Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/add7646f-0a46-3b16-b025-54d28f3b0935.roa
File:                     add7646f-0a46-3b16-b025-54d28f3b0935.roa (raw, json)
Hash identifier:          H8WlqD1c1g/tZPPYJRIc/+kEedwXrVf65oTsgwD/9lA=
Subject key identifier:   BA:CE:C4:DE:1C:FA:07:1E:B2:37:1F:A0:BF:D7:0A:74:09:DC:BB:8A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D63AF9CF818C61484CA4E5A20
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/add7646f-0a46-3b16-b025-54d28f3b0935.roa
Signing time:             Sat 04 Apr 2026 01:00:25 +0000
ROA not before:           Sat 04 Apr 2026 01:00:25 +0000
ROA not after:            Fri 03 Jul 2026 01:00:25 +0000
asID:                     18779
IP address blocks:        142.252.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:63:af:9c:f8:18:c6:14:84:ca:4e:5a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr  4 01:00:25 2026 GMT
            Not After : Jul  3 01:00:25 2026 GMT
        Subject: CN=3aac13da-92dc-46e7-882f-423caf9f3063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a7:65:ea:fc:bb:92:a6:b9:25:0f:cf:de:c8:
                    b2:02:77:0e:36:42:54:b7:26:a7:bd:21:53:b1:fc:
                    65:5a:19:a9:2c:3b:27:b9:91:a3:c8:cd:9c:c8:4c:
                    dc:ce:2e:48:a1:af:8e:c8:72:00:30:a4:29:18:a9:
                    d2:2f:66:e0:11:37:16:27:dd:88:df:e9:83:11:54:
                    85:7e:f7:61:40:9c:2d:73:07:36:bc:ce:b6:de:be:
                    c3:8d:9b:06:c4:c1:3e:0b:db:68:34:02:b5:be:89:
                    25:d7:b1:c1:fd:db:91:1b:cc:8b:e8:f1:26:ed:07:
                    b4:93:0d:db:b0:6f:b2:f7:93:10:f0:0f:6a:ff:77:
                    75:83:59:15:96:97:09:b2:07:22:b5:a2:f5:8b:fa:
                    b3:a6:a2:44:50:71:0c:88:58:93:65:24:6f:7c:f5:
                    02:e7:3e:50:40:fa:74:d0:51:18:41:80:af:de:13:
                    52:c4:91:e2:d5:e4:2e:59:a0:8e:85:03:c4:1e:e4:
                    51:f7:ad:79:22:dd:93:11:6f:32:a1:f5:96:7c:43:
                    92:2f:95:56:cb:22:40:c6:4c:bb:92:3e:4c:00:c6:
                    a2:26:1d:04:11:30:fc:3d:d2:b0:72:44:11:54:9b:
                    e8:83:44:c2:86:18:09:42:21:30:ff:8e:e4:85:21:
                    77:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CE:C4:DE:1C:FA:07:1E:B2:37:1F:A0:BF:D7:0A:74:09:DC:BB:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/add7646f-0a46-3b16-b025-54d28f3b0935.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:a3:b1:3c:02:ed:66:7e:8e:c4:0c:7d:ba:2a:f2:da:66:2a:
         72:fd:13:04:c8:12:9b:db:9d:bf:20:7e:bc:e2:b9:c0:4f:d9:
         f5:85:c3:e7:4d:b6:cf:01:f9:66:1d:d3:59:cb:61:92:ba:1c:
         09:28:2b:64:3a:14:59:7b:d5:40:53:a1:cb:a3:ac:c6:e9:a6:
         56:25:0e:8e:f4:d4:8a:1a:d8:12:e9:51:0a:7d:3c:8a:e2:05:
         c0:bd:77:1e:16:68:64:af:3b:9f:bb:b1:66:c4:3d:00:3c:61:
         27:70:6e:fb:9f:2f:e0:86:4f:f5:ce:7f:1a:89:ad:db:08:34:
         0a:d1:39:04:12:12:fd:af:e2:f0:40:2a:c6:0e:0e:71:fe:25:
         c2:e1:be:3c:a4:7e:eb:54:a7:38:ef:e9:9e:a4:e1:ce:8f:f7:
         cf:30:96:2f:a2:ac:78:f3:be:75:99:90:94:a5:ba:34:a9:ff:
         23:37:0f:2d:e4:6e:fb:22:42:2b:af:11:57:21:97:d4:2c:b6:
         d7:03:fb:16:d6:b7:64:71:8a:de:30:c2:2e:f6:18:c6:17:ef:
         1f:4a:7e:a1:c2:56:2c:d4:54:f0:61:09:ee:df:c1:ea:64:b5:
         02:0f:aa:2e:8c:1a:56:ef:1c:12:d8:2d:08:7c:c4:ff:a9:83:
         00:79:22:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:36:17 2026 by rpki-client