Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e68310a4-8628-3e02-aa0b-4468e1d84b21.roa
File:                     e68310a4-8628-3e02-aa0b-4468e1d84b21.roa (raw, json)
Hash identifier:          xHo9F9MYL1GmnPNxIbgp8g6kvNk58K7ZGi77GQPc2S0=
Subject key identifier:   BD:47:C4:50:B3:40:80:FF:19:27:C5:B1:10:CE:71:D6:41:FF:94:70
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D65153D91BAED4B586F43BBC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e68310a4-8628-3e02-aa0b-4468e1d84b21.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     50131
IP address blocks:        142.252.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:3d:91:ba:ed:4b:58:6f:43:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=df0bf8af-d088-4503-95e6-3b18f5c8b45f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8f:e3:a0:34:e9:d9:e1:0f:cc:5a:5b:75:13:
                    58:de:d1:5d:95:16:89:d0:5a:c5:77:56:99:b8:3f:
                    ad:2c:0a:a3:8b:5a:82:40:c4:b4:14:dc:6c:39:23:
                    fc:dd:d7:7c:eb:bc:76:62:61:cb:6b:3b:e5:a7:d2:
                    66:a3:59:ce:45:b5:a7:70:17:8e:ad:a0:ef:45:7e:
                    8b:22:e5:c1:c4:d2:c8:d8:28:b3:98:0a:79:73:31:
                    3e:a0:ab:d6:4c:d2:a2:88:ea:3b:28:70:c2:97:47:
                    50:71:b9:82:01:ae:8a:93:ff:58:94:f9:cb:eb:62:
                    4f:98:14:32:5b:13:d2:13:2d:4d:10:bf:c7:63:fe:
                    99:51:99:80:c5:5e:5c:bf:fc:37:57:18:d1:f2:49:
                    21:88:26:49:db:63:23:c7:ea:c4:64:9b:b2:25:e0:
                    c4:79:7b:62:75:7f:26:3e:0e:85:e7:66:6a:37:3c:
                    5c:2f:c4:cd:01:73:14:a0:67:6d:b9:05:e3:27:14:
                    6c:dd:5c:bb:6a:42:f6:01:f6:41:ef:55:33:23:cb:
                    2e:d1:1a:8b:5e:71:46:e8:34:fb:00:2b:58:4d:b7:
                    32:c1:30:16:fb:05:92:0d:48:fe:25:9e:b9:a6:1d:
                    82:0a:26:8b:17:dd:a2:69:a7:2d:bd:24:9a:72:c4:
                    32:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:47:C4:50:B3:40:80:FF:19:27:C5:B1:10:CE:71:D6:41:FF:94:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e68310a4-8628-3e02-aa0b-4468e1d84b21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:b2:a7:e1:96:a0:0c:de:dd:6e:1e:49:3b:74:4f:ef:a3:97:
         41:93:be:ca:97:f0:11:09:fd:f7:6a:cd:4b:b4:fb:d7:78:c3:
         99:c7:31:9a:4c:5a:1f:fa:db:8c:ab:e1:12:d8:ce:2c:56:d7:
         e7:01:7c:2d:1f:d7:70:8b:89:aa:32:09:54:4d:88:a5:8e:54:
         4a:a8:c8:e3:20:21:93:b3:b2:1a:08:6f:9f:4b:e2:ca:cd:56:
         db:b8:26:bc:62:5d:9f:0f:08:dd:77:85:af:68:d8:ae:9b:bf:
         1d:90:92:39:c8:e1:3d:cd:c5:7e:f5:49:9b:d1:25:bb:ae:b5:
         0f:f3:79:32:e4:85:e0:8c:b1:92:6a:5b:69:df:4d:a2:09:db:
         4c:a8:05:d8:62:7d:7a:dc:ec:95:87:2f:ad:0d:fc:d6:93:d7:
         54:f3:14:12:d5:40:6d:67:2c:4a:46:90:56:64:82:44:61:88:
         68:75:d2:2c:35:e8:b7:de:cf:e7:6b:44:8b:51:a8:e9:78:24:
         17:a3:35:ad:f2:78:71:dd:e2:99:18:e2:97:14:ee:73:57:76:
         f0:e3:ee:34:21:27:8f:92:22:72:cc:af:e7:7d:16:e3:c3:f4:
         3f:29:5c:39:00:7b:25:5e:74:74:8a:9b:fc:47:ac:b5:26:1a:
         86:f3:04:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:34:24 2026 by rpki-client