Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7e2c2830-f79e-36e3-bba0-d155f6b4278b.roa
File:                     7e2c2830-f79e-36e3-bba0-d155f6b4278b.roa (raw, json)
Hash identifier:          iB44gBBbkENzyxz/ycoaOdQ7tdZ8An2eX8QrOEDZMKA=
Subject key identifier:   70:00:84:E0:55:1E:21:97:66:B7:23:97:02:FD:5C:82:94:59:12:38
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D1D88627C9BDE1981E5A58700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7e2c2830-f79e-36e3-bba0-d155f6b4278b.roa
Signing time:             Mon 09 Mar 2026 21:54:49 +0000
ROA not before:           Mon 09 Mar 2026 21:54:49 +0000
ROA not after:            Sun 07 Jun 2026 21:54:49 +0000
asID:                     398781
IP address blocks:        172.252.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:88:62:7c:9b:de:19:81:e5:a5:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  9 21:54:49 2026 GMT
            Not After : Jun  7 21:54:49 2026 GMT
        Subject: CN=dc5af714-6d2e-4aed-901b-bbfebd7b9854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:40:68:d3:b6:ae:a0:ba:59:f2:79:af:72:7d:
                    27:8a:3a:a0:57:32:be:6b:88:a9:14:b4:e4:51:3d:
                    ef:5e:31:e2:c5:d2:38:34:eb:a8:32:11:3e:fb:d4:
                    97:0b:0c:07:1b:82:f4:8c:1e:00:0e:2b:99:3a:13:
                    d4:69:72:f9:11:94:3e:50:1f:96:62:8c:c8:28:be:
                    b1:0e:ae:1c:99:99:9d:0e:75:5a:85:a6:58:b8:24:
                    ef:9c:44:9b:e1:71:e2:3a:ff:44:b7:25:ef:1d:cd:
                    32:83:ee:74:00:dd:a5:1b:e0:d9:54:dc:c9:67:47:
                    58:22:cd:52:fc:f5:a7:70:46:b0:d2:6d:96:d5:dc:
                    89:1e:f6:fb:14:09:d5:71:02:ad:de:07:80:18:20:
                    a4:df:4b:5b:0f:b3:5f:cb:b1:1e:38:5d:27:8b:e4:
                    e2:b3:20:28:0c:18:d9:3b:0c:31:6e:ae:6d:79:c2:
                    d6:1f:8e:01:2e:b4:d4:0d:84:f2:20:d4:ff:f6:49:
                    ec:57:dd:3f:21:13:09:b4:ef:e1:e1:c1:c1:fa:3e:
                    52:7b:b1:7f:19:bd:00:8d:0a:a9:18:aa:ce:55:1b:
                    33:09:26:46:56:de:8f:a3:4c:83:7c:cb:4e:e8:be:
                    37:44:ef:8b:c5:c0:92:9a:10:2a:2f:0b:50:89:78:
                    11:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:00:84:E0:55:1E:21:97:66:B7:23:97:02:FD:5C:82:94:59:12:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7e2c2830-f79e-36e3-bba0-d155f6b4278b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ce:2d:16:04:45:78:1c:78:61:75:65:27:d5:57:c0:fb:14:
         76:d4:d8:38:53:7b:6c:4f:8e:8c:a4:16:b7:fb:72:aa:a4:13:
         64:63:13:19:55:63:2e:e5:fa:69:b7:10:ad:34:16:dc:16:48:
         87:71:e8:92:9e:3a:8f:6c:92:d8:9d:e9:1a:ea:91:e3:aa:fa:
         42:16:df:fb:0b:a0:97:4c:b8:72:05:ec:f2:d6:be:01:71:2b:
         90:b5:8f:8a:6b:4a:a7:a3:8d:95:db:99:5f:ec:2e:44:6d:6f:
         43:2a:94:3d:c2:d8:44:2d:77:9b:e4:c2:00:5e:9f:f4:a4:b0:
         f7:3b:9b:58:fe:0b:19:41:d8:f9:c9:80:d7:b6:92:a3:76:a8:
         20:8e:0e:91:38:51:85:75:ac:6c:93:74:e2:5c:21:ab:61:54:
         5b:a5:e6:a7:bc:77:a2:df:d8:f1:10:75:1c:15:99:6f:45:c2:
         b2:fd:0a:3f:e7:a4:15:db:dd:22:db:b6:4e:92:d3:4b:6e:e7:
         a3:27:26:c7:19:90:8f:61:b3:6c:98:d9:88:c3:2c:79:18:9e:
         9e:4d:53:47:85:fe:4d:cd:04:92:d1:ce:e2:b0:14:d9:2a:67:
         ae:82:3a:90:11:60:0d:4b:8a:b2:12:eb:2d:65:dd:c9:f6:03:
         c0:46:3c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 18:51:32 2026 by rpki-client