Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/70e42cef-e7f8-354d-9b0d-7fe52c9c6540.roa
File:                     70e42cef-e7f8-354d-9b0d-7fe52c9c6540.roa (raw, json)
Hash identifier:          sG4tZB9HmKZrlB8ze7kTmNH73vpg9oALevfNc34gKpQ=
Subject key identifier:   3C:AF:6A:D0:CF:21:0C:77:91:1E:A3:86:18:F8:62:A4:18:AF:6D:19
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EA797D471EBD058C8A9814BF0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/70e42cef-e7f8-354d-9b0d-7fe52c9c6540.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     10753
IP address blocks:        142.252.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:d4:71:eb:d0:58:c8:a9:81:4b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0fc0add7-f1b8-424a-969c-5737f0b4a686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cb:e5:4a:09:94:41:e3:28:29:a7:3a:bb:3d:
                    30:84:6a:df:9a:13:85:c8:c6:d5:ae:57:88:bf:84:
                    39:4c:53:c5:d8:59:11:77:5a:10:35:2b:9a:ed:66:
                    91:37:55:6f:7c:cb:71:67:a7:81:8e:39:17:12:b6:
                    78:97:99:47:ed:bb:e0:72:f7:b9:9a:2d:98:7d:79:
                    b6:20:38:6d:27:38:ed:63:02:41:0a:e0:fe:86:a9:
                    92:cf:39:51:73:10:00:39:27:17:a9:c4:33:f1:57:
                    17:31:1f:51:96:27:5a:4e:21:16:ee:4b:79:6c:78:
                    db:b7:cc:7f:d6:bc:7a:7e:c0:ae:7f:d6:69:71:1f:
                    3b:5a:0d:ee:c5:c6:06:2a:48:80:b5:81:c1:2b:38:
                    9a:e9:f2:c9:0d:95:a6:cb:99:57:25:ee:b8:f9:f6:
                    70:62:cf:02:80:6c:6e:0e:c8:f1:47:33:5b:70:de:
                    da:8a:5d:c3:31:46:31:4a:a0:b5:63:0e:16:d0:7e:
                    0a:75:b4:cb:7a:96:c0:82:f1:39:cf:2b:c2:0d:87:
                    ea:40:c8:12:eb:67:8f:cc:ac:ce:14:34:01:2c:d2:
                    5c:cb:87:6d:c9:73:cd:56:93:eb:fc:a8:91:8e:91:
                    66:01:f3:13:ec:13:f0:5b:6e:18:3a:56:36:c0:cd:
                    6f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:AF:6A:D0:CF:21:0C:77:91:1E:A3:86:18:F8:62:A4:18:AF:6D:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/70e42cef-e7f8-354d-9b0d-7fe52c9c6540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:2f:ab:c2:05:44:97:55:2a:cc:1e:17:40:12:11:d0:23:56:
         65:c5:ca:4f:b1:ed:12:30:81:28:d6:4e:fe:bc:82:b8:a9:f1:
         a2:72:d6:2e:b8:7c:4f:0b:0d:12:2c:6d:b0:23:0e:53:bc:53:
         5a:77:65:61:66:b1:1f:8f:5e:6d:5a:6f:a9:0b:81:0f:35:d3:
         f6:5f:71:89:cd:1c:66:49:8d:60:6a:a2:eb:76:06:36:ff:36:
         de:f5:ec:a8:5c:37:5c:37:ba:66:92:e6:a0:91:e7:a0:b5:31:
         12:b9:1c:58:d2:26:34:e1:f5:bd:fc:56:0b:70:cc:55:47:83:
         f1:46:26:84:67:f2:25:9c:ce:a5:a9:b2:c0:8f:73:c4:bf:00:
         53:9e:d5:1d:4e:50:14:65:6e:c6:d0:a2:1b:55:c5:35:9a:71:
         22:7c:f6:7e:54:0d:97:ec:ad:90:ca:06:7c:8b:e2:01:44:48:
         90:4d:b9:f9:16:60:59:3e:1b:b3:2a:42:1a:44:c7:8e:0d:53:
         18:06:26:9c:95:8d:11:2b:47:91:40:8d:a7:46:59:73:79:23:
         d5:0d:1c:4f:6d:e3:6a:b2:97:ed:4f:2b:d6:56:b3:16:27:f8:
         cd:54:15:c6:05:ed:26:bc:ad:f2:86:4b:db:eb:23:8a:56:c6:
         0b:8a:c3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:14:35 2026 by rpki-client