Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/32ba1754-5345-3aa9-bc5d-397699fb7af3.roa
File:                     32ba1754-5345-3aa9-bc5d-397699fb7af3.roa (raw, json)
Hash identifier:          cBmKlM1rUe5A8hkplknan0iawsANF0Otd66LwS03/hE=
Subject key identifier:   28:1B:FE:8F:2B:37:3D:00:4A:AE:EF:87:FC:68:09:F5:C3:90:C7:94
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D0217BC699DFB1FD825EE3C00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/32ba1754-5345-3aa9-bc5d-397699fb7af3.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     18779
IP address blocks:        142.252.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:bc:69:9d:fb:1f:d8:25:ee:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=e1bed14b-89fa-4eaa-aa5b-ceb83cbcf07b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:64:3c:d7:91:a2:6a:7e:40:1a:55:96:12:c6:
                    4f:cd:3d:02:8f:f5:a1:a1:ec:1d:36:79:06:b1:0f:
                    72:a6:74:56:9f:16:f7:3e:c7:d6:c4:a9:97:c0:86:
                    cf:a7:bc:46:3f:d1:bd:4d:a9:64:f9:16:e6:22:65:
                    22:85:94:b8:10:71:15:d5:c8:cf:34:bb:47:18:0f:
                    65:bb:52:5c:b5:73:c6:3f:d4:4e:57:5c:89:c6:0e:
                    e3:a9:b8:82:81:98:d1:56:36:8d:6b:75:0a:b6:79:
                    aa:7e:1d:68:84:7a:64:23:8b:62:15:06:da:8a:f9:
                    f2:c5:9b:8c:3c:9c:f0:8c:cd:23:54:b2:09:3c:c2:
                    96:a9:10:59:67:ef:49:9c:e4:ee:34:b1:c4:48:a2:
                    8c:bc:5c:ea:70:53:3d:cd:a5:f0:be:8c:da:1f:03:
                    00:c0:ae:8d:58:af:a8:5b:d5:ae:be:7b:7d:16:61:
                    d7:9a:9d:d9:8e:b9:23:d4:d8:2e:76:e4:b5:fd:a6:
                    cb:a6:fd:85:3e:a5:1e:6e:56:d4:f7:26:2f:0d:01:
                    1c:bb:b0:d4:dd:73:63:22:1a:fa:b0:24:d6:0c:d3:
                    e9:a3:f6:7c:ac:5d:70:fb:94:fa:00:63:8f:cf:1f:
                    53:20:11:b4:53:e1:ac:e3:7c:3a:19:9d:dd:ed:d6:
                    ab:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:1B:FE:8F:2B:37:3D:00:4A:AE:EF:87:FC:68:09:F5:C3:90:C7:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/32ba1754-5345-3aa9-bc5d-397699fb7af3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:5b:1b:68:e0:70:5f:4a:36:38:2d:db:0b:55:64:db:c5:40:
         64:4e:27:06:4d:91:e7:e2:c0:fd:8c:57:e9:e0:e0:8d:2e:f3:
         90:b2:52:de:d2:45:d9:ec:15:6a:82:8a:0d:94:93:e5:a8:5d:
         3d:17:8f:b5:a2:ac:5a:e7:39:62:7d:a5:40:15:c5:97:5a:83:
         9e:39:0f:11:1e:df:98:54:3a:ba:87:e2:7d:6c:8b:6a:a0:e2:
         3c:42:1a:33:3e:db:de:80:57:03:f1:f3:47:49:68:35:bf:46:
         35:36:7b:cc:a5:19:be:39:07:27:ed:ba:ff:d1:be:e2:5a:f0:
         b8:7e:d4:e3:93:11:0d:c2:2c:97:f2:6c:65:84:34:d6:05:b4:
         b3:d3:1a:e4:14:dd:76:d7:da:96:db:4e:80:27:20:cd:20:0f:
         44:82:2b:ea:5b:2b:9b:fe:67:78:b1:24:81:8f:d0:5e:93:e5:
         e0:46:5e:54:83:4b:95:ff:e5:b0:a1:67:40:ae:a1:74:f8:43:
         cd:c2:ac:c9:fd:ce:25:b1:0b:cc:6e:ab:7a:7c:c5:ea:38:96:
         07:99:8e:03:aa:46:8d:b3:ac:ff:20:ce:55:19:a6:52:18:a3:
         23:08:d9:59:e2:17:5d:a2:5d:6b:53:37:90:72:d5:3c:7c:ca:
         b5:53:32:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF7xpnfsf2CXuPAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk
ZTFiZWQxNGItODlmYS00ZWFhLWFhNWItY2ViODNjYmNmMDdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGQ815Gian5AGlWWEsZPzT0Cj/WhoewdNnkG
sQ9ypnRWnxb3PsfWxKmXwIbPp7xGP9G9Talk+RbmImUihZS4EHEV1cjPNLtHGA9l
u1JctXPGP9ROV1yJxg7jqbiCgZjRVjaNa3UKtnmqfh1ohHpkI4tiFQbaivnyxZuM
PJzwjM0jVLIJPMKWqRBZZ+9JnOTuNLHESKKMvFzqcFM9zaXwvozaHwMAwK6NWK+o
W9Wuvnt9FmHXmp3Zjrkj1NguduS1/abLpv2FPqUeblbU9yYvDQEcu7DU3XNjIhr6
sCTWDNPpo/Z8rF1w+5T6AGOPzx9TIBG0U+Gs43w6GZ3d7darxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCgb/o8rNz0ASq7vh/xoCfXDkMeUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMzJiYTE3NTQtNTM0NS0z
YWE5LWJjNWQtMzk3Njk5ZmI3YWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvy7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD1bG2jgcF9KNjgt2wtVZNvFQGROJwZNkefiwP2MV+ng4I0u85CyUt7S
RdnsFWqCig2Uk+WoXT0Xj7WirFrnOWJ9pUAVxZdag545DxEe35hUOrqH4n1si2qg
4jxCGjM+296AVwPx80dJaDW/RjU2e8ylGb45Byftuv/RvuJa8Lh+1OOTEQ3CLJfy
bGWENNYFtLPTGuQU3XbX2pbbToAnIM0gD0SCK+pbK5v+Z3ixJIGP0F6T5eBGXlSD
S5X/5bChZ0CuoXT4Q83CrMn9ziWxC8xuq3p8xeo4lgeZjgOqRo2zrP8gzlUZplIY
oyMI2VniF12iXWtTN5By1Tx8yrVTMqk=
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:09:44 2026 by rpki-client