Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40f220f8-666d-38bc-9193-ce9c51f944a1.roa
File:                     40f220f8-666d-38bc-9193-ce9c51f944a1.roa (raw, json)
Hash identifier:          XdVLWm3ixX0Fg4hDGPu2hwSv9Y8oZfjXWSorJnYblwg=
Subject key identifier:   3D:9C:70:45:80:CE:24:6C:8D:3B:EE:28:D6:93:E6:B4:AD:C9:C7:F1
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F549D9F106AF84AB219EDEF10
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40f220f8-666d-38bc-9193-ce9c51f944a1.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     44893
IP address blocks:        142.252.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:9f:10:6a:f8:4a:b2:19:ed:ef:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=cb4df212-be2f-4019-b850-a1952403861b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0e:06:6f:60:20:13:3d:73:66:7e:42:7b:b6:
                    89:42:b2:87:24:5c:89:3b:30:b1:f0:58:6f:42:52:
                    1e:40:5b:86:9a:11:05:a6:42:ab:cd:4e:37:bd:d6:
                    85:df:98:a0:d9:ca:88:5c:5f:10:97:c5:81:da:69:
                    a7:11:e9:7c:77:2f:b1:85:08:4c:0e:36:22:65:9e:
                    fd:f3:89:c6:a5:13:6b:65:d6:76:4d:b4:87:00:b1:
                    a2:62:44:cf:61:2d:ce:ce:cd:07:93:31:b6:2b:3e:
                    58:ab:e5:fd:bf:c3:b0:99:12:76:f7:a8:5a:21:29:
                    46:4d:83:b4:0d:d3:f5:a7:bc:a4:05:8b:aa:69:46:
                    49:eb:d4:90:e9:39:c8:3e:6d:6f:6d:d2:40:01:f8:
                    f4:e9:29:51:d4:0a:10:24:3e:56:d5:f0:82:25:e2:
                    9c:d7:07:de:95:77:bd:5d:6b:77:fe:6b:16:af:20:
                    fc:99:c7:12:05:fa:f8:42:cd:a7:d7:77:a1:e8:35:
                    41:24:b0:b6:4e:b9:84:c1:cd:49:e6:b7:1b:c9:36:
                    f1:83:92:82:aa:48:c8:dc:83:42:5f:34:49:de:05:
                    00:a0:0f:14:c1:fe:ff:4c:d0:f7:78:50:89:96:62:
                    0c:64:52:6d:07:0d:7f:54:7a:13:de:b7:29:fd:7a:
                    1f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:9C:70:45:80:CE:24:6C:8D:3B:EE:28:D6:93:E6:B4:AD:C9:C7:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40f220f8-666d-38bc-9193-ce9c51f944a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:15:f5:37:9c:38:53:42:4a:54:55:41:50:e1:97:fa:5b:9a:
         f5:69:08:8c:bf:ac:0a:59:e9:33:4a:39:0d:1b:d0:a0:4e:b2:
         63:15:5a:38:d5:df:33:38:36:48:8a:8d:35:24:fd:8d:19:27:
         8d:19:65:2b:07:ea:d2:8f:ef:cb:6a:6e:f5:a4:9d:92:7c:6e:
         9d:a7:38:65:da:5d:b9:d8:4e:13:09:a1:e0:be:66:d4:4c:60:
         14:c7:e7:5a:c6:d8:6f:9d:d5:ad:57:0f:3d:82:38:fb:fd:90:
         db:6d:fe:22:89:29:5a:77:7d:65:ff:f3:63:5a:db:22:7b:98:
         24:24:37:9f:0d:2b:35:5c:ed:fa:80:df:7b:59:c8:0a:60:67:
         5f:7d:4a:ad:72:a9:90:00:9e:b5:85:3d:39:f6:80:31:eb:96:
         96:9b:0e:38:3a:b3:7e:05:f1:ea:85:5e:2c:64:f4:4f:eb:91:
         60:75:cc:14:e3:68:c1:df:dc:95:5a:4a:15:9e:ff:f0:92:d9:
         08:db:d9:e1:03:45:4a:6d:d4:22:c3:95:8d:fe:ab:7f:58:aa:
         a8:13:d8:b4:e9:08:52:04:3c:87:e4:c4:10:c6:7f:0a:65:68:
         8c:1e:1b:9b:f3:e4:f2:97:ef:40:7c:2d:fb:4e:67:7f:eb:7c:
         10:20:bb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 19:32:46 2026 by rpki-client