Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a0e263ca-22e6-3ebd-be7c-883e09848990.roa
File:                     a0e263ca-22e6-3ebd-be7c-883e09848990.roa (raw, json)
Hash identifier:          n8wR15S0WZLqiEkONH5g2RiCgpiwGMUESthbeEV6LnA=
Subject key identifier:   30:48:A1:1F:E9:F9:60:68:37:0B:05:0F:BA:75:EE:B9:05:5F:8D:61
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B64CE782086BDF0A103D84A80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a0e263ca-22e6-3ebd-be7c-883e09848990.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     44559
IP address blocks:        142.252.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:78:20:86:bd:f0:a1:03:d8:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=ecdc24c6-91af-4a0e-ba85-7295a6752612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:04:53:3c:69:5a:bf:21:72:de:94:88:5d:be:
                    eb:e1:f0:64:b2:63:e0:bb:83:24:f6:0f:23:58:eb:
                    15:fe:64:5e:19:9e:7d:e2:69:ae:3a:ee:2e:b7:3d:
                    2b:5f:0d:59:5d:44:b5:64:29:ce:d4:8f:8e:a0:70:
                    2b:23:c6:37:c5:a4:fc:9e:57:08:a7:12:09:07:93:
                    83:38:19:a6:af:0b:c9:47:d6:26:ac:0a:7f:b8:d6:
                    0c:48:68:43:db:ff:db:00:83:3e:f2:57:11:fe:d3:
                    df:2f:4a:f0:44:c6:ce:7c:74:3f:60:d3:f1:b2:01:
                    21:f7:96:a7:06:bc:90:88:a4:35:6d:e1:7e:22:b5:
                    19:7c:1a:01:6c:37:66:ec:87:d2:f2:45:46:c4:04:
                    59:fc:03:c0:ef:2d:bc:f0:42:1c:e9:ca:4c:f8:86:
                    d1:c9:76:50:c7:20:cc:11:53:58:40:19:84:51:81:
                    49:e0:05:3c:38:ee:e1:d1:46:2d:46:57:c3:08:33:
                    32:b6:e7:10:a6:c1:3e:e7:fd:29:1c:f9:6f:72:db:
                    e9:1e:d4:e4:91:85:68:76:6c:92:fc:f7:3b:80:8a:
                    9e:60:6b:d8:fe:ad:c7:7e:ed:4f:b5:f1:35:fb:ca:
                    67:2a:c0:48:d0:84:d5:48:e8:c1:d9:42:fc:32:09:
                    9a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:48:A1:1F:E9:F9:60:68:37:0B:05:0F:BA:75:EE:B9:05:5F:8D:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a0e263ca-22e6-3ebd-be7c-883e09848990.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:6b:c9:b1:dd:df:40:71:ba:82:1a:bc:03:a2:4e:44:ae:f9:
         91:ce:e9:98:23:1a:7a:e0:5a:bc:7a:95:6a:2c:d1:c1:fa:08:
         b7:c2:87:6c:5a:95:e2:d1:49:21:78:a3:11:f1:f9:65:29:5a:
         50:4d:c9:07:c0:e0:8c:90:4a:1d:e7:db:5a:da:c7:3b:73:a1:
         ca:4c:91:52:16:b8:08:da:6f:9d:36:e5:e8:02:35:0e:5b:42:
         67:79:5a:b2:56:9d:7e:8d:28:a0:b6:08:7d:83:75:24:d0:3a:
         8c:5c:51:fd:ea:6a:51:67:f5:f2:6d:c1:fb:4e:42:7e:c2:28:
         2f:47:f2:ed:3f:4d:19:aa:e2:ad:cb:18:0b:7d:a7:24:5a:66:
         48:b2:68:f8:34:a8:73:c7:b4:66:3f:f5:46:8e:60:a4:7f:af:
         df:62:79:f8:16:26:73:a5:45:62:79:5c:c6:b1:f0:87:ae:00:
         a1:aa:4d:e9:ed:00:4d:ae:bd:ba:02:cf:16:bd:80:c3:8e:6b:
         10:ed:47:f5:13:2c:cc:39:cb:13:cb:07:2f:97:9e:4f:79:13:
         00:d5:6b:60:df:fb:ec:51:a7:76:3a:a5:1e:6f:46:04:1a:86:
         95:6c:7b:89:c3:95:d8:a1:6e:e3:f5:0b:43:4a:d1:38:1d:62:
         52:4f:f1:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzngghr3woQPYSoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
ZWNkYzI0YzYtOTFhZi00YTBlLWJhODUtNzI5NWE2NzUyNjEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQRTPGlavyFy3pSIXb7r4fBksmPgu4Mk9g8j
WOsV/mReGZ594mmuOu4utz0rXw1ZXUS1ZCnO1I+OoHArI8Y3xaT8nlcIpxIJB5OD
OBmmrwvJR9YmrAp/uNYMSGhD2//bAIM+8lcR/tPfL0rwRMbOfHQ/YNPxsgEh95an
BryQiKQ1beF+IrUZfBoBbDdm7IfS8kVGxARZ/APA7y288EIc6cpM+IbRyXZQxyDM
EVNYQBmEUYFJ4AU8OO7h0UYtRlfDCDMytucQpsE+5/0pHPlvctvpHtTkkYVodmyS
/Pc7gIqeYGvY/q3Hfu1PtfE1+8pnKsBI0ITVSOjB2UL8MgmaHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDBIoR/p+WBoNwsFD7p17rkFX41hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTBlMjYzY2EtMjJlNi0z
ZWJkLWJlN2MtODgzZTA5ODQ4OTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvxWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABJrybHd30BxuoIavAOiTkSu+ZHO6ZgjGnrgWrx6lWos0cH6CLfCh2xa
leLRSSF4oxHx+WUpWlBNyQfA4IyQSh3n21raxztzocpMkVIWuAjab5025egCNQ5b
Qmd5WrJWnX6NKKC2CH2DdSTQOoxcUf3qalFn9fJtwftOQn7CKC9H8u0/TRmq4q3L
GAt9pyRaZkiyaPg0qHPHtGY/9UaOYKR/r99iefgWJnOlRWJ5XMax8IeuAKGqTent
AE2uvboCzxa9gMOOaxDtR/UTLMw5yxPLBy+Xnk95EwDVa2Df++xRp3Y6pR5vRgQa
hpVse4nDldihbuP1C0NK0TgdYlJP8cU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:29:57 2025 by rpki-client