Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/67a112cc-590b-320d-bbae-89b384815cd8.roa
File:                     67a112cc-590b-320d-bbae-89b384815cd8.roa (raw, json)
Hash identifier:          gJcVCZvsayZJVpNBkT6JkcptDzPbvB7MYsgyqU4KAhE=
Subject key identifier:   FD:C7:E6:49:00:02:8B:D6:D9:82:A9:71:CC:13:EC:5A:DE:32:42:50
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F3A17C7BD66752A5ED1BDB400
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/67a112cc-590b-320d-bbae-89b384815cd8.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     49791
IP address blocks:        142.252.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:c7:bd:66:75:2a:5e:d1:bd:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=fade799c-b600-4bed-b1ff-cfb294a13d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8d:3c:5c:b2:3d:de:b0:f1:bc:16:14:e0:15:
                    ec:43:9c:70:e7:3d:d2:8c:20:a8:ef:c9:4e:d7:1c:
                    82:8b:8e:04:21:b2:b3:ef:b5:74:e0:9d:7b:fa:7b:
                    b8:cf:c4:59:3b:e3:b1:3c:49:68:42:a3:10:43:f2:
                    c8:21:37:0f:52:39:6b:dd:36:dc:65:82:aa:08:62:
                    78:ad:e4:1b:0b:44:25:1f:63:59:62:bb:19:40:43:
                    98:ba:c8:20:8c:bf:50:d3:9c:59:21:7c:33:23:8f:
                    d5:50:f2:8e:14:65:d0:20:9f:8e:f4:5c:a1:ea:13:
                    86:7e:1f:57:a3:80:2f:51:6a:58:71:5d:db:2e:7b:
                    40:5e:f9:97:88:01:49:13:47:e7:db:b3:be:63:54:
                    35:12:eb:1d:4c:d4:5d:ae:37:5b:3d:29:49:2a:03:
                    ff:aa:f5:e8:dd:20:44:b6:c5:44:ec:c5:06:b3:cb:
                    59:24:59:0d:9c:e6:8d:9b:43:05:6e:40:d5:cd:c1:
                    4c:2d:2f:f2:f5:9e:d7:1f:53:42:53:8b:78:b8:1c:
                    24:e9:74:54:31:04:bb:b3:42:71:f1:66:8b:03:15:
                    4c:b6:7e:79:8e:71:48:2f:36:8b:f3:01:4f:e1:45:
                    cd:32:b3:5d:d4:a8:04:47:79:1f:65:e3:8f:ef:bc:
                    7c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C7:E6:49:00:02:8B:D6:D9:82:A9:71:CC:13:EC:5A:DE:32:42:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/67a112cc-590b-320d-bbae-89b384815cd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:43:52:1b:43:a9:8e:87:83:95:9d:53:3a:3c:cb:b9:d7:3d:
         f1:14:60:6c:29:75:b3:84:63:a6:8a:2e:32:a9:b1:8a:fd:be:
         5b:6f:ae:e3:bf:0c:de:cb:90:f2:90:2f:1e:39:c3:2c:73:e3:
         70:15:c2:71:91:f6:25:ff:a6:0f:41:17:fc:85:e3:1f:27:0a:
         b1:50:a5:70:c6:f5:f1:b9:10:d0:01:6d:e9:2c:02:70:fd:4a:
         7f:a1:46:f7:f4:02:b2:41:47:51:88:f5:cc:ce:a8:d1:f2:32:
         29:28:4f:87:1e:32:12:52:99:2a:cb:55:2c:e5:51:43:a3:84:
         0b:1c:1c:7d:a2:6a:d1:15:60:8e:eb:6b:44:d0:0d:ba:4c:ba:
         9f:41:ed:74:e9:76:a5:df:07:ae:32:bb:01:35:fa:b8:98:3d:
         e3:59:9c:eb:dc:31:f5:e9:59:f3:6f:a4:00:d0:c8:25:65:10:
         a7:a6:61:78:2d:30:2f:3f:89:8b:65:32:d9:53:90:e9:32:a2:
         08:38:fd:bb:11:61:cd:70:eb:b1:64:69:fe:f5:b3:7c:a0:cc:
         ce:c0:b1:47:8a:74:9d:53:4a:05:e5:7e:06:c7:dd:71:47:37:
         75:d9:1e:97:9d:79:5c:c0:84:4e:88:2f:41:3e:87:38:21:b5:
         1d:bd:14:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F8e9ZnUqXtG9tAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk
ZmFkZTc5OWMtYjYwMC00YmVkLWIxZmYtY2ZiMjk0YTEzZDNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3408XLI93rDxvBYU4BXsQ5xw5z3SjCCo78lO
1xyCi44EIbKz77V04J17+nu4z8RZO+OxPEloQqMQQ/LIITcPUjlr3TbcZYKqCGJ4
reQbC0QlH2NZYrsZQEOYusggjL9Q05xZIXwzI4/VUPKOFGXQIJ+O9Fyh6hOGfh9X
o4AvUWpYcV3bLntAXvmXiAFJE0fn27O+Y1Q1EusdTNRdrjdbPSlJKgP/qvXo3SBE
tsVE7MUGs8tZJFkNnOaNm0MFbkDVzcFMLS/y9Z7XH1NCU4t4uBwk6XRUMQS7s0Jx
8WaLAxVMtn55jnFILzaL8wFP4UXNMrNd1KgER3kfZeOP77x8mwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP3H5kkAAovW2YKpccwT7FreMkJQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNjdhMTEyY2MtNTkwYi0z
MjBkLWJiYWUtODliMzg0ODE1Y2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvzcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADdDUhtDqY6Hg5WdUzo8y7nXPfEUYGwpdbOEY6aKLjKpsYr9vltvruO/
DN7LkPKQLx45wyxz43AVwnGR9iX/pg9BF/yF4x8nCrFQpXDG9fG5ENABbeksAnD9
Sn+hRvf0ArJBR1GI9czOqNHyMikoT4ceMhJSmSrLVSzlUUOjhAscHH2iatEVYI7r
a0TQDbpMup9B7XTpdqXfB64yuwE1+riYPeNZnOvcMfXpWfNvpADQyCVlEKemYXgt
MC8/iYtlMtlTkOkyogg4/bsRYc1w67Fkaf71s3ygzM7AsUeKdJ1TSgXlfgbH3XFH
N3XZHpedeVzAhE6IL0E+hzghtR29FLQ=
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:17:21 2026 by rpki-client