Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8de319d1-7dec-3966-9e27-99e94a76db29.roa
File:                     8de319d1-7dec-3966-9e27-99e94a76db29.roa (raw, json)
Hash identifier:          VDjjf8NEVG047XGp3OKETIrRZKOgXZswx3oJI822dSE=
Subject key identifier:   66:8B:C1:C8:80:F1:FA:05:17:B6:99:57:2F:7E:31:49:91:A8:AD:3C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D3D8FB38E24F5255B17E12980
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8de319d1-7dec-3966-9e27-99e94a76db29.roa
Signing time:             Sat 21 Mar 2026 09:15:25 +0000
ROA not before:           Sat 21 Mar 2026 09:15:25 +0000
ROA not after:            Fri 19 Jun 2026 09:15:25 +0000
asID:                     199853
IP address blocks:        142.252.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:8f:b3:8e:24:f5:25:5b:17:e1:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 21 09:15:25 2026 GMT
            Not After : Jun 19 09:15:25 2026 GMT
        Subject: CN=2e2c1b8c-b7d3-4b94-a2ec-6bc455125386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:81:81:0f:39:b1:cf:68:12:f3:d1:24:bf:f2:
                    a3:5d:22:c4:ee:5b:6b:0c:e6:54:2c:f7:e0:c8:d4:
                    89:27:7f:f3:7a:28:06:b4:52:9f:e5:ed:80:27:d0:
                    be:59:7c:d7:ee:2c:d3:98:0e:32:5c:dc:2e:98:46:
                    80:fc:53:c2:20:78:78:02:0e:cb:29:68:18:8a:91:
                    ea:50:13:e1:fc:af:67:8b:f7:b4:c6:a3:8a:63:9a:
                    46:61:d5:a9:ff:02:ad:0b:f1:ec:01:c6:43:cb:85:
                    86:5e:7a:2d:44:50:ed:21:1f:a1:8f:76:2e:d9:44:
                    56:b7:05:f3:b1:1c:3e:fd:e5:38:ee:75:96:72:dd:
                    b2:05:a9:4d:c8:63:c2:4e:55:cc:12:9b:19:a9:1e:
                    5c:82:82:8c:f1:d7:37:82:56:67:78:e9:36:cc:de:
                    c7:28:33:90:e1:87:4f:4d:cb:09:0c:a7:f5:62:08:
                    53:8a:45:dd:28:b5:02:97:75:0c:06:9d:75:f8:27:
                    62:74:33:1f:87:3b:09:9c:73:19:58:76:b9:66:18:
                    ea:87:eb:b1:1e:35:0c:ad:86:29:31:04:9d:f8:67:
                    64:63:c8:d2:5d:d3:4a:a5:5e:76:98:34:62:58:66:
                    91:33:36:a1:d3:db:df:ca:43:e7:20:20:8d:8f:7c:
                    9a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8B:C1:C8:80:F1:FA:05:17:B6:99:57:2F:7E:31:49:91:A8:AD:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8de319d1-7dec-3966-9e27-99e94a76db29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:8d:09:3a:e1:3d:44:c2:56:79:df:08:5f:f2:ef:aa:9f:06:
         4d:e1:49:d6:76:e8:64:b6:31:21:f7:94:8d:a4:98:b1:89:fb:
         29:0e:88:36:8e:7e:9f:b3:bf:a7:3d:96:ef:49:7f:27:7c:3b:
         f0:c2:8b:b4:a9:ce:0e:b8:85:1f:54:84:fd:2a:77:ad:63:18:
         45:21:26:b9:fa:71:1a:1b:3d:db:88:fa:1b:a1:c1:b5:dd:cf:
         9c:6e:e9:67:65:d9:e2:ec:00:de:5c:e9:4e:50:20:93:d3:9d:
         11:f7:fc:cc:fd:e4:97:af:6a:13:4d:45:ce:28:71:1b:a9:e7:
         95:7e:c0:7d:b1:91:d1:ab:d4:3d:d5:dd:4e:1c:94:dc:68:cd:
         93:8d:19:4c:69:89:c7:df:89:31:3b:4a:8a:c5:ae:83:8b:d9:
         3d:13:07:e7:49:f3:b0:2d:06:2d:21:dc:87:b3:4c:ef:92:ee:
         d8:a8:36:e4:88:1a:e9:9c:b3:f1:b0:df:cd:80:55:2c:f2:d0:
         27:84:1f:b5:88:8c:9d:e8:48:89:d9:d5:10:8e:20:50:e4:35:
         9c:2a:2c:68:b5:09:ab:a2:10:7c:02:4d:c1:8f:1c:bc:da:1a:
         9c:d3:b5:82:5e:34:c1:93:ff:51:a4:85:c8:82:e5:85:b7:fa:
         31:3d:73:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:04:52 2026 by rpki-client