Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c31600ea-80dc-355e-8b83-0bea30090d1e.roa
File:                     c31600ea-80dc-355e-8b83-0bea30090d1e.roa (raw, json)
Hash identifier:          4cYthERjQWkAKq1ZGu00qX+I5NohsLQa1vIVvRcmJoo=
Subject key identifier:   6B:52:6B:A0:6A:5E:76:7F:CB:DC:45:AA:C9:12:C7:4E:66:D0:13:7B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F51D2B597639944C92EE67D00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c31600ea-80dc-355e-8b83-0bea30090d1e.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     10557
IP address blocks:        142.252.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:b5:97:63:99:44:c9:2e:e6:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=991ffcc2-6d80-4e39-9c1e-3b0038e0887d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:19:37:1e:96:8e:1b:3c:a9:f0:4c:b2:c8:1b:
                    c9:c0:8e:c2:a5:bf:c3:68:42:63:72:c0:ba:a6:e7:
                    60:7b:10:15:4a:e1:7e:58:31:af:35:9f:1a:71:c2:
                    87:a3:21:d4:ce:6a:0c:51:8a:77:58:2a:29:0f:c8:
                    15:b3:59:c9:a2:db:e2:00:4b:76:e5:7f:cf:6d:b1:
                    36:65:2b:1c:c9:92:4a:67:06:c7:3e:af:25:55:bb:
                    e0:ca:df:d5:5c:75:e0:2f:0b:f5:51:53:40:f5:73:
                    ff:cd:e6:c8:a9:f4:b9:94:01:e8:b2:85:22:1d:89:
                    73:bf:be:98:dd:47:d5:24:cd:d4:aa:38:fb:93:90:
                    e6:13:1d:fa:ed:6e:8c:b5:a2:c9:2f:de:ff:bd:4e:
                    21:75:19:03:02:ac:28:86:8d:73:8d:ad:9e:90:20:
                    3d:42:e0:54:5b:ff:ef:de:25:8a:32:75:ad:a7:a0:
                    da:43:86:17:16:d7:74:8e:0a:86:a5:0a:0f:fb:c6:
                    cd:70:c0:f9:a9:5d:0b:c5:3a:2b:8d:70:ae:b6:b1:
                    73:26:24:6f:e4:d4:f0:b3:d3:67:bc:d2:1a:c9:9d:
                    42:34:0c:af:19:30:e9:fd:1f:4f:39:c9:cc:d2:be:
                    fd:f4:82:71:c1:fc:fe:6e:60:b9:fd:72:8a:83:79:
                    14:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:52:6B:A0:6A:5E:76:7F:CB:DC:45:AA:C9:12:C7:4E:66:D0:13:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c31600ea-80dc-355e-8b83-0bea30090d1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:58:bb:a0:69:dd:10:1c:ce:69:47:ef:3c:12:0f:51:ba:44:
         7f:99:67:ea:d8:de:7c:c1:f8:4d:af:d7:7e:03:d0:28:c8:c6:
         b3:cf:d6:47:ca:e3:91:bb:74:8b:54:c9:36:18:2e:e2:d3:4b:
         51:fd:80:0e:97:95:fb:45:3a:74:c9:f2:ca:c6:52:63:49:5e:
         8d:56:87:5c:41:58:24:b4:77:9c:b6:17:0b:43:ef:43:44:cf:
         f0:45:aa:47:91:96:af:06:43:a7:62:5a:d8:c2:24:7c:50:e1:
         d5:5e:68:c2:92:0f:00:70:ee:32:70:53:32:4c:82:f1:85:1d:
         85:0a:20:f2:6e:24:76:d5:24:fd:3c:cc:24:f9:cb:bc:78:4a:
         34:65:16:9b:6a:85:a3:25:5c:76:5f:5a:1d:ae:1d:9f:73:4d:
         af:05:c1:a7:6f:c7:55:2d:96:94:24:30:d1:f1:38:61:9c:0e:
         23:40:2c:5f:3f:55:f3:1a:34:34:ba:b5:c6:20:73:34:3f:13:
         7f:97:f3:fa:8b:e3:1d:d3:36:d9:41:cb:20:68:c2:83:13:d8:
         1c:2f:40:1c:cf:77:2c:c2:77:e0:b3:9e:9b:6e:a1:a1:80:f3:
         c4:62:51:73:45:19:03:f9:b7:9c:0c:79:8b:13:1b:1f:97:29:
         e3:22:a3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:47:14 2026 by rpki-client