Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c433561-238c-3437-a13b-a497bd5578dc.roa
File:                     3c433561-238c-3437-a13b-a497bd5578dc.roa (raw, json)
Hash identifier:          rmEttdEPUNFEi1OFGX9LVMWCXWtsc1tBbbMObm95RbU=
Subject key identifier:   36:5B:72:BC:F8:25:F3:FC:93:03:BA:45:0A:B1:EB:E4:82:92:C7:3B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D0217A3CEF401AC7F88962980
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c433561-238c-3437-a13b-a497bd5578dc.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     18779
IP address blocks:        142.252.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:a3:ce:f4:01:ac:7f:88:96:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=e1218e2a-c2ce-4061-8ab3-b7aa1720afdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2e:8d:f9:6d:31:dd:c6:f6:23:5b:34:1e:53:
                    3f:f7:a2:bd:14:a9:30:dc:49:78:28:74:fb:c3:a9:
                    08:63:13:da:b4:cf:82:b2:48:b4:61:69:17:23:d8:
                    96:f6:3a:e1:c9:9e:56:8e:b6:db:3c:03:d6:b5:ec:
                    4b:c7:7d:f9:5f:cc:44:51:17:9b:3e:ca:29:05:66:
                    72:a0:eb:74:6c:97:cd:ee:2a:c2:e8:5e:34:50:06:
                    17:83:dd:6b:d7:19:9b:bc:68:b3:ac:92:0f:02:bc:
                    12:ee:6a:09:d8:3c:d2:39:3b:2f:e3:3a:b8:96:10:
                    71:4d:f4:20:81:12:73:65:72:b9:d8:af:9d:bd:00:
                    7e:c9:8d:b6:0b:37:ac:ff:52:9f:c8:e4:32:0d:02:
                    0b:ff:96:75:18:18:68:85:d4:ad:67:12:b1:a1:f9:
                    21:8c:d4:5c:f8:1b:46:80:c5:5a:af:aa:97:ee:75:
                    21:8d:82:f8:9d:48:22:f9:cf:57:9e:e9:ce:0a:c4:
                    ff:99:a1:eb:51:31:b9:ab:c9:e3:ef:60:98:ce:44:
                    97:5e:21:c3:47:5b:6d:e2:29:dc:fc:0e:56:95:b7:
                    cb:8e:6a:65:17:91:63:c1:d5:f0:7a:72:07:16:3f:
                    94:93:a9:16:33:19:b7:e6:cc:f7:f3:c1:2f:2c:f2:
                    be:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5B:72:BC:F8:25:F3:FC:93:03:BA:45:0A:B1:EB:E4:82:92:C7:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c433561-238c-3437-a13b-a497bd5578dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:49:c7:f3:3e:76:a3:ef:65:54:13:42:b6:0e:d7:13:81:48:
         f1:5c:51:07:fc:ad:86:47:81:d4:e9:63:da:5e:31:2a:82:82:
         22:b9:07:a1:ee:46:b8:ea:9b:9a:b7:28:e7:30:2e:95:42:df:
         6b:da:0a:86:37:8b:c6:20:2f:68:dc:3e:bc:c2:e0:4c:32:33:
         11:a7:dd:15:09:ed:77:f6:a8:ab:a7:7d:de:89:d4:c8:92:ba:
         10:fb:23:32:a9:d5:58:05:88:18:d9:ed:6c:13:b7:76:b6:be:
         ef:d9:03:f3:03:51:2c:25:5f:94:69:eb:89:ef:eb:96:31:1a:
         37:4c:86:35:b5:10:51:89:9f:8a:1d:06:d6:10:a7:84:ce:77:
         df:ab:c4:cf:74:54:5e:ed:1c:82:f3:4b:89:48:34:0d:c2:09:
         ee:a5:64:52:f2:d7:b2:d3:ef:e5:75:ef:54:c9:53:ce:ff:ed:
         72:1f:a4:32:7f:cb:52:c4:71:ef:3f:34:9f:7e:42:35:96:ed:
         e5:cf:bc:1d:a5:ef:41:8b:1c:5a:39:85:56:e5:94:7c:fa:6c:
         e0:ea:b3:f6:c8:68:8b:ba:74:52:d7:64:fb:0b:6f:84:4c:4e:
         59:ec:62:f1:d0:a6:a5:57:fd:ae:91:ce:8a:6b:9d:af:45:78:
         42:92:b7:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF6PO9AGsf4iWKYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk
ZTEyMThlMmEtYzJjZS00MDYxLThhYjMtYjdhYTE3MjBhZmRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS6N+W0x3cb2I1s0HlM/96K9FKkw3El4KHT7
w6kIYxPatM+Cski0YWkXI9iW9jrhyZ5WjrbbPAPWtexLx335X8xEURebPsopBWZy
oOt0bJfN7irC6F40UAYXg91r1xmbvGizrJIPArwS7moJ2DzSOTsv4zq4lhBxTfQg
gRJzZXK52K+dvQB+yY22Czes/1KfyOQyDQIL/5Z1GBhohdStZxKxofkhjNRc+BtG
gMVar6qX7nUhjYL4nUgi+c9XnunOCsT/maHrUTG5q8nj72CYzkSXXiHDR1tt4inc
/A5WlbfLjmplF5FjwdXwenIHFj+Uk6kWMxm35sz388EvLPK+wwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDZbcrz4JfP8kwO6RQqx6+SCksc7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2M0MzM1NjEtMjM4Yy0z
NDM3LWExM2ItYTQ5N2JkNTU3OGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvy8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGJJx/M+dqPvZVQTQrYO1xOBSPFcUQf8rYZHgdTpY9peMSqCgiK5B6Hu
Rrjqm5q3KOcwLpVC32vaCoY3i8YgL2jcPrzC4EwyMxGn3RUJ7Xf2qKunfd6J1MiS
uhD7IzKp1VgFiBjZ7WwTt3a2vu/ZA/MDUSwlX5Rp64nv65YxGjdMhjW1EFGJn4od
BtYQp4TOd9+rxM90VF7tHILzS4lINA3CCe6lZFLy17LT7+V171TJU87/7XIfpDJ/
y1LEce8/NJ9+QjWW7eXPvB2l70GLHFo5hVbllHz6bODqs/bIaIu6dFLXZPsLb4RM
TlnsYvHQpqVX/a6Rzoprna9FeEKSt/k=
-----END CERTIFICATE-----
Generated at Sun Mar 1 19:23:03 2026 by rpki-client