Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a649ba89-9ab0-367b-89f7-229eb391907e.roa
File:                     a649ba89-9ab0-367b-89f7-229eb391907e.roa (raw, json)
Hash identifier:          9wm8ZFeir9eaAL7m8XJLZ4QeSa5V18wUyA9m2aHkUy0=
Subject key identifier:   A0:50:19:14:4B:2D:4C:F5:A9:7A:07:2F:44:57:85:2E:32:BF:71:9C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584E0006245317A7E0C460CAC800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a649ba89-9ab0-367b-89f7-229eb391907e.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     3257
IP address blocks:        142.252.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:24:53:17:a7:e0:c4:60:ca:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=fb7184a4-5c49-4836-bc2d-cb242d3a4fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5d:9f:d3:72:1d:34:da:c9:ee:b0:56:83:38:
                    ab:5b:fb:eb:34:2a:3a:05:c4:8b:55:7f:36:91:e1:
                    90:80:69:61:f8:65:b5:76:b1:f2:00:43:63:88:20:
                    a3:b2:ae:cd:3e:e1:f5:34:5f:ff:67:13:c9:db:2a:
                    74:56:06:74:84:f6:fb:a5:14:c0:66:53:32:03:6d:
                    ea:9f:57:44:97:8c:3e:a1:b8:6e:2b:d0:ab:94:40:
                    ff:4e:7c:b3:14:66:df:d7:a3:c8:42:d0:f3:b9:e1:
                    41:1f:e4:0d:48:3b:9e:4f:2e:fb:50:29:4d:1f:b7:
                    2d:41:fa:04:d8:4c:3a:de:57:ff:e1:9c:f5:47:89:
                    51:62:75:40:95:30:8e:ed:1f:3f:75:23:f7:23:e4:
                    5b:69:df:72:e9:fd:ce:08:99:74:56:a7:15:08:59:
                    46:8d:44:be:ba:58:dc:1a:9a:31:8e:08:bb:d1:24:
                    19:77:3b:b0:a6:5b:cc:2b:90:1b:47:30:d9:a0:a1:
                    cf:57:b8:72:cb:94:f0:bf:77:75:0a:80:9d:53:4e:
                    7b:86:a4:29:1d:dc:36:17:c1:1e:30:86:0b:d5:c2:
                    98:61:4c:14:ae:3a:cb:93:e8:3f:89:0c:01:d2:f3:
                    47:3b:f7:0a:9c:f3:ad:f0:e3:43:5c:cd:0b:c8:f5:
                    23:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:50:19:14:4B:2D:4C:F5:A9:7A:07:2F:44:57:85:2E:32:BF:71:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a649ba89-9ab0-367b-89f7-229eb391907e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:65:02:bb:3a:7f:3a:cd:c3:93:7a:3a:1f:64:44:d4:31:f0:
         d5:f7:58:36:45:c6:27:bc:a0:6e:c6:9f:6e:a5:07:43:c8:44:
         ba:d6:85:ea:62:1c:b5:bc:70:dc:69:ec:4d:47:61:11:bb:df:
         78:90:04:cf:f6:ea:03:ba:e4:cd:7c:08:bd:30:3e:f1:9d:54:
         e6:10:03:30:2e:34:65:87:93:9b:fa:24:ff:c9:bc:3e:50:78:
         57:15:c7:40:62:39:2c:81:3a:e5:58:0f:03:2d:4a:6d:e2:ab:
         62:39:a4:ee:6d:8a:fd:09:24:1d:bd:87:86:d9:8d:f1:19:b4:
         e5:9b:a8:11:5e:f3:57:71:dc:34:27:db:44:96:ce:c5:2b:fd:
         96:b8:4b:8b:95:b6:ef:88:cb:63:5c:8b:ac:70:cc:53:75:6e:
         02:10:74:ad:04:09:97:7a:92:b7:73:11:7a:d4:7f:9d:00:70:
         96:9b:58:cf:15:50:00:d3:03:91:f4:e0:e1:32:7c:3c:d0:10:
         67:fc:97:c2:40:22:35:74:bb:f1:b7:90:94:55:32:8d:64:48:
         93:a9:4a:ec:a3:a1:b4:be:f2:e7:56:cb:ce:62:47:ad:e9:1b:
         0f:0f:41:25:62:e5:35:32:c0:e2:a0:e9:ea:cf:a0:71:ad:6d:
         44:d8:94:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABiRTF6fgxGDKyAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
ZmI3MTg0YTQtNWM0OS00ODM2LWJjMmQtY2IyNDJkM2E0ZmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1l2f03IdNNrJ7rBWgzirW/vrNCo6BcSLVX82
keGQgGlh+GW1drHyAENjiCCjsq7NPuH1NF//ZxPJ2yp0VgZ0hPb7pRTAZlMyA23q
n1dEl4w+obhuK9CrlED/TnyzFGbf16PIQtDzueFBH+QNSDueTy77UClNH7ctQfoE
2Ew63lf/4Zz1R4lRYnVAlTCO7R8/dSP3I+Rbad9y6f3OCJl0VqcVCFlGjUS+uljc
Gpoxjgi70SQZdzuwplvMK5AbRzDZoKHPV7hyy5Twv3d1CoCdU057hqQpHdw2F8Ee
MIYL1cKYYUwUrjrLk+g/iQwB0vNHO/cKnPOt8ONDXM0LyPUj2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKBQGRRLLUz1qXoHL0RXhS4yv3GcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTY0OWJhODktOWFiMC0z
NjdiLTg5ZjctMjI5ZWIzOTE5MDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvxZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEllArs6fzrNw5N6Oh9kRNQx8NX3WDZFxie8oG7Gn26lB0PIRLrWhepi
HLW8cNxp7E1HYRG733iQBM/26gO65M18CL0wPvGdVOYQAzAuNGWHk5v6JP/JvD5Q
eFcVx0BiOSyBOuVYDwMtSm3iq2I5pO5tiv0JJB29h4bZjfEZtOWbqBFe81dx3DQn
20SWzsUr/Za4S4uVtu+Iy2Nci6xwzFN1bgIQdK0ECZd6krdzEXrUf50AcJabWM8V
UADTA5H04OEyfDzQEGf8l8JAIjV0u/G3kJRVMo1kSJOpSuyjobS+8udWy85iR63p
Gw8PQSVi5TUywOKg6erPoHGtbUTYlEM=
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:41:54 2026 by rpki-client