Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/55ada35b-30bb-3504-8e47-63490f57649d.roa
File:                     55ada35b-30bb-3504-8e47-63490f57649d.roa (raw, json)
Hash identifier:          s+xchNggD+VIws3CQnj2cdhYRl2WrsUOLTp3lLCszOw=
Subject key identifier:   A4:54:3C:0B:8E:EF:3E:53:09:35:5B:64:8D:71:F6:CD:4F:36:6F:39
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D0217A1C22EC475D7CF161540
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/55ada35b-30bb-3504-8e47-63490f57649d.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     18779
IP address blocks:        142.252.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:a1:c2:2e:c4:75:d7:cf:16:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=ed5ced2a-5ca5-45f2-a242-c2d393325307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6d:40:ac:38:04:f3:b9:fa:53:58:1e:a8:de:
                    70:2d:bb:53:cb:d5:23:10:b2:2a:a6:d9:38:57:26:
                    4d:ea:09:74:ea:cd:0e:f5:a2:76:27:a2:a9:e2:2e:
                    b0:2d:42:4e:a7:96:d1:ea:b5:b0:15:4f:33:0d:e0:
                    f1:e8:6b:49:fb:dc:c6:28:bd:05:bd:1a:4b:fe:5b:
                    75:a8:b6:3e:52:97:09:cc:4e:f3:f7:34:9e:f1:68:
                    44:82:53:69:8e:70:86:55:c7:38:2e:5b:1d:0d:af:
                    c0:4f:cb:dc:ef:8d:cc:4e:81:49:ba:b6:a4:c5:bd:
                    f3:ff:0c:92:ea:05:1b:8a:9e:d3:f5:90:ba:4c:e7:
                    56:8a:28:cd:35:e2:6e:b5:bb:17:2a:7e:4a:83:c3:
                    80:a5:96:21:d2:57:bd:93:86:ba:56:28:a8:c5:a5:
                    2f:ff:0c:70:f0:8b:a8:82:36:23:14:c8:59:3a:4c:
                    ed:9d:6e:95:5f:2d:fb:0f:f8:6f:35:9e:d2:6e:35:
                    a6:1d:10:02:4b:77:d8:8b:a0:f0:50:f1:f9:17:39:
                    41:86:f6:7e:df:65:c2:2b:81:10:19:04:14:11:7c:
                    c3:ae:60:1e:5e:79:8c:7c:a0:0b:e8:ba:03:60:c5:
                    ae:83:80:a0:fd:73:9d:b7:2e:f5:b8:89:33:5c:17:
                    c8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:54:3C:0B:8E:EF:3E:53:09:35:5B:64:8D:71:F6:CD:4F:36:6F:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/55ada35b-30bb-3504-8e47-63490f57649d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:40:c5:c8:12:1f:7b:6a:84:bf:bf:85:85:4d:86:00:10:2e:
         45:0a:16:2d:d3:ac:c1:37:23:02:0a:6a:98:b9:8e:0b:64:e4:
         3c:ae:9c:87:ad:f8:b3:5b:60:37:32:10:08:ba:bd:26:d1:4c:
         90:0e:05:4a:59:5c:a2:82:50:4c:f6:22:f4:43:10:c7:cb:bd:
         1d:cb:b6:36:50:a9:e8:8a:33:23:bb:3d:18:66:84:ff:f3:fa:
         7c:60:22:71:d0:b6:3e:03:c2:41:1f:af:f3:a3:78:b2:55:30:
         34:86:c0:d7:5a:fb:c3:09:18:bf:c0:1b:54:4d:bc:c9:c8:01:
         a5:16:00:0e:06:f2:01:b5:e2:94:1a:a1:a3:92:57:9c:6b:6d:
         ce:b7:ef:34:f5:8c:5e:cd:07:6d:fb:dd:51:0e:a9:93:da:91:
         11:1c:ef:94:9a:31:42:75:e9:b9:c0:9c:b6:61:b1:1d:8e:e9:
         77:b6:1c:91:01:77:4a:41:4f:fd:65:19:12:07:53:62:3c:ea:
         1f:bc:2a:40:b6:2b:9e:e9:10:8d:ac:2e:1d:98:0b:62:7f:4f:
         14:81:5a:39:69:d5:4a:0d:04:7a:46:e3:47:2e:a2:e6:a7:20:
         d2:fb:c1:2f:a4:05:d6:63:00:ec:8b:c8:76:39:ab:ea:58:7f:
         22:19:ee:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:52:42 2026 by rpki-client