Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/acaefd93-5437-3fb3-b89c-d1f91716fc50.roa
File:                     acaefd93-5437-3fb3-b89c-d1f91716fc50.roa (raw, json)
Hash identifier:          D486+hKT9gkkwx9Qf5qgoyHx/WvS8AWl7beX+uwHFwo=
Subject key identifier:   85:5F:C3:83:0F:95:D4:BE:21:1D:8C:BE:12:22:7A:F9:1C:36:5F:05
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584E147EE88E36C0E028E117AD90
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/acaefd93-5437-3fb3-b89c-d1f91716fc50.roa
Signing time:             Sat 06 Jun 2026 09:00:12 +0000
ROA not before:           Sat 06 Jun 2026 09:00:12 +0000
ROA not after:            Fri 04 Sep 2026 09:00:12 +0000
asID:                     62240
IP address blocks:        142.252.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:14:7e:e8:8e:36:c0:e0:28:e1:17:ad:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun  6 09:00:12 2026 GMT
            Not After : Sep  4 09:00:12 2026 GMT
        Subject: CN=b4e146a8-50d4-493a-8ab4-94435efe042b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f2:26:37:0c:cd:1a:76:e1:8f:fe:d0:f0:d6:
                    26:eb:22:9a:31:8c:25:51:a8:b1:3b:90:fb:da:18:
                    44:0f:99:ff:93:84:18:aa:f5:27:90:99:54:a8:ab:
                    e9:b4:77:15:96:9f:66:f7:a1:83:c7:11:23:02:93:
                    b5:0d:c5:dc:56:0e:98:c4:9b:8b:00:84:a2:df:ab:
                    b8:43:ac:e8:a3:55:0e:64:a8:3f:8f:48:60:ed:93:
                    dd:09:e9:5f:38:90:c8:e1:21:9c:85:2d:a7:69:f7:
                    5e:0d:df:80:fd:82:a3:68:7c:9f:16:0b:63:f2:c3:
                    39:a7:7b:61:86:e3:79:9a:7f:3f:8a:ca:1c:09:68:
                    e6:b6:28:4c:ef:4a:99:53:ea:ec:7c:3f:b7:67:9f:
                    d7:91:6f:3b:c9:6b:5f:53:6f:38:15:ae:93:7b:6c:
                    f4:0b:2d:15:6d:46:dd:d2:01:69:01:de:95:db:4e:
                    bc:61:81:86:9a:11:cc:6f:b2:ba:3f:1e:cc:55:3c:
                    81:c0:2b:76:a4:e9:ea:9f:c8:67:61:f8:55:d1:94:
                    83:b8:9c:81:39:b5:23:c8:d1:8b:43:fc:cc:a0:19:
                    24:6d:7f:13:80:cb:7c:83:ff:3c:e7:63:d6:af:fc:
                    a9:f1:4f:50:f3:44:eb:04:f6:3a:41:12:e4:8b:55:
                    3c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:5F:C3:83:0F:95:D4:BE:21:1D:8C:BE:12:22:7A:F9:1C:36:5F:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/acaefd93-5437-3fb3-b89c-d1f91716fc50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:19:0c:f7:fd:c6:48:53:54:02:63:52:35:05:07:a4:d8:23:
         be:b8:f1:33:de:96:96:2b:65:bb:68:22:b1:ed:58:70:71:34:
         da:1e:02:9e:40:2e:00:9f:b1:49:e9:97:7b:7c:40:1b:1f:11:
         a1:13:ed:89:b3:28:53:71:7c:0b:55:bc:94:74:7a:07:8f:a8:
         a3:d6:fe:5b:e3:7b:d9:76:0d:a0:23:d2:f5:74:fa:f3:e7:69:
         12:59:8a:14:88:18:6b:61:41:92:64:de:75:c9:7c:c2:96:52:
         d4:03:dc:26:67:e8:35:8f:d6:3e:3f:ff:95:e0:37:68:d7:ff:
         51:9c:b6:4e:91:7f:4b:1d:e3:cd:8d:37:b6:1e:8c:ad:d1:cd:
         f3:64:d5:3c:18:21:32:68:5d:04:a0:bf:4a:85:bc:1c:1f:37:
         a3:f2:10:52:b4:40:40:a8:b7:eb:67:8c:01:64:27:85:9f:f2:
         9b:da:a3:af:28:56:de:45:50:95:0a:c6:46:31:95:02:1d:fd:
         cb:34:68:fe:bd:2f:26:43:37:b9:b3:6d:ab:d9:87:be:f7:2f:
         77:db:80:a7:dc:78:66:b2:d6:1a:46:0c:fa:f5:b6:e4:79:fa:
         e7:38:b8:61:a5:b8:a1:e0:d0:4c:12:58:00:98:d9:84:4d:f8:
         ec:d7:48:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:42:28 2026 by rpki-client