Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/63b0b549-ecd6-325a-aed3-b70d89828171.roa
File:                     63b0b549-ecd6-325a-aed3-b70d89828171.roa (raw, json)
Hash identifier:          OblCO6gLEt0hyF8F9rplECtSrlMT0B3MimeYabedFW0=
Subject key identifier:   E5:4D:22:09:F8:8C:62:BF:DA:82:0F:DE:00:F9:19:B2:98:F1:6D:CF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F4987C555149C39ABE7515000
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/63b0b549-ecd6-325a-aed3-b70d89828171.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     18779
IP address blocks:        142.252.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:c5:55:14:9c:39:ab:e7:51:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d8744769-2d43-4bfc-859b-d9e8c815aaa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ef:5e:d2:1c:de:63:9c:c0:8d:5e:1f:0c:3c:
                    4b:81:d0:ed:d3:9f:60:7e:fc:25:16:0e:57:65:b0:
                    ee:cc:86:8d:32:77:50:62:66:23:7f:35:88:ef:b2:
                    7c:46:33:ca:06:f9:9a:14:b6:e1:7b:09:e8:15:98:
                    89:a0:9e:18:80:60:2c:66:b2:f9:c7:d6:9a:cc:57:
                    da:a2:d6:48:77:43:09:cd:6f:66:62:1f:91:f5:e1:
                    be:e6:8c:b6:fa:8a:47:96:5f:a8:ca:cb:25:66:72:
                    15:30:ec:5f:63:ee:2e:7c:0d:b1:83:68:af:d0:01:
                    fe:d1:b5:c2:25:e5:b6:32:6d:97:0a:69:8b:d3:fd:
                    bd:b9:5e:a7:6a:b6:e9:3e:05:06:57:54:76:ce:bb:
                    5b:3c:83:d4:8f:9a:38:d7:90:18:13:22:09:ae:9c:
                    de:b6:62:bd:be:14:83:16:e5:d0:f6:fb:65:0b:65:
                    e6:e3:89:86:6d:a6:f6:37:58:c5:13:5d:fd:46:64:
                    ce:15:25:ba:49:e1:8b:ec:ac:39:ab:9e:88:9f:22:
                    fe:86:91:5b:3e:15:a8:af:da:60:87:7d:89:21:79:
                    de:9a:41:f5:3b:07:a1:d4:3c:4d:0a:7a:29:d1:55:
                    5f:f6:52:5f:cb:83:40:08:2e:ca:39:e0:1a:65:8d:
                    05:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4D:22:09:F8:8C:62:BF:DA:82:0F:DE:00:F9:19:B2:98:F1:6D:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/63b0b549-ecd6-325a-aed3-b70d89828171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:c1:d9:eb:2c:c5:b5:62:2a:ca:96:5a:f4:56:6f:16:be:80:
         7b:61:eb:c5:83:83:3e:71:70:58:f9:cd:a9:c2:76:f1:43:d8:
         43:ad:7a:83:1b:81:82:0b:ce:09:1e:dd:24:c6:58:3c:67:1d:
         76:e9:08:31:e7:b8:d0:d6:2d:df:1e:b6:99:dc:28:3d:fc:b1:
         35:cc:cc:d3:38:dc:1d:9c:00:bb:15:e8:38:e5:d6:7d:4e:ba:
         79:42:c5:8c:a2:06:0b:d5:43:7c:97:35:8f:8e:bf:0f:ea:90:
         57:cb:6b:9a:c0:7b:07:28:7c:13:e0:dd:b2:6e:35:72:df:67:
         bc:09:e7:e7:8b:5b:76:b3:ec:82:5f:78:05:40:a0:4d:9c:7e:
         a6:49:39:a6:2a:27:16:80:06:10:bb:44:42:db:75:07:e7:d0:
         3b:7a:6f:b7:d5:4a:51:5a:18:99:4c:63:89:b9:56:c8:7b:5c:
         90:ec:0c:c7:91:69:d0:91:00:70:1b:31:91:35:73:7e:a3:e3:
         98:0f:02:cb:2f:e9:13:79:94:7f:e9:a7:1d:5c:85:1a:25:1f:
         d3:3f:94:3d:11:02:d7:f6:fa:6f:bf:ea:18:6e:0b:a1:c0:7a:
         87:e0:7d:46:41:93:25:a4:f8:d1:d0:c0:f7:80:68:6b:f9:d7:
         9f:9d:84:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:02:57 2026 by rpki-client