Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/05fe771b-c97b-3e19-b136-8256cce84e38.roa
File:                     05fe771b-c97b-3e19-b136-8256cce84e38.roa (raw, json)
Hash identifier:          kJL7DrnqTJVgY8HAs9WsQrXF2wM8znf+9Dtw5Pp4aqk=
Subject key identifier:   22:21:48:F0:57:64:9C:E8:FA:EE:0E:B8:5A:A3:FE:41:5F:ED:FA:34
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D1D88644F5EEA80F65DCB3380
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/05fe771b-c97b-3e19-b136-8256cce84e38.roa
Signing time:             Mon 09 Mar 2026 21:54:50 +0000
ROA not before:           Mon 09 Mar 2026 21:54:50 +0000
ROA not after:            Sun 07 Jun 2026 21:54:50 +0000
asID:                     398781
IP address blocks:        172.252.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:88:64:4f:5e:ea:80:f6:5d:cb:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  9 21:54:50 2026 GMT
            Not After : Jun  7 21:54:50 2026 GMT
        Subject: CN=725dd8d0-22c6-4182-9af7-e50a68b0714c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c2:2d:58:81:6d:c5:c1:0e:d6:74:82:aa:86:
                    d7:a2:83:3b:97:45:49:37:fe:40:63:69:e3:04:7c:
                    fe:d8:7f:c9:4b:31:95:18:07:a6:43:f7:7d:5f:2b:
                    f7:0a:fe:35:68:ff:15:4e:49:f8:72:a9:86:33:29:
                    91:99:87:a1:f8:37:a3:6b:55:75:0a:43:1f:2b:a8:
                    08:dc:b9:3e:be:6a:d5:b4:e1:a8:a8:e0:49:7c:7e:
                    81:72:bf:1d:6f:4f:9c:d5:61:e9:a5:36:38:08:f2:
                    d8:06:94:6b:96:8f:fd:08:1d:93:e0:36:06:df:f5:
                    72:ba:21:f3:3f:92:92:3d:f3:e9:27:6b:3e:47:40:
                    04:6e:8f:26:d4:9c:f1:ec:04:a9:76:f1:38:31:e6:
                    bf:96:37:29:64:b7:0c:e8:9b:b0:19:ca:f5:c3:23:
                    c4:81:96:e6:a0:96:3e:28:a3:45:c1:bc:01:49:b3:
                    62:db:30:43:5a:d2:bf:d0:a2:39:b8:ea:c9:76:bf:
                    db:a7:37:dc:31:f2:3d:4a:5d:c3:d4:b2:ba:ca:6d:
                    db:ef:62:fe:fc:a9:90:17:a2:27:b0:32:e4:21:28:
                    3c:44:cb:63:3a:16:ad:97:68:9c:c9:46:59:7a:9e:
                    fa:5d:74:67:a5:69:1d:d5:a7:14:ea:17:c3:69:88:
                    b6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:21:48:F0:57:64:9C:E8:FA:EE:0E:B8:5A:A3:FE:41:5F:ED:FA:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/05fe771b-c97b-3e19-b136-8256cce84e38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:72:44:91:4b:c7:63:cf:be:7e:cf:67:08:6e:d0:fa:b5:d9:
         4c:f9:80:08:5b:ca:c7:5c:9c:dd:3f:b3:75:37:f5:54:a0:5e:
         50:99:cc:05:b7:83:cb:b7:e0:aa:65:4c:ec:e5:26:a5:78:9f:
         8c:1b:51:08:c5:ef:5a:ab:c9:37:dd:41:09:23:41:24:f0:10:
         74:b3:96:09:ee:1e:89:9b:3a:4d:b1:4b:9c:43:fd:36:0a:7c:
         d9:fb:f7:78:a0:58:eb:83:5f:a4:d2:44:a3:8e:70:32:a7:ea:
         22:b8:96:cf:73:8e:03:da:f8:02:7e:f0:53:cb:2f:f5:28:74:
         1e:50:79:24:ea:bc:73:cc:77:82:70:b9:02:3f:d0:c1:b2:ab:
         55:47:f6:5c:e4:9a:b7:11:8c:56:b5:7c:a2:41:44:33:ab:6d:
         80:db:5e:ae:e7:0b:12:dd:4c:5d:28:15:20:c6:67:fe:43:1f:
         82:80:2c:a9:c1:0d:d9:f3:c8:c2:5a:0e:58:c9:05:fb:e8:5f:
         fe:90:4c:9d:79:b8:72:1e:de:0b:0c:45:23:86:38:b8:d3:d8:
         cf:a6:59:a1:b3:a0:01:04:b5:39:eb:14:a3:11:b8:ce:52:81:
         d6:09:79:d6:fe:12:76:e7:e5:a3:9c:31:43:9f:de:a7:f3:3c:
         53:ac:6f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 18:51:32 2026 by rpki-client