Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42a55bf6-ae47-3020-a989-9215951ce1bb.roa
File:                     42a55bf6-ae47-3020-a989-9215951ce1bb.roa (raw, json)
Hash identifier:          XvusTgYkBQAk4+ajLchNoDOtL79Dhn+SjaNoFOKrm30=
Subject key identifier:   3D:C6:60:BE:57:3F:60:81:62:9C:DB:7D:67:41:D7:74:7F:F5:0E:69
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D2A74DA3A2CEEAB0A7F92E200
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42a55bf6-ae47-3020-a989-9215951ce1bb.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     18779
IP address blocks:        142.252.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:da:3a:2c:ee:ab:0a:7f:92:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=f2f4eeb5-5873-430e-827e-9f1feb1b38d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4c:4b:a9:64:15:14:48:c5:df:73:e7:a0:07:
                    bb:cc:c3:09:fd:8e:34:3c:4d:06:b9:eb:43:a6:c5:
                    d6:0f:9b:3b:24:0c:ff:d1:3f:84:7a:5c:2b:f4:6d:
                    2f:16:bb:9a:38:f1:04:1d:6e:b8:68:a4:50:eb:73:
                    0b:dd:fb:54:d9:a6:85:0e:11:59:28:18:03:27:eb:
                    8d:6f:e6:1f:b1:d8:1b:b3:3d:5d:50:d0:bb:84:ce:
                    26:db:65:a1:71:c0:76:7b:3e:53:31:f4:1a:21:d2:
                    ac:6f:91:b6:10:ff:ab:ac:7a:51:bf:3a:84:5e:d3:
                    42:a9:c3:00:2e:b3:58:16:a4:44:04:40:27:a5:35:
                    50:08:cb:71:cf:5f:c2:81:35:fb:44:26:10:9a:11:
                    61:5b:9c:66:b4:b9:e1:4b:e0:64:e1:75:94:1b:e6:
                    c0:09:53:3b:db:28:5f:a2:9d:60:19:e4:87:49:d3:
                    78:98:f4:84:33:6b:05:b6:e8:ad:09:30:e9:da:3c:
                    31:cc:ee:67:bc:fe:01:99:ee:49:55:5d:be:eb:9f:
                    02:d8:10:ad:25:7d:77:16:fa:80:99:b2:fc:05:39:
                    89:9a:0c:0e:42:70:f1:0a:42:3f:fa:f7:ea:b4:e1:
                    78:0a:13:b5:e5:9e:88:24:af:3d:81:a8:2d:de:cd:
                    7d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C6:60:BE:57:3F:60:81:62:9C:DB:7D:67:41:D7:74:7F:F5:0E:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42a55bf6-ae47-3020-a989-9215951ce1bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:e0:af:11:b0:e9:db:e9:ef:bd:3c:e9:46:17:ac:40:ef:1e:
         12:bf:cb:2c:9f:84:d1:e3:05:0f:f2:9a:32:16:97:3e:3a:fe:
         5c:b0:53:7d:26:53:05:e9:45:6f:90:5e:dc:01:5f:c1:c1:28:
         a9:35:b9:4e:dc:01:48:aa:c8:62:70:0f:fa:0f:1d:08:5b:11:
         42:50:95:c7:3e:d7:bb:b8:3b:11:be:0a:f4:e1:9a:1d:bd:ea:
         7e:d7:8f:1f:8b:52:fc:53:89:fa:91:61:7d:a0:a1:c2:7d:12:
         cd:ec:e1:c0:b9:23:5e:cf:4f:4f:50:9c:cb:6a:33:84:04:74:
         6d:cd:f0:2b:0d:be:8f:15:04:09:d9:2c:ad:12:69:26:cc:6f:
         a9:00:88:d2:b2:d7:38:ab:f4:af:a0:ff:ce:82:9c:26:8a:72:
         5b:91:7b:f4:7d:76:1a:ba:0f:0b:ad:cc:28:49:c1:85:53:a2:
         3f:8a:1f:87:21:d6:82:27:03:fe:cc:44:a1:c9:12:2b:79:27:
         cc:15:70:46:81:79:c3:9c:6d:e6:c4:0b:31:1c:08:63:2b:88:
         12:10:ba:a7:cb:e8:91:5a:f1:0c:cb:c6:46:7e:59:f5:d5:e3:
         be:ca:a8:65:f9:44:47:f5:3d:04:35:5f:fb:15:41:d5:5e:79:
         50:76:22:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:17:55 2026 by rpki-client