Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/44ba49da-41b6-34de-9d08-375625077233.roa
File:                     44ba49da-41b6-34de-9d08-375625077233.roa (raw, json)
Hash identifier:          Z7Yb74962OaZlSlE+7ZKs5EGgjBspGvMcg9QyLQ2zwg=
Subject key identifier:   22:4A:5C:15:E1:88:62:EF:6F:DB:40:6B:2E:32:E6:F3:AD:37:B2:92
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D1D88640A7D4083978083FDA0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/44ba49da-41b6-34de-9d08-375625077233.roa
Signing time:             Mon 09 Mar 2026 21:54:50 +0000
ROA not before:           Mon 09 Mar 2026 21:54:50 +0000
ROA not after:            Sun 07 Jun 2026 21:54:50 +0000
asID:                     398781
IP address blocks:        172.252.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:88:64:0a:7d:40:83:97:80:83:fd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  9 21:54:50 2026 GMT
            Not After : Jun  7 21:54:50 2026 GMT
        Subject: CN=b575a068-7f3a-40e1-86a7-45c2e765d9f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2b:be:4e:67:72:03:7b:21:30:50:8c:b2:86:
                    12:cd:60:c0:75:3e:c5:ce:b5:f2:6d:43:5d:b2:d7:
                    9b:a8:ef:be:c0:1f:91:04:bb:97:3e:9e:e2:ac:d0:
                    61:15:50:cc:96:06:c3:e6:ea:89:c3:c6:40:f6:8a:
                    28:82:d8:61:50:fa:23:0e:04:c7:3c:4f:1a:05:50:
                    39:08:71:ef:9e:ef:30:70:59:dd:01:d9:24:a6:aa:
                    f3:a8:c8:73:65:2e:9b:d1:1b:e1:b1:57:76:8c:3b:
                    bf:1c:71:bc:88:c3:2e:c7:fa:b9:ab:32:6a:6f:a6:
                    7e:82:8c:4f:a7:28:7f:57:36:0c:79:52:1c:1a:24:
                    e6:82:84:10:63:aa:36:60:9f:e0:c6:31:74:cd:66:
                    7d:6c:32:5f:fd:40:20:18:f5:b2:1d:59:d3:98:41:
                    1b:ec:3e:c7:09:5c:03:a3:88:6b:8b:ba:11:aa:9c:
                    3d:20:41:b7:19:c9:ef:05:1c:76:34:ec:d6:01:8d:
                    20:9b:0e:13:1a:9a:2f:3a:8a:95:03:ab:92:12:83:
                    3e:e7:3a:00:fa:8d:e0:b6:b4:0c:6a:66:09:08:fe:
                    35:88:e7:57:6a:88:b1:9c:f5:57:a4:df:1b:6e:6d:
                    cb:af:62:ab:bf:ef:f3:ca:be:dd:09:c8:02:01:63:
                    96:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4A:5C:15:E1:88:62:EF:6F:DB:40:6B:2E:32:E6:F3:AD:37:B2:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/44ba49da-41b6-34de-9d08-375625077233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:c2:21:d7:0a:a4:f9:75:52:c6:0a:8b:ba:8d:b9:91:79:0e:
         bc:f6:43:00:a0:6a:94:72:07:bc:3c:10:93:8d:95:15:8f:90:
         c2:66:56:8b:8c:65:bd:7d:86:7d:b8:07:c3:9c:69:c1:72:3f:
         e6:53:62:4f:44:6e:b9:44:d0:23:34:b7:db:80:88:fd:6c:4f:
         8a:93:73:7c:0d:0d:02:98:20:7d:d7:34:f2:5d:1b:3a:a0:68:
         17:36:9f:20:ef:09:ec:a9:b8:a4:82:65:46:6c:c9:75:36:7a:
         8a:51:1e:f1:6c:a1:54:61:54:5d:f8:52:11:74:19:a8:0a:33:
         55:9a:6c:5e:65:31:65:b2:15:fd:09:2a:78:0d:b5:06:b0:0a:
         b4:9e:64:ee:76:f6:95:19:7a:ee:2c:29:a6:3f:db:36:5b:10:
         e9:cf:d2:23:d4:11:ab:5d:6a:c5:ee:86:9f:2f:56:c0:98:1e:
         91:dc:9a:f1:7c:ea:c4:ce:b0:08:a8:ff:d4:37:f4:ec:98:8d:
         84:31:25:72:67:cf:69:21:4c:2a:ae:61:ff:cf:4c:75:74:0e:
         6d:a1:b4:b1:cc:cd:c1:c3:41:0e:53:b8:96:0d:91:7a:d8:5c:
         29:28:ae:b8:db:ce:cd:0d:44:1e:77:10:28:d9:ff:c8:3a:1e:
         cb:aa:e6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 18:52:44 2026 by rpki-client