Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/03cce78a-1c8d-335d-b192-7ace3c588491.roa
File:                     03cce78a-1c8d-335d-b192-7ace3c588491.roa (raw, json)
Hash identifier:          Cmlb9TcfVL0xrAbh766iQJBxrwCQy5PR+JZc0m3Pzdo=
Subject key identifier:   44:58:E0:A5:E4:FF:FF:F6:17:05:D7:C6:1F:29:8C:1A:AA:A3:F6:51
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F58CD5D6EA0E5B4C95787E9C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/03cce78a-1c8d-335d-b192-7ace3c588491.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     62240
IP address blocks:        142.252.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:5d:6e:a0:e5:b4:c9:57:87:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=c9a175da-7638-45a1-837c-e28f2b3a7622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3d:6b:db:25:67:3b:ba:e5:6d:1f:54:d6:0d:
                    fe:c8:98:0e:ba:02:2c:dc:b8:79:0d:56:9f:1b:2d:
                    67:cb:d9:50:f4:55:68:d3:5c:f0:53:21:4f:8b:7e:
                    52:86:5c:19:9f:c4:85:78:e1:04:ff:28:b6:76:2c:
                    a1:37:d5:d4:0e:89:0d:92:92:af:a4:ab:33:61:a7:
                    3d:e7:96:97:79:58:c2:6e:43:b0:d1:22:62:a0:8e:
                    74:f7:4d:4c:d4:c6:0c:b2:fa:5b:bb:e7:a5:26:5a:
                    c9:30:a9:7d:34:37:c9:d5:85:ff:bc:98:58:b1:66:
                    ed:09:5c:c8:7c:db:91:60:27:e2:c4:4b:6e:87:92:
                    a6:2b:c9:99:65:6c:b3:18:3a:f3:95:f7:b7:d8:63:
                    b8:40:67:48:2a:a7:3b:ea:ff:78:d7:b9:14:56:36:
                    d1:ea:4e:0f:34:8c:35:b0:91:78:88:57:04:6f:e9:
                    5b:74:3a:a8:83:66:98:71:13:a6:d8:2c:cb:a8:6c:
                    73:51:1b:c3:9e:00:15:0c:e9:e3:4d:b7:c5:9a:9a:
                    f8:52:79:8c:25:56:79:46:6b:81:ee:56:60:eb:8e:
                    46:eb:0a:ca:ca:6f:0a:30:16:de:79:52:1f:6a:f8:
                    5e:f3:13:8e:7c:96:27:44:dd:38:6b:5e:34:d6:46:
                    bd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:58:E0:A5:E4:FF:FF:F6:17:05:D7:C6:1F:29:8C:1A:AA:A3:F6:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/03cce78a-1c8d-335d-b192-7ace3c588491.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:a8:36:ee:87:f8:c1:3d:2c:63:9f:47:9f:c7:fc:fd:ec:6f:
         cf:db:56:aa:b7:87:54:e9:58:54:2b:a9:f9:74:08:1a:44:18:
         9c:9d:db:b8:30:4e:6a:30:e8:8a:00:dc:51:ad:e8:3f:58:3d:
         e6:e3:f9:ac:e1:73:f6:ea:0c:7d:5a:af:d8:6d:de:70:b1:6e:
         4a:db:0c:30:9a:19:88:f6:45:60:df:ab:33:22:27:ea:da:c5:
         03:9c:1d:45:28:72:b6:6b:2c:bc:6f:0f:7e:00:d8:da:9c:79:
         1f:f0:8b:80:c4:8f:a4:a1:10:90:8d:dd:11:59:6f:2c:c8:27:
         33:32:18:6b:24:54:04:51:f9:95:5a:4d:bd:87:2a:5b:b5:af:
         f4:42:1b:18:e9:3d:86:04:36:ed:79:16:03:9a:30:51:8c:20:
         67:3e:0d:26:b0:cf:54:21:6b:f0:24:b4:31:34:30:d5:e2:9d:
         86:2b:db:60:ba:2b:d3:34:51:e6:6f:49:29:a0:02:cc:b9:4b:
         64:c9:93:05:6b:6d:fe:df:5b:be:64:01:a2:2e:c3:15:81:24:
         38:22:e7:d9:86:2f:cd:a5:56:0b:a8:24:68:ec:b7:8e:eb:af:
         4b:39:05:f8:8d:25:47:92:60:d2:28:b8:fd:cf:b7:5b:69:9a:
         9a:37:1a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:23:57 2026 by rpki-client