Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/65adb0d0-5667-3f59-8072-8c4492bf1e75.roa
File:                     65adb0d0-5667-3f59-8072-8c4492bf1e75.roa (raw, json)
Hash identifier:          amnezAFCHk3PtBmg/Okt6iDk8Cdxn601iv/xtE0X+Jg=
Subject key identifier:   9C:8D:48:05:34:89:FF:4D:D0:33:D2:B0:14:A0:7B:D0:1F:BB:3A:E3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F51D2BA68208B2564F8BE4280
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/65adb0d0-5667-3f59-8072-8c4492bf1e75.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     10557
IP address blocks:        142.252.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:ba:68:20:8b:25:64:f8:be:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=5f4e48a2-86d9-49c6-baff-2ab0252df4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9b:ac:e3:67:f2:11:d5:11:2c:ed:36:47:8a:
                    f4:d6:69:de:fb:5e:e7:be:9f:3a:49:5b:3e:66:75:
                    14:4b:35:8c:c9:8a:76:43:88:ac:b6:51:b7:55:2a:
                    6a:c8:53:a1:a1:d6:01:52:ab:09:17:4a:51:e1:31:
                    c0:84:78:f1:9f:c9:82:dd:dc:89:c3:f9:70:ca:82:
                    4e:24:dd:88:af:5b:5c:84:18:85:95:2b:32:d9:73:
                    71:df:66:27:e0:95:fe:84:93:27:2a:c0:ee:32:02:
                    f1:b0:61:fa:76:4e:c0:23:04:b8:0b:3b:17:d2:48:
                    6b:d5:ce:80:7a:ed:ee:c8:a9:7c:73:7f:31:24:75:
                    78:71:44:e7:7f:2e:f3:fc:50:79:f3:b6:0f:27:65:
                    76:42:93:c6:6b:fb:3f:2b:d9:5f:d7:b7:46:ae:4d:
                    a1:ba:f1:1b:b6:d8:0f:89:23:03:98:9a:25:d3:e4:
                    f9:70:32:7d:36:15:29:4f:d9:1b:b8:fd:58:0e:3b:
                    83:d6:9f:84:32:c2:e5:1d:90:52:61:70:0a:7b:7a:
                    a8:f8:27:b9:8e:32:69:fb:10:1a:1c:d6:05:fc:bd:
                    09:b5:11:8a:03:98:de:a0:dd:d7:6e:9d:65:ca:ef:
                    95:51:64:9b:3a:c6:ff:8d:38:43:e9:b6:f0:b2:1a:
                    0a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8D:48:05:34:89:FF:4D:D0:33:D2:B0:14:A0:7B:D0:1F:BB:3A:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/65adb0d0-5667-3f59-8072-8c4492bf1e75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:e7:4b:c9:d2:8f:c5:fe:a8:de:6e:d9:0b:8a:90:af:e7:84:
         6a:9e:67:bc:72:3c:20:6b:1f:22:90:6d:09:6b:4f:92:60:b0:
         35:86:c5:9b:2d:92:9b:ac:46:86:f9:9d:5b:d3:cc:01:ad:6c:
         21:4f:45:5c:52:fa:d3:cc:98:14:55:a0:ee:2f:14:db:90:c6:
         ff:9a:50:f1:67:94:21:90:0a:bf:46:53:cb:37:e4:24:77:fa:
         ae:a5:af:05:a1:f8:ac:c1:c5:16:75:11:f6:84:a9:55:89:8d:
         ec:90:ec:2c:2c:99:08:fb:33:3a:51:e0:9c:ac:8e:60:56:68:
         bd:d7:48:f4:7b:8b:ad:5d:4e:5d:e8:a6:a5:21:da:80:d8:5f:
         9d:f5:bd:3a:2a:40:a3:e9:e4:62:0d:92:a0:ee:f5:0d:25:3b:
         a5:5f:9e:d8:12:1c:e9:68:34:6e:8d:49:b6:b4:01:dd:65:6b:
         d2:42:18:b4:ee:99:52:68:89:81:42:da:04:bd:49:b1:87:0b:
         d0:fc:d7:60:76:c4:ca:72:e3:3c:b3:0b:88:e9:63:54:00:96:
         41:08:9f:28:c3:1a:4c:e4:14:d1:7d:fd:7f:05:f1:2d:b3:7b:
         2e:dd:cb:4c:2c:2a:67:08:e1:f8:80:f5:a3:9d:e0:e6:b4:0e:
         3e:b8:21:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:19:27 2026 by rpki-client