Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8de0e248-17a5-3b56-b62a-096589cbcaed.roa
File:                     8de0e248-17a5-3b56-b62a-096589cbcaed.roa (raw, json)
Hash identifier:          u/W6jhYDCgEBh9MIq69MTCo5lDjir3CRZQLCqGpfuiY=
Subject key identifier:   F0:D3:84:AC:FF:38:5E:37:B7:00:42:25:F5:05:F3:BF:C3:D5:C1:37
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D27DCB147D3FC01CB674D2080
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8de0e248-17a5-3b56-b62a-096589cbcaed.roa
Signing time:             Fri 13 Mar 2026 14:42:46 +0000
ROA not before:           Fri 13 Mar 2026 14:42:46 +0000
ROA not after:            Thu 11 Jun 2026 14:42:46 +0000
asID:                     18779
IP address blocks:        45.39.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:dc:b1:47:d3:fc:01:cb:67:4d:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 13 14:42:46 2026 GMT
            Not After : Jun 11 14:42:46 2026 GMT
        Subject: CN=5d44dd87-41ab-4024-8d1b-6c27001f1bec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:eb:57:0b:23:53:23:42:8e:c9:94:1d:4c:a2:
                    b5:a6:b0:ff:12:9b:f0:4c:58:eb:aa:02:07:b1:86:
                    06:c2:23:13:48:d4:c2:c9:c2:68:f0:68:54:6e:f3:
                    f6:b9:51:2e:27:b2:c0:b7:97:11:66:e7:01:ee:7f:
                    79:2b:08:78:f2:7f:29:93:95:ee:45:66:c6:c7:c0:
                    e8:a8:d3:2e:b4:57:f5:78:7d:a1:b4:43:e0:fc:de:
                    18:ea:46:2e:ae:c4:2a:2a:f0:f9:c0:a7:b4:02:ef:
                    69:c2:c6:09:f5:22:03:cb:5b:4b:25:5c:7a:2a:1a:
                    61:92:8a:a3:f6:ce:3b:bc:a5:6c:59:c0:9c:ed:ab:
                    ce:26:0a:37:84:fc:6f:2f:52:0c:8c:7a:5c:d1:83:
                    62:da:3e:28:a1:e0:84:92:9a:af:1d:f0:59:5e:6f:
                    5b:ce:db:52:12:d5:54:04:ea:e9:c9:88:34:39:4f:
                    28:eb:c2:21:6d:7e:5c:df:67:cc:9b:0f:a9:16:fb:
                    5b:58:b5:f4:02:5b:75:64:73:12:b0:38:8d:a5:14:
                    59:10:cc:5f:3c:8b:9d:ff:39:14:ef:26:c6:6b:e9:
                    de:57:9a:69:0e:0e:e5:dc:8c:d0:e6:c3:c6:e8:ea:
                    94:17:52:b5:29:5d:d2:d0:2c:28:71:07:38:9f:54:
                    24:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D3:84:AC:FF:38:5E:37:B7:00:42:25:F5:05:F3:BF:C3:D5:C1:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8de0e248-17a5-3b56-b62a-096589cbcaed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:ad:bf:8d:52:21:1d:6a:30:6e:3f:5e:47:2f:2b:bf:59:66:
         cb:c4:c0:6d:ba:dd:a7:48:e5:12:01:c4:c6:9b:6e:a9:3d:f7:
         97:f5:11:37:ea:bf:bd:a7:92:3c:d9:f9:ea:07:ad:bd:57:d2:
         c9:ca:56:06:09:79:03:18:8c:88:39:4f:2d:a3:05:33:2a:be:
         0f:f4:ec:29:ff:cf:5f:3b:35:8d:2e:73:39:1b:88:46:f7:0f:
         03:c2:98:25:7e:c6:6b:b7:32:d2:0c:57:7f:b8:5c:c7:9f:73:
         2e:59:84:33:6d:fe:1f:46:7d:54:a1:7d:54:57:85:2d:72:bd:
         8e:3b:21:11:cd:13:13:48:eb:f8:d6:d4:10:53:62:58:2e:3e:
         6c:b7:63:8d:30:7a:56:32:fe:e0:1f:07:1f:4c:57:95:80:6a:
         fa:ca:b7:95:d9:90:d8:ed:bd:e5:19:e2:95:b8:05:f9:33:7b:
         12:d5:88:38:62:b4:8b:b3:f2:2d:b1:e2:66:c9:88:e6:43:bd:
         b1:63:8e:ee:77:ce:c2:11:1d:06:e8:d6:f0:9f:29:39:0b:0b:
         82:6c:97:df:98:d2:18:5a:8e:93:28:50:60:57:f9:d2:75:09:
         ae:9d:fe:11:c0:db:5e:d0:1b:fb:7f:d8:4b:87:2f:7a:ae:0b:
         c4:5f:ed:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 08:10:12 2026 by rpki-client