Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/89aa4005-278d-386f-866d-1511267ae624.roa
File:                     89aa4005-278d-386f-866d-1511267ae624.roa (raw, json)
Hash identifier:          irMiDAaCq1dDSQmMa6mZOWZo9ro5Ey8GIfh9Fwt4VUc=
Subject key identifier:   38:70:13:C1:9C:62:0A:A2:EC:25:B6:30:B6:79:63:99:55:54:16:D8
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D1D88628B4323915D6505F100
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/89aa4005-278d-386f-866d-1511267ae624.roa
Signing time:             Mon 09 Mar 2026 21:54:49 +0000
ROA not before:           Mon 09 Mar 2026 21:54:49 +0000
ROA not after:            Sun 07 Jun 2026 21:54:49 +0000
asID:                     398781
IP address blocks:        172.252.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:88:62:8b:43:23:91:5d:65:05:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  9 21:54:49 2026 GMT
            Not After : Jun  7 21:54:49 2026 GMT
        Subject: CN=b362a892-46ff-499a-bf5e-3efdf1e9eda9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1e:9a:48:16:ce:70:28:c1:ff:fd:d9:06:cb:
                    9e:be:d0:1c:7b:45:bf:2a:01:64:27:4e:e5:f0:31:
                    0f:8c:b1:c1:44:bd:7d:5c:51:39:62:e3:68:ca:d3:
                    f5:d0:96:20:eb:bf:96:fc:16:38:80:d9:e6:72:92:
                    b0:97:de:0f:7a:75:60:8c:10:a2:e0:39:12:4e:7c:
                    36:7c:21:6c:3d:35:6a:4c:2a:47:df:ad:e4:5f:ae:
                    68:c9:44:18:b7:9c:57:ae:39:a4:6e:28:56:ff:93:
                    01:57:32:46:61:56:ad:fe:15:95:67:45:11:63:6c:
                    37:d1:7d:2e:f9:ed:08:a2:2f:4e:16:11:5c:1b:60:
                    6e:ef:0b:32:c2:ae:aa:ce:17:62:52:2b:8f:aa:ef:
                    cc:cb:b3:9c:14:d6:b0:36:88:3d:b8:20:43:92:f6:
                    4f:ac:89:f5:75:0c:7c:c9:d7:7e:1a:48:15:58:8e:
                    45:ca:b6:f7:2a:ce:24:b3:6a:0c:e3:91:5d:98:50:
                    26:67:ef:e2:83:59:cb:79:a1:1a:cb:24:b1:44:e5:
                    3c:d6:58:18:67:cc:b6:50:c5:ae:1e:64:29:be:fd:
                    b8:91:11:c6:95:2b:9b:31:b3:5e:57:fa:5d:b8:56:
                    01:22:d2:f3:45:73:bd:42:d4:1f:9b:5d:8f:1c:0f:
                    ca:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:70:13:C1:9C:62:0A:A2:EC:25:B6:30:B6:79:63:99:55:54:16:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/89aa4005-278d-386f-866d-1511267ae624.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:dd:fc:de:af:89:67:71:83:4b:94:52:56:7f:4a:bf:98:96:
         b2:60:87:0c:3c:60:4e:dd:a2:28:43:0d:4a:09:60:29:bc:7c:
         47:1e:a8:8b:64:7d:de:8e:c0:5c:e8:4f:ef:25:78:d3:4f:31:
         e7:9b:09:57:95:d2:8d:ae:01:0a:3b:64:18:a6:d4:2b:88:0f:
         9f:89:8b:cb:18:64:c3:9d:06:76:56:c5:ef:92:81:5f:95:a1:
         7b:2a:30:cc:34:59:c0:1b:1a:a3:7d:de:ab:cb:22:e6:2e:79:
         65:59:9a:c0:23:92:12:2a:2e:b9:83:0d:83:8b:ff:45:67:e8:
         0b:51:43:7a:7b:ae:2b:ed:82:f3:c8:e4:ce:22:ea:08:25:3a:
         16:12:93:d4:5b:a4:1e:fd:11:35:9b:7f:b6:d6:7c:d0:4e:bd:
         56:62:a0:79:c1:c1:d5:fd:62:f0:11:da:20:4f:64:89:38:9e:
         84:4d:eb:1b:21:30:d8:09:4c:dd:b9:69:33:01:b5:bc:6d:07:
         f1:ca:7b:99:76:cc:94:96:e9:94:5c:4e:b5:d4:cc:a6:b8:fd:
         dd:ef:8d:b7:9c:19:9c:0f:f4:39:53:c7:9c:a5:20:6c:86:65:
         6f:63:17:4c:b7:ee:e5:61:d2:c1:16:82:50:17:10:a6:03:b8:
         c4:e8:66:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0diGKLQyORXWUF8QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDMwOTIxNTQ0OVoXDTI2MDYwNzIxNTQ0OVowLzEtMCsGA1UEAxMk
YjM2MmE4OTItNDZmZi00OTlhLWJmNWUtM2VmZGYxZTllZGE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB6aSBbOcCjB//3ZBsuevtAce0W/KgFkJ07l
8DEPjLHBRL19XFE5YuNoytP10JYg67+W/BY4gNnmcpKwl94PenVgjBCi4DkSTnw2
fCFsPTVqTCpH363kX65oyUQYt5xXrjmkbihW/5MBVzJGYVat/hWVZ0URY2w30X0u
+e0Ioi9OFhFcG2Bu7wsywq6qzhdiUiuPqu/My7OcFNawNog9uCBDkvZPrIn1dQx8
ydd+GkgVWI5Fyrb3Ks4ks2oM45FdmFAmZ+/ig1nLeaEayySxROU81lgYZ8y2UMWu
HmQpvv24kRHGlSubMbNeV/pduFYBItLzRXO9QtQfm12PHA/KDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDhwE8GcYgqi7CW2MLZ5Y5lVVBbYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvODlhYTQwMDUtMjc4ZC0z
ODZmLTg2NmQtMTUxMTI2N2FlNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPyVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG7d/N6viWdxg0uUUlZ/Sr+YlrJghww8YE7doihDDUoJYCm8fEceqItk
fd6OwFzoT+8leNNPMeebCVeV0o2uAQo7ZBim1CuID5+Ji8sYZMOdBnZWxe+SgV+V
oXsqMMw0WcAbGqN93qvLIuYueWVZmsAjkhIqLrmDDYOL/0Vn6AtRQ3p7rivtgvPI
5M4i6gglOhYSk9RbpB79ETWbf7bWfNBOvVZioHnBwdX9YvAR2iBPZIk4noRN6xsh
MNgJTN25aTMBtbxtB/HKe5l2zJSW6ZRcTrXUzKa4/d3vjbecGZwP9DlTx5ylIGyG
ZW9jF0y37uVh0sEWglAXEKYDuMToZrc=
-----END CERTIFICATE-----
Generated at Mon Mar 23 18:54:44 2026 by rpki-client