Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/67ea8ee8-c223-33c7-99c0-c785a2aa6e96.roa
File:                     67ea8ee8-c223-33c7-99c0-c785a2aa6e96.roa (raw, json)
Hash identifier:          8+mrelCWOHjv8UqA6jtOigDVWioQoVg6SPWOy9RirVE=
Subject key identifier:   80:25:70:C8:9A:08:82:2D:A1:FF:AC:EC:3B:08:09:D8:FF:E9:FF:21
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D1D8863B4DA184AAD509D8AC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/67ea8ee8-c223-33c7-99c0-c785a2aa6e96.roa
Signing time:             Mon 09 Mar 2026 21:54:49 +0000
ROA not before:           Mon 09 Mar 2026 21:54:49 +0000
ROA not after:            Sun 07 Jun 2026 21:54:49 +0000
asID:                     398781
IP address blocks:        172.252.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:88:63:b4:da:18:4a:ad:50:9d:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  9 21:54:49 2026 GMT
            Not After : Jun  7 21:54:49 2026 GMT
        Subject: CN=5c901ff5-dddc-4198-9ba3-1c62839d15b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:96:bd:f6:d3:af:c8:78:7f:02:87:bf:af:a4:
                    48:69:27:23:c5:4f:f5:21:4f:fd:0c:be:56:18:e1:
                    c1:14:da:48:31:eb:55:f0:cf:97:37:01:dc:35:66:
                    52:83:5b:f8:1d:aa:6c:98:51:f2:59:2b:d4:2a:57:
                    59:30:e3:17:dc:c9:ca:fb:d9:60:7a:b0:9c:d0:a8:
                    3d:8f:96:e7:2d:c8:c0:8b:25:45:ac:f1:40:43:26:
                    0c:a1:07:c4:79:c1:23:48:0a:a9:08:2b:4e:69:ee:
                    11:e0:14:84:63:f0:76:e4:85:38:5b:24:c2:d8:67:
                    8e:42:ce:8c:c2:53:c3:39:f6:7d:ad:ea:c9:0d:c5:
                    2f:29:c7:6d:96:62:2f:6a:eb:87:18:d0:c1:c5:b9:
                    71:c2:6b:3f:d8:22:9c:8e:be:a3:b0:ed:73:05:cf:
                    6c:44:62:b8:3b:3b:3d:88:7d:7f:d2:a7:c7:62:a5:
                    c6:d4:1f:a1:fa:ab:e9:88:d6:a1:18:ef:61:b4:76:
                    70:08:e2:ae:aa:06:66:74:ea:63:29:11:cb:a8:ae:
                    08:6c:f1:cb:71:08:0e:45:9b:1e:97:10:62:5f:0a:
                    19:ec:d0:fe:48:cb:b5:29:63:00:dd:b0:f8:ff:61:
                    e8:47:6c:5d:d1:bc:84:11:56:c2:b7:bf:93:98:34:
                    42:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:25:70:C8:9A:08:82:2D:A1:FF:AC:EC:3B:08:09:D8:FF:E9:FF:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/67ea8ee8-c223-33c7-99c0-c785a2aa6e96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:b9:1a:d0:46:8d:09:d7:4a:24:c6:45:d6:27:53:0e:8e:9f:
         ad:4e:c8:d0:20:72:98:07:97:90:14:c6:52:e8:e1:4c:6c:b0:
         a7:e8:8b:ff:8b:cc:78:64:99:79:65:62:51:cc:3c:60:c0:da:
         dd:a8:ca:a6:99:b3:35:47:a6:58:13:bb:d2:bc:1f:89:3c:a3:
         44:8b:3d:4b:3d:02:d5:dc:63:7f:27:11:7a:ad:b7:84:d7:51:
         ab:78:2e:db:29:b0:f2:8f:d6:73:7a:c6:20:cf:f9:c2:1b:d1:
         0f:3d:35:aa:41:33:0f:c7:75:e3:2f:ac:da:d9:21:79:24:3b:
         69:ea:1f:9a:00:ed:9b:f2:98:8a:f7:60:1a:d0:5d:e0:3f:1a:
         b7:d7:20:eb:82:9f:99:b5:d8:b6:d7:07:fc:d1:d7:9c:ba:19:
         b1:24:a1:91:f9:6c:e6:75:64:98:cc:83:a2:f6:22:03:29:be:
         7c:23:82:92:0a:1d:38:cb:b3:2e:c8:c4:92:f7:22:56:b1:ac:
         d4:1d:77:3a:5e:bd:d3:5f:8c:94:c9:c6:da:88:ba:12:fb:14:
         90:67:2a:cc:db:4d:50:d1:cd:bb:d0:47:09:7b:59:96:32:5a:
         f8:9c:29:b7:e7:18:62:56:f7:13:a3:22:a6:88:a3:23:7f:a8:
         a9:f7:9f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 18:49:55 2026 by rpki-client