Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e1dad624-297d-3ecc-b3ce-2351ff8ee194.roa
File:                     e1dad624-297d-3ecc-b3ce-2351ff8ee194.roa (raw, json)
Hash identifier:          YCNfStq5CJjf/yA3tYa9yZdS0RLI7mg8Tni1CO4Yurw=
Subject key identifier:   68:26:9C:CD:D0:91:7E:F3:E5:BB:F6:59:A8:36:69:05:0B:55:1E:5C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D2D3F8AF51A64E059CC7296C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e1dad624-297d-3ecc-b3ce-2351ff8ee194.roa
Signing time:             Sun 15 Mar 2026 13:00:41 +0000
ROA not before:           Sun 15 Mar 2026 13:00:41 +0000
ROA not after:            Sat 13 Jun 2026 13:00:41 +0000
asID:                     10557
IP address blocks:        142.252.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2d:3f:8a:f5:1a:64:e0:59:cc:72:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 15 13:00:41 2026 GMT
            Not After : Jun 13 13:00:41 2026 GMT
        Subject: CN=7181a9ca-9195-49da-bebc-e2dfd6e6824f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fd:e6:87:d3:e9:69:c0:d5:a1:0e:f8:23:f0:
                    23:f5:5e:2a:58:e8:67:72:58:9f:94:63:b2:ec:83:
                    59:c3:6a:bc:4b:fd:98:66:ee:2d:99:6b:50:c1:df:
                    34:4e:53:d5:e0:47:e8:06:90:6b:0c:59:77:fb:fe:
                    ed:c8:46:fb:5d:17:ca:da:8e:5b:3c:ec:96:c2:ec:
                    d7:4a:0b:9b:2f:74:ad:93:bb:2d:c5:bc:84:27:10:
                    67:33:c8:aa:ca:80:2d:70:58:5a:4c:85:2a:f3:db:
                    6a:1e:b1:3c:4c:8b:f5:f2:64:3a:c8:82:8c:15:62:
                    99:0e:90:09:7b:89:7e:c4:dc:a1:a8:56:87:d2:b0:
                    5e:3b:38:81:bc:03:5b:57:33:7e:6e:dd:b9:0c:a8:
                    54:80:68:98:43:19:3f:20:83:02:80:db:b0:ee:f9:
                    68:11:d3:42:7d:2b:56:a8:44:0f:2a:df:36:42:85:
                    71:1c:5d:c9:11:ae:b6:db:b6:bb:81:50:d0:ff:99:
                    fe:95:d8:5d:4a:5b:c9:48:e0:ec:21:42:94:d1:c6:
                    d8:96:00:2f:6e:ce:39:f1:7f:30:9a:a6:8d:47:3a:
                    00:db:b5:28:e3:06:4d:d9:d6:2f:77:7f:01:6a:08:
                    05:2d:fd:95:22:c8:54:b3:f8:12:0b:85:f6:43:84:
                    b3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:26:9C:CD:D0:91:7E:F3:E5:BB:F6:59:A8:36:69:05:0B:55:1E:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e1dad624-297d-3ecc-b3ce-2351ff8ee194.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:02:b1:98:69:e5:88:53:93:95:bc:c2:4a:b4:67:72:51:c0:
         35:6a:95:87:3d:40:3a:7b:dc:66:72:bf:15:47:85:bd:0b:f6:
         65:7c:36:fe:ae:a1:c5:20:dc:0a:07:2e:00:1c:7a:61:62:1c:
         1f:1f:e8:07:68:8b:42:df:df:04:71:fe:11:a9:e4:15:4e:bc:
         1d:20:7e:8f:3d:82:b0:02:86:13:26:d9:f0:6e:9c:b6:81:9f:
         68:76:54:ab:e2:62:d3:8d:f2:4b:9e:0a:58:79:f2:7d:90:20:
         05:c3:a1:dd:49:0a:d9:59:a3:93:7b:d9:78:db:61:78:4e:b2:
         eb:32:e9:1b:a0:b5:86:ab:22:be:f4:7f:4f:39:6c:f9:1c:94:
         0f:b8:69:17:f7:c2:38:f0:5b:13:ee:35:98:b0:a9:b0:be:b7:
         8c:be:9d:73:67:27:09:e7:1f:50:32:c3:0f:0f:3a:bf:21:b7:
         df:4b:a1:3a:04:12:38:51:fb:fb:0e:7a:df:44:cb:b9:30:ed:
         c8:64:9c:e1:ff:82:33:3b:2a:8c:b7:b6:db:68:92:03:52:b9:
         68:6f:48:79:44:ac:1a:35:27:1b:71:2e:50:e2:d9:a6:3a:a1:
         eb:58:e1:27:c6:79:75:ff:47:e7:b9:63:8c:31:c7:bb:c2:22:
         74:ae:4f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:46:28 2026 by rpki-client