Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0264c902-3fe3-34d6-98fa-af5dfdf0eeea.roa
File:                     0264c902-3fe3-34d6-98fa-af5dfdf0eeea.roa (raw, json)
Hash identifier:          IHA02f1hj6pXXrLm7PsLFD7JTcAYmT2ZFiuyDEY7JG0=
Subject key identifier:   BC:29:C7:5C:45:B9:15:39:D2:28:CC:5E:3B:6B:2F:B8:8F:78:E9:F0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D1D88662E8E24D72A1AE19A20
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0264c902-3fe3-34d6-98fa-af5dfdf0eeea.roa
Signing time:             Mon 09 Mar 2026 21:54:51 +0000
ROA not before:           Mon 09 Mar 2026 21:54:51 +0000
ROA not after:            Sun 07 Jun 2026 21:54:51 +0000
asID:                     398781
IP address blocks:        172.252.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:88:66:2e:8e:24:d7:2a:1a:e1:9a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  9 21:54:51 2026 GMT
            Not After : Jun  7 21:54:51 2026 GMT
        Subject: CN=e55ac13a-60a2-4782-9384-62306933665b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:63:15:5c:ac:e5:57:8e:8f:fc:88:f2:85:d3:
                    ac:c7:c9:a3:f9:d1:89:22:03:73:b7:56:34:91:9b:
                    bb:56:b1:7d:3d:a6:da:c6:85:8b:b8:1f:a2:e3:ce:
                    c8:93:97:22:7b:ff:ae:8f:20:12:b2:c4:fd:bc:2a:
                    9b:12:a1:bf:bc:12:1f:6b:2b:ae:e6:4d:a0:a3:03:
                    0d:ca:3d:02:b5:91:91:9b:56:0c:1f:8d:f9:a3:53:
                    6c:e1:59:c0:af:31:40:46:9a:e7:2e:b3:af:9e:a7:
                    e2:26:d5:7c:94:e7:42:29:36:0b:95:bb:f6:2e:72:
                    a1:cd:43:1a:f1:78:a7:b2:f5:1a:35:f7:4a:4a:f0:
                    89:8d:3f:2d:fa:1f:35:71:c9:52:da:a7:37:a3:7f:
                    91:c5:a5:3e:48:7f:db:f2:84:a0:91:05:2f:f4:6c:
                    e0:6f:06:3e:46:34:02:bc:58:96:96:0a:f3:4f:c6:
                    51:4e:14:d2:4d:2e:23:f1:4b:f3:ee:3c:12:fb:76:
                    d5:32:f7:e4:44:aa:d4:94:bb:5b:20:0a:75:35:7a:
                    d5:74:e0:84:2b:4e:9e:d2:29:4d:f2:84:ec:a9:46:
                    b8:b3:ef:8d:f7:30:7c:14:30:d7:62:9b:d2:b0:0f:
                    72:3d:1a:01:05:52:cd:5f:c8:bc:19:2a:e5:aa:86:
                    20:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:29:C7:5C:45:B9:15:39:D2:28:CC:5E:3B:6B:2F:B8:8F:78:E9:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0264c902-3fe3-34d6-98fa-af5dfdf0eeea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:a4:4d:a3:4f:1c:28:43:b1:29:d6:0b:c2:6d:64:b4:1a:8e:
         ff:76:74:21:6a:cb:50:94:42:a3:3d:9b:6c:cf:b3:27:db:a3:
         d4:71:9d:8e:7d:f0:e8:34:3a:70:f3:4f:f6:1c:27:4f:53:de:
         9b:05:59:91:2e:63:f1:6f:90:02:da:b5:6e:20:9f:aa:01:65:
         21:d6:18:49:6f:64:c4:db:15:97:95:89:44:3e:26:1a:8d:a6:
         85:7e:09:43:3c:1d:e9:4c:d9:7a:9b:81:f5:f1:6b:07:23:0f:
         cb:fc:bf:9a:c6:26:6e:87:0f:57:88:2d:c2:78:23:8a:64:14:
         d2:63:0c:2e:ed:f0:05:04:8d:91:f3:c8:a7:14:e8:40:10:9f:
         05:fd:bf:89:06:0e:09:9a:40:20:9e:f6:df:d1:e1:8f:19:43:
         72:76:4b:ac:67:a0:7d:ff:e2:c4:9f:4a:24:8b:a5:3f:2b:34:
         e3:50:6f:34:a8:90:01:8b:b9:7a:73:69:6b:28:df:37:35:92:
         ca:67:80:b7:a3:29:7b:ff:1d:0c:05:1d:e4:48:b8:c0:f6:02:
         04:2c:e0:fd:48:96:38:cc:24:ed:cd:6e:70:6e:2b:95:95:2c:
         e4:9c:f1:d9:d5:7f:91:15:7a:ea:73:fc:b8:e9:f2:0a:e6:05:
         b3:bd:2e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 18:47:16 2026 by rpki-client