Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9d8a260b-54ff-316d-87fc-a423f21172c5.roa
File:                     9d8a260b-54ff-316d-87fc-a423f21172c5.roa (raw, json)
Hash identifier:          ciAc6sVAW3mKHDgjBblC9XZ/MtScnFGe/mjAoR/nAbI=
Subject key identifier:   91:BC:39:D7:88:85:EC:B8:FA:0A:4C:93:EB:41:04:BB:DE:D4:EB:A1
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F58CD5D315CC39F5976D7D220
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9d8a260b-54ff-316d-87fc-a423f21172c5.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     62240
IP address blocks:        142.252.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:5d:31:5c:c3:9f:59:76:d7:d2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=7a765a8a-1bcc-439a-a335-0385a81c11a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0d:77:15:27:5a:4d:ab:8d:44:81:67:b6:ba:
                    72:a6:b5:e7:41:73:7d:09:20:db:c6:92:09:0d:13:
                    e6:f2:69:11:0d:56:d3:58:d6:9a:de:9f:4b:4a:8e:
                    e5:1b:95:f3:d5:bd:ce:fb:fe:a3:26:bb:8e:2a:42:
                    9f:7f:44:9a:c5:11:c6:b3:48:98:df:53:42:cf:74:
                    69:1e:7e:4f:88:45:d4:6b:f2:78:f5:be:39:67:35:
                    6d:ba:2f:af:13:79:1e:87:ab:9e:2d:31:7b:ed:24:
                    eb:da:cb:af:7c:89:61:f5:98:49:53:f6:78:9f:a0:
                    53:3d:f4:af:f2:d4:54:fa:ba:ea:79:97:db:55:93:
                    12:bf:f6:55:b7:1f:d9:5d:44:6f:aa:d8:e2:91:45:
                    fb:17:d7:8a:63:24:40:73:73:6c:ca:ee:4f:60:17:
                    57:d8:74:7a:0f:b4:ac:7d:f0:bf:b5:2b:4e:d3:91:
                    1a:5e:df:a7:68:e8:3f:70:6d:ac:be:68:87:51:69:
                    b7:8a:80:bf:e2:cd:d7:b3:c3:5c:c0:a9:45:4c:46:
                    d1:91:b5:f9:91:91:b4:19:5d:df:8c:51:8e:fa:9a:
                    49:e6:07:3c:b7:ce:1c:34:15:d0:18:8a:cd:80:7f:
                    39:97:0b:b7:74:1e:45:db:cc:4b:5b:ac:2f:1f:08:
                    97:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BC:39:D7:88:85:EC:B8:FA:0A:4C:93:EB:41:04:BB:DE:D4:EB:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9d8a260b-54ff-316d-87fc-a423f21172c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:eb:87:74:ff:69:d9:53:80:4c:f9:6d:a7:83:51:f6:54:60:
         f1:98:b1:7e:c5:9b:c7:7b:14:6d:a1:6e:fa:90:3f:57:8d:3c:
         81:9a:ea:5e:9e:f1:9f:f9:88:3e:8d:a5:7a:6c:c0:d0:65:2f:
         df:62:1c:fb:db:65:39:9a:58:a3:0e:fc:77:64:b3:10:50:d9:
         d1:57:a0:81:bb:23:4e:ed:d5:e3:65:15:85:f5:4f:bd:4c:97:
         00:3a:da:eb:9b:14:68:37:8f:b1:aa:fd:5d:1b:e8:49:ca:a1:
         87:80:e0:3b:2e:41:9c:41:6e:88:3d:23:64:8f:9f:06:a5:db:
         f5:a2:d3:3f:19:ca:f4:62:ae:48:47:97:20:b7:b1:ae:1f:e1:
         9d:4b:a3:ae:d1:e3:e4:83:b9:36:3d:3f:a6:60:54:da:94:f9:
         67:c8:b0:f9:be:cd:dd:84:a6:96:a4:9d:1f:4b:a7:ec:93:13:
         c8:1c:64:51:90:a1:af:f9:a1:90:e6:73:a1:91:10:f7:61:99:
         01:6e:a0:17:b5:20:84:78:a0:eb:fc:96:f8:f8:13:62:d4:76:
         e7:36:f6:13:10:4b:ab:07:33:80:7f:4a:52:4a:b7:05:56:4d:
         ff:76:2e:a3:e3:c6:8c:3a:49:92:d8:8a:7d:57:8e:2c:77:cf:
         ef:b2:b9:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzV0xXMOfWXbX0iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk
N2E3NjVhOGEtMWJjYy00MzlhLWEzMzUtMDM4NWE4MWMxMWE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw13FSdaTauNRIFntrpyprXnQXN9CSDbxpIJ
DRPm8mkRDVbTWNaa3p9LSo7lG5Xz1b3O+/6jJruOKkKff0SaxRHGs0iY31NCz3Rp
Hn5PiEXUa/J49b45ZzVtui+vE3keh6ueLTF77STr2suvfIlh9ZhJU/Z4n6BTPfSv
8tRU+rrqeZfbVZMSv/ZVtx/ZXURvqtjikUX7F9eKYyRAc3Nsyu5PYBdX2HR6D7Ss
ffC/tStO05EaXt+naOg/cG2svmiHUWm3ioC/4s3Xs8NcwKlFTEbRkbX5kZG0GV3f
jFGO+ppJ5gc8t84cNBXQGIrNgH85lwu3dB5F28xLW6wvHwiXEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJG8OdeIhey4+gpMk+tBBLve1OuhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOWQ4YTI2MGItNTRmZi0z
MTZkLTg3ZmMtYTQyM2YyMTE3MmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvxRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH/rh3T/adlTgEz5baeDUfZUYPGYsX7Fm8d7FG2hbvqQP1eNPIGa6l6e
8Z/5iD6NpXpswNBlL99iHPvbZTmaWKMO/HdksxBQ2dFXoIG7I07t1eNlFYX1T71M
lwA62uubFGg3j7Gq/V0b6EnKoYeA4DsuQZxBbog9I2SPnwal2/Wi0z8ZyvRirkhH
lyC3sa4f4Z1Lo67R4+SDuTY9P6ZgVNqU+WfIsPm+zd2EppaknR9Lp+yTE8gcZFGQ
oa/5oZDmc6GREPdhmQFuoBe1IIR4oOv8lvj4E2LUduc29hMQS6sHM4B/SlJKtwVW
Tf92LqPjxow6SZLYin1Xjix3z++yuac=
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:35:24 2026 by rpki-client