Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1ac76977-6f93-3319-957b-c51938c0b9f0.roa
File:                     1ac76977-6f93-3319-957b-c51938c0b9f0.roa (raw, json)
Hash identifier:          qTwziLlwlOwECE+N0wwXTVE/RY5BrXtFqE1LBLGwpIk=
Subject key identifier:   27:10:7A:25:73:E4:04:42:F8:F9:CA:4D:AD:18:52:6D:7C:2A:AD:97
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D1F4A6419301333C6386CAC60
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1ac76977-6f93-3319-957b-c51938c0b9f0.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     3257
IP address blocks:        142.252.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:64:19:30:13:33:c6:38:6c:ac:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=684db167-ad36-40bc-a6bf-d2f782734eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:05:c9:9e:38:e4:cf:be:80:4e:f5:81:85:76:
                    e8:ba:31:fd:eb:9b:d9:84:1c:8e:35:34:ba:0b:ba:
                    84:76:17:6c:e5:5b:26:4e:43:19:61:d5:2b:44:1f:
                    c6:0a:2d:19:3f:8e:a8:fc:a2:cb:94:4d:44:57:cb:
                    97:c3:b9:43:5b:0a:48:ab:3f:50:c4:0d:4f:55:41:
                    3f:95:00:88:35:ae:b6:a2:dd:2b:ce:9c:8e:e5:26:
                    a6:8c:92:2b:3c:66:05:10:54:0f:c6:a2:bc:34:17:
                    ab:0e:65:34:54:ec:34:3c:30:3d:14:43:77:ee:b9:
                    5b:bf:81:4f:ce:ed:32:53:3e:51:de:ba:c5:3f:ef:
                    db:80:59:a9:50:6d:9b:99:29:cd:97:fd:2b:ea:89:
                    76:79:b9:43:ae:e1:63:19:3e:b0:f6:64:08:f5:9b:
                    3b:f4:36:49:04:71:57:c5:ba:1f:ad:dc:fd:94:ed:
                    2d:bc:36:20:2e:30:6b:25:27:62:56:6e:30:50:4d:
                    a5:17:93:fd:d3:6f:d8:3b:22:c6:6d:89:0a:75:d7:
                    bb:1b:b4:f3:64:80:56:fe:59:2e:14:85:5a:d9:ca:
                    3b:cf:66:6c:13:6e:58:41:5d:d1:4d:a9:6c:34:1e:
                    dc:48:8d:05:f6:ce:f5:06:9f:38:2f:99:2f:3d:74:
                    ee:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:10:7A:25:73:E4:04:42:F8:F9:CA:4D:AD:18:52:6D:7C:2A:AD:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1ac76977-6f93-3319-957b-c51938c0b9f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:57:fb:fb:18:d8:09:50:46:04:b0:ba:06:b7:dd:d1:e5:18:
         d9:c9:13:11:b7:8e:99:11:32:fa:58:6b:6f:7b:7c:cb:63:52:
         fe:db:35:a0:cc:32:ce:2f:5f:5e:0b:99:7b:63:f7:b3:2d:38:
         71:46:ff:9a:38:c8:cf:e9:cb:f7:f7:79:8a:ef:ad:ad:04:3c:
         09:d4:db:88:be:4a:d4:bc:a2:c1:89:00:4a:ab:6c:49:5d:f6:
         84:d2:73:8f:57:c2:ae:ea:1e:3c:bc:74:4e:9b:1a:75:07:e7:
         9c:c4:65:34:0a:85:00:a7:ae:5f:8c:0d:39:cd:d8:a0:a6:30:
         2a:4d:f5:4d:6d:f2:78:2c:b0:73:f9:57:95:84:81:d2:d9:53:
         79:08:cd:ae:77:f2:0a:12:82:bd:97:74:62:be:cf:a3:94:64:
         12:09:bb:9a:56:c5:56:23:e7:40:fd:fd:b6:fb:35:34:23:60:
         4e:b5:20:2c:1d:52:c8:62:a0:63:7f:af:c7:55:b5:9f:c0:a7:
         e3:77:66:8f:dd:2a:08:c0:f0:a8:9e:ab:2b:c9:80:e7:90:c2:
         1e:e1:b0:9f:a8:0a:a9:b3:49:69:8b:20:73:4e:cb:23:00:a5:
         fa:e0:d2:cf:22:46:d1:c0:91:67:f3:27:2c:1f:c3:75:7f:4c:
         72:a2:7f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:51:37 2026 by rpki-client