Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/71b517bd-7ecc-3691-9b6e-a0e9cf367fed.roa
File:                     71b517bd-7ecc-3691-9b6e-a0e9cf367fed.roa (raw, json)
Hash identifier:          dMjCMRjVpUK+IFqVvztEGduAVF9NLqIhlsJlkBWwt04=
Subject key identifier:   13:21:84:59:3C:DB:FA:BF:88:61:4F:38:5A:8D:D5:61:39:52:8E:1B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D1D053702DCC30BB8E24F6380
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/71b517bd-7ecc-3691-9b6e-a0e9cf367fed.roa
Signing time:             Mon 09 Mar 2026 17:30:31 +0000
ROA not before:           Mon 09 Mar 2026 17:30:31 +0000
ROA not after:            Sun 07 Jun 2026 17:30:31 +0000
asID:                     398781
IP address blocks:        172.252.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:05:37:02:dc:c3:0b:b8:e2:4f:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  9 17:30:31 2026 GMT
            Not After : Jun  7 17:30:31 2026 GMT
        Subject: CN=dc30953d-22b6-4988-a038-c3af6d867981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:40:cf:ab:f5:cf:17:74:d2:11:43:91:89:15:
                    04:92:4b:2d:26:ac:bd:54:ce:ad:a4:e7:02:00:86:
                    f1:36:b6:3c:b0:c9:b2:6e:ec:df:be:2b:af:60:d3:
                    81:1e:ff:2d:05:0c:85:1a:d7:29:9f:c8:d1:06:4e:
                    36:37:86:37:66:55:04:c2:c5:39:f3:b0:5f:0b:ec:
                    2d:87:3b:4c:82:9f:e9:ff:1b:04:ed:40:e6:3a:01:
                    b9:a3:d1:cd:a9:21:d9:ce:bd:01:a4:b6:9e:0c:97:
                    6c:4e:c1:b3:d1:13:e4:f6:54:7a:80:ad:5a:49:20:
                    54:84:d1:05:2e:fd:55:ff:84:7b:63:4b:e4:af:3a:
                    62:83:ad:42:c1:dc:82:4d:ca:f6:10:e1:f9:5d:4f:
                    9a:15:50:10:4d:c5:08:c0:df:34:80:ac:36:fb:6a:
                    3e:df:15:c9:62:4f:2d:72:29:79:c0:4d:c4:5a:86:
                    1a:e9:48:89:ce:c1:64:d1:c6:37:90:5c:0e:e9:a2:
                    4d:ac:74:e7:98:d7:f5:6e:00:6b:9a:4a:73:51:f1:
                    c1:2d:a9:62:42:af:60:e8:7f:b5:06:71:07:7e:f1:
                    9a:0f:66:3a:03:17:33:26:94:93:36:ca:4c:81:08:
                    12:39:f5:df:40:3f:11:eb:eb:23:c8:8f:63:6c:33:
                    73:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:21:84:59:3C:DB:FA:BF:88:61:4F:38:5A:8D:D5:61:39:52:8E:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/71b517bd-7ecc-3691-9b6e-a0e9cf367fed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:82:0d:17:a4:df:a2:d4:10:96:37:79:0a:89:3e:e1:7f:b4:
         7d:7d:08:b6:48:a1:87:2c:09:cb:7e:09:83:f0:82:8e:58:63:
         de:ec:3f:c3:dd:d0:2f:4f:01:94:cd:ea:15:fe:64:64:b5:70:
         72:07:12:95:61:90:bc:1a:f3:16:6f:9c:e3:4b:55:0b:9d:65:
         c5:91:42:82:23:dd:2e:f3:60:96:d4:bc:1c:03:6e:3a:0e:f5:
         eb:e6:86:f1:5d:58:6a:36:8e:31:66:f4:b2:bc:4f:01:27:d2:
         fe:f8:dc:35:6e:f3:c0:5b:4a:a3:9d:54:0c:2b:2b:47:8d:6d:
         87:cc:e6:46:b1:f3:90:3d:44:98:1f:f9:6e:d9:e7:5f:0c:b1:
         51:97:37:47:36:f2:b7:01:2b:0f:0f:de:df:9e:69:76:8e:a5:
         31:f9:27:3c:26:04:36:28:ce:57:16:41:d8:71:a5:0a:d6:1b:
         77:8e:4b:38:b6:54:ba:73:bf:e5:8b:a6:67:c2:79:b3:f8:45:
         0c:bf:f5:0d:23:92:9e:1a:44:91:3b:dc:40:d7:0d:1e:23:7d:
         58:3d:41:a4:20:13:ce:18:11:03:6b:4b:e2:d0:0e:7f:23:23:
         a0:64:e8:f2:76:64:c2:0e:b5:42:16:a7:e9:99:25:c0:66:3e:
         4e:da:f9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 18:48:47 2026 by rpki-client