:78:be:e3:1b:65:10:35:ee:46:17:a4:43:1f:c2:
         b7:a1:60:03:10:f8:af:41:61:c7:d9:f9:22:21:bb:78:07:fb:
         df:6d:4b:fb:c0:11:78:a4:f2:4d:69:d8:66:22:97:38:98:14:
         c9:fb:2c:e6:7d:e8:af:ec:b5:e4:1c:25:7d:df:a2:b0:ba:34:
         c9:70:ca:95:32:9d:8a:ca:33:da:2d:1a:42:16:16:7f:9d:87:
         f4:c1:b4:8f:1e:a1:77:3b:ef:7d:fc:11:1a:2c:a0:d6:2e:9d:
         1a:e1:e9:45:fa:cd:53:2a:05:ef:f2:70:09:d6:54:07:ad:11:
         cc:32:37:3c:3c:1c:19:76:4a:28:db:b2:76:3e:16:84:f4:2a:
         9c:ff:ff:f5:c7:5f:f2:f0:41:bf:4d:c4:ba:86:b8:57:7e:b0:
         32:39:2e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 17:42:03 2026 by rpki-client