Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/61b4e49c-34cb-3724-a58f-552b9b9be9ce.roa
File:                     61b4e49c-34cb-3724-a58f-552b9b9be9ce.roa (raw, json)
Hash identifier:          NBe2h24CAAB5sQw/rMTAnEmjQE11LXVcXStXUSMQ+qo=
Subject key identifier:   EB:4F:9A:0A:A6:F2:3F:D3:B9:E2:CF:F0:94:61:DF:CB:A0:CF:D5:07
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584CAA2726707186A1134114B000
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/61b4e49c-34cb-3724-a58f-552b9b9be9ce.roa
Signing time:             Tue 27 Jan 2026 14:00:36 +0000
ROA not before:           Tue 27 Jan 2026 14:00:36 +0000
ROA not after:            Mon 27 Apr 2026 13:00:36 +0000
asID:                     10557
IP address blocks:        172.252.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:27:26:70:71:86:a1:13:41:14:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 27 14:00:36 2026 GMT
            Not After : Apr 27 13:00:36 2026 GMT
        Subject: CN=ce1d09de-bc42-436b-b2e4-b0187be1e2cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b7:39:38:20:f1:40:23:2e:c5:f9:0b:da:46:
                    5a:c2:fc:a5:69:c5:77:01:90:3c:48:71:c1:df:d5:
                    f8:41:97:e9:22:a1:0e:ac:d4:f8:af:32:aa:03:58:
                    9b:58:31:cb:7d:4a:ec:18:3e:44:e8:22:3b:e7:1b:
                    5f:d5:61:9d:28:57:0a:d8:7d:1a:2e:b9:c4:93:2a:
                    a6:ba:ab:7c:b1:27:53:95:1c:23:fb:a0:4b:93:45:
                    6b:fd:4d:a2:f5:50:ff:bc:ef:bf:84:43:71:e1:ce:
                    07:d6:31:23:c7:c0:15:cb:99:5b:fc:69:ea:f6:c0:
                    12:b2:dc:c1:d8:47:72:de:7c:e3:d4:cd:1b:9b:88:
                    31:67:07:ae:34:68:4a:24:26:b2:ed:bf:69:90:08:
                    92:b9:75:da:28:af:cf:8b:19:6b:a9:cd:f9:3a:27:
                    f2:f8:07:7b:b3:64:01:0a:77:65:00:39:fc:be:e9:
                    f3:81:6f:dd:0a:51:30:83:af:60:6f:04:6e:21:8b:
                    ac:c4:2f:b4:db:cd:2b:ca:4d:5e:86:ec:54:24:17:
                    54:ac:79:28:e7:35:8b:6d:3a:58:27:66:75:d4:38:
                    9e:60:28:e5:0a:bb:36:2d:f9:5b:31:a8:8f:71:75:
                    66:6b:c8:c1:80:d7:a4:d7:5f:d2:83:da:1f:f4:cf:
                    ba:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4F:9A:0A:A6:F2:3F:D3:B9:E2:CF:F0:94:61:DF:CB:A0:CF:D5:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/61b4e49c-34cb-3724-a58f-552b9b9be9ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:0c:9e:e9:23:bc:1a:04:d1:df:24:93:6f:c3:77:bd:a1:78:
         d3:3f:87:15:3a:dc:6b:e4:a4:df:eb:f8:1b:d1:1c:57:cb:46:
         af:a5:dd:95:3b:ac:86:eb:a4:62:74:cf:f6:e6:0b:2c:7b:04:
         dd:8f:2f:bb:9e:1e:2b:60:16:9e:93:33:71:ba:36:77:76:a5:
         97:d2:8a:5e:f1:0c:91:c2:ce:8b:be:1f:a1:17:e0:62:9f:0b:
         22:93:2e:03:eb:d1:03:3b:0d:c5:fd:4d:66:51:e8:23:3c:0a:
         2d:4c:33:fe:0b:66:a8:99:15:55:fd:cb:50:b0:5c:5c:f8:ba:
         3e:53:0e:74:5f:74:e6:e2:3c:ac:db:62:e4:83:9f:b4:af:6a:
         2c:9e:c2:c0:c0:a8:31:fb:92:c9:f2:6e:9a:4b:e7:d6:64:eb:
         19:65:e6:12:f0:84:b9:68:2f:58:b0:66:f8:9f:bd:e7:3b:aa:
         42:48:89:14:b3:56:37:fa:06:34:a5:b2:f6:61:c3:52:d5:46:
         2d:10:31:94:2a:25:7d:62:77:b9:f9:fd:61:31:ed:8b:ba:37:
         4c:3f:b0:98:06:2c:69:75:36:02:c1:2f:c9:ff:56:d6:34:d7:
         51:7e:f0:2a:50:d1:43:cc:38:07:cc:20:5e:5f:4c:ec:65:f4:
         e3:49:bb:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJyZwcYahE0EUsAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk
Y2UxZDA5ZGUtYmM0Mi00MzZiLWIyZTQtYjAxODdiZTFlMmNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLc5OCDxQCMuxfkL2kZawvylacV3AZA8SHHB
39X4QZfpIqEOrNT4rzKqA1ibWDHLfUrsGD5E6CI75xtf1WGdKFcK2H0aLrnEkyqm
uqt8sSdTlRwj+6BLk0Vr/U2i9VD/vO+/hENx4c4H1jEjx8AVy5lb/Gnq9sASstzB
2Edy3nzj1M0bm4gxZweuNGhKJCay7b9pkAiSuXXaKK/Pixlrqc35Oify+Ad7s2QB
CndlADn8vunzgW/dClEwg69gbwRuIYusxC+0280ryk1ehuxUJBdUrHko5zWLbTpY
J2Z11DieYCjlCrs2LflbMaiPcXVma8jBgNek11/Sg9of9M+69QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOtPmgqm8j/TueLP8JRh38ugz9UHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNjFiNGU0OWMtMzRjYi0z
NzI0LWE1OGYtNTUyYjliOWJlOWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPwfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGAMnukjvBoE0d8kk2/Dd72heNM/hxU63GvkpN/r+BvRHFfLRq+l3ZU7
rIbrpGJ0z/bmCyx7BN2PL7ueHitgFp6TM3G6Nnd2pZfSil7xDJHCzou+H6EX4GKf
CyKTLgPr0QM7DcX9TWZR6CM8Ci1MM/4LZqiZFVX9y1CwXFz4uj5TDnRfdObiPKzb
YuSDn7SvaiyewsDAqDH7ksnybppL59Zk6xll5hLwhLloL1iwZvifvec7qkJIiRSz
Vjf6BjSlsvZhw1LVRi0QMZQqJX1id7n5/WEx7Yu6N0w/sJgGLGl1NgLBL8n/VtY0
11F+8CpQ0UPMOAfMIF5fTOxl9ONJu0I=
-----END CERTIFICATE-----
Generated at Tue Feb 24 15:46:09 2026 by rpki-client