Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af941999-089c-38e2-a5d4-94e7628e53dc.roa
File:                     af941999-089c-38e2-a5d4-94e7628e53dc.roa (raw, json)
Hash identifier:          luZMKWqYu1UN355Y296XgkSbGTDjqZllqv6uA9cfq9o=
Subject key identifier:   87:BD:07:BA:13:04:F1:04:DB:62:18:22:FA:71:C0:D0:6E:96:5F:63
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F7352D8C442799AF299428C80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af941999-089c-38e2-a5d4-94e7628e53dc.roa
Signing time:             Sat 10 Oct 2026 01:00:13 +0000
ROA not before:           Sat 10 Oct 2026 01:00:13 +0000
ROA not after:            Fri 08 Jan 2027 02:00:13 +0000
asID:                     9009
IP address blocks:        142.252.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:73:52:d8:c4:42:79:9a:f2:99:42:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 10 01:00:13 2026 GMT
            Not After : Jan  8 02:00:13 2027 GMT
        Subject: CN=70c4c0fb-92bf-4262-982a-7856f3617c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:97:53:c1:08:4e:97:d9:07:73:34:b4:59:ea:
                    54:eb:e9:6e:ac:56:69:d3:6d:0a:3a:35:df:2c:b0:
                    72:84:5d:25:53:7c:e6:d0:bf:e4:d7:65:ad:6a:1d:
                    31:cf:99:d4:8b:1a:f0:f6:2f:9d:fc:05:db:0a:50:
                    63:73:84:6f:da:d5:c6:a0:b3:39:41:bb:04:46:6a:
                    7a:44:43:e2:e0:79:72:2d:ac:d9:51:0f:3c:a3:6c:
                    f6:45:7e:d3:72:0f:d4:a9:24:5c:91:92:cd:a6:ce:
                    21:52:fc:b0:a8:f3:1e:57:c3:0e:ce:88:2e:ca:05:
                    1b:4c:d5:68:79:96:4a:e0:27:78:92:d1:85:d7:1d:
                    32:1e:fb:a2:2c:af:f2:95:e6:5e:36:64:04:02:1c:
                    a8:b6:cf:ad:e8:b8:39:d6:e9:e1:ee:6d:c9:ea:c1:
                    52:1e:5b:9c:f3:0d:3b:0f:08:a6:14:34:9a:65:5b:
                    44:c9:e4:81:bc:5b:12:d7:d6:1e:cd:c0:39:33:77:
                    8c:5b:78:9d:ba:1f:9f:61:f0:d1:2a:ec:c7:56:dc:
                    71:96:8b:df:81:b7:6c:3a:69:ca:d0:30:96:94:0b:
                    7c:83:41:13:bb:83:ef:fc:6b:c5:67:d0:f0:ad:d4:
                    14:f4:35:b1:21:6c:76:92:43:4c:03:7a:f5:db:05:
                    99:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:BD:07:BA:13:04:F1:04:DB:62:18:22:FA:71:C0:D0:6E:96:5F:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af941999-089c-38e2-a5d4-94e7628e53dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:dd:fb:9c:20:ba:a2:07:23:66:b0:fd:a1:8a:c6:0b:19:e1:
         61:b4:22:86:f0:bc:a8:9c:25:e4:21:a3:26:41:37:2f:aa:b3:
         02:fc:4f:25:d0:df:4b:c2:98:80:f4:d6:bc:55:95:77:01:f9:
         d0:cb:e1:c0:33:89:b1:4b:e6:d8:f4:04:98:50:13:d7:c5:1d:
         88:e6:5f:b8:cf:4b:d1:24:78:57:90:84:5a:af:78:7d:00:70:
         b0:d1:e1:66:c8:33:f4:3b:32:b9:13:e0:d6:19:05:e3:ad:a8:
         18:40:a6:59:7e:03:a5:bd:94:7f:c7:3e:a1:02:fb:a5:61:87:
         14:c6:cc:c6:c4:b9:96:af:49:e8:c0:61:d2:1b:94:8e:79:c0:
         75:f2:7a:f6:d0:a9:a3:24:7e:f4:a2:22:6d:85:76:26:d1:e0:
         45:2c:92:40:35:b9:6a:b0:fa:4d:77:e3:92:84:bc:3a:31:5c:
         c9:61:8c:48:13:44:06:68:ae:a6:2c:4b:68:31:17:76:4a:15:
         8e:50:9e:cc:37:c3:79:8f:a7:3e:bd:91:f6:0c:bd:c7:c7:28:
         7b:82:18:79:ff:6a:37:f3:ba:82:63:86:36:d1:52:9a:c1:3c:
         3c:78:1b:20:12:eb:5e:0f:50:2f:9a:66:01:ed:01:60:5c:ba:
         c6:4f:09:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 13:38:09 2026 by rpki-client