Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/edd59b08-3eec-38b2-82d0-f845c5a1dfeb.roa
File:                     edd59b08-3eec-38b2-82d0-f845c5a1dfeb.roa (raw, json)
Hash identifier:          llslrfc35xZDcOhmn0WZzZUiAGsX/QN4G//2fVp9M9E=
Subject key identifier:   70:B7:62:9B:9F:3B:E1:4C:F1:00:94:9B:7D:8B:2B:44:81:71:64:D2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F497489212796DEE5C8425C50
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/edd59b08-3eec-38b2-82d0-f845c5a1dfeb.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     400536
IP address blocks:        142.252.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:89:21:27:96:de:e5:c8:42:5c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6968a196-ea15-4cfd-acf0-76f5e240fe0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cc:27:d6:3c:14:94:0f:2c:43:89:44:7e:90:
                    d0:1c:fa:e6:16:70:3e:4b:74:f2:b0:f5:1b:11:e7:
                    c0:ec:5c:26:c3:70:0c:da:55:5e:f1:eb:f6:b8:2f:
                    aa:10:5e:5b:de:f2:df:7c:4c:ec:19:2d:36:9d:27:
                    ff:06:29:98:cf:7f:49:8e:03:45:0d:94:2f:32:be:
                    e4:22:07:02:f7:08:a2:d1:94:f8:3a:a7:8d:e0:d3:
                    b1:f9:2b:14:05:ff:fd:46:db:27:19:51:35:12:b3:
                    40:f3:e1:5e:9e:e8:37:b6:7b:6a:95:ae:01:02:10:
                    3e:0c:cf:af:45:f4:e7:d7:82:38:f5:19:a4:bc:b1:
                    db:93:1e:70:12:1a:83:59:1a:ab:fd:a2:b7:4a:b5:
                    61:92:49:aa:97:d2:81:5d:b5:77:e7:d2:2b:9c:56:
                    46:22:44:fa:69:c3:47:84:63:74:32:eb:de:28:72:
                    75:e6:1a:11:e1:fe:09:d7:18:d3:19:3e:90:5e:70:
                    ce:74:e5:c0:e1:0a:4a:96:9b:38:2f:0f:4a:00:04:
                    15:a3:2f:1a:04:da:ca:23:1b:75:f2:81:2d:60:41:
                    09:fc:7b:4f:0c:2f:8f:7d:85:83:ef:7a:4b:f1:5d:
                    6f:44:af:1f:20:53:7a:4a:d9:8f:ce:05:5f:65:7d:
                    c5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B7:62:9B:9F:3B:E1:4C:F1:00:94:9B:7D:8B:2B:44:81:71:64:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/edd59b08-3eec-38b2-82d0-f845c5a1dfeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:70:f9:28:6b:25:0f:f3:c5:f5:20:6e:27:d0:4f:58:35:62:
         58:09:ed:cb:73:d9:19:15:20:61:0b:8b:a0:fb:37:4f:bb:90:
         2a:f8:a7:8e:d7:ab:5f:39:95:a9:19:df:91:f9:1d:97:4f:0b:
         dc:52:a2:e8:77:4a:89:cd:a2:fb:1d:89:d0:01:af:ce:15:89:
         ff:b6:1f:68:9d:e6:95:83:88:f0:aa:e5:2d:49:b3:ba:00:cf:
         70:0c:19:da:87:98:87:f0:68:0c:27:e1:b1:28:86:26:94:6c:
         35:33:da:6b:f5:e2:3f:e8:3c:5c:22:40:35:c3:bd:19:6e:ea:
         9c:5d:8c:31:d7:88:21:ae:e9:ec:93:70:a2:83:fe:e6:26:68:
         fa:f3:ab:5a:25:b2:66:9d:d7:e1:11:e0:09:de:f0:c2:41:31:
         41:91:86:44:69:53:45:12:bc:db:98:51:ba:d0:e9:dc:37:07:
         32:6b:b5:a5:56:c0:52:1e:2b:ff:dd:32:92:f1:cd:3c:d1:49:
         27:eb:4a:0e:d1:b4:07:53:4f:b6:8f:44:34:5b:b1:5c:6d:c1:
         6b:ce:f4:14:e8:83:dd:2c:80:2b:8a:3c:e2:f3:57:6a:14:95:
         7e:1e:0e:40:69:85:56:56:cb:99:27:74:0e:70:1d:7b:c7:eb:
         fc:03:31:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:56:06 2026 by rpki-client