Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8f6c1bfe-307d-3e10-9cb3-64622d0d6706.roa
File:                     8f6c1bfe-307d-3e10-9cb3-64622d0d6706.roa (raw, json)
Hash identifier:          pUvviIZbODzkwYuLTbVfuaBQECWlscU2zZUQv9K81JM=
Subject key identifier:   EC:49:A6:29:70:68:1F:37:06:BF:BC:C7:92:5A:BE:94:6D:D7:31:41
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D1F4A3F5F9141EC6022B22800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8f6c1bfe-307d-3e10-9cb3-64622d0d6706.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     18779
IP address blocks:        50.118.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:3f:5f:91:41:ec:60:22:b2:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=df277da1-041c-4b17-9193-ab45f9307e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:10:9d:58:2f:73:67:b9:98:a9:0a:18:25:bf:
                    c0:81:fc:99:b7:00:f1:dc:12:b6:30:2d:b6:83:97:
                    26:ad:40:f0:9a:25:11:92:8c:c0:02:94:f9:9a:da:
                    f4:b1:5f:79:28:8d:a2:33:f6:a8:c0:db:7a:cb:d0:
                    e0:94:d0:49:b3:d1:38:d0:95:f6:cf:bf:b9:40:52:
                    9b:b5:80:85:db:7c:ba:e1:9f:0a:19:c2:da:07:6d:
                    36:22:fe:10:fd:31:9b:55:a2:3b:34:a0:1c:70:5d:
                    46:6b:64:9e:b3:56:ea:0c:a1:86:8a:2b:11:26:ae:
                    cc:8f:22:ff:47:a0:78:f3:aa:bb:30:d0:d6:d3:42:
                    07:ab:48:39:87:0d:03:11:a4:d9:0a:aa:bd:ac:41:
                    28:21:af:c8:da:9d:ed:bf:ef:7d:75:53:92:2b:10:
                    7a:55:dc:d7:19:8d:06:67:b6:3d:11:38:6a:4b:6b:
                    f5:73:de:8e:0a:23:8a:08:13:74:de:d0:65:44:12:
                    dd:ca:85:65:88:da:12:60:94:69:39:34:03:8c:1c:
                    37:6c:25:2c:bd:21:d4:dc:f8:2f:f7:a7:6a:fb:ba:
                    87:8b:d7:cc:53:70:f2:bf:29:08:68:2f:e0:de:b2:
                    11:69:f7:e3:b5:d3:d3:04:bf:ad:ac:cb:4d:d5:b4:
                    06:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:49:A6:29:70:68:1F:37:06:BF:BC:C7:92:5A:BE:94:6D:D7:31:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8f6c1bfe-307d-3e10-9cb3-64622d0d6706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.118.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:fd:29:c2:d5:62:1d:17:15:1e:aa:98:93:90:4e:a3:48:9f:
         4f:a7:4a:9c:2a:91:00:20:9e:cc:4d:2e:6f:78:b3:93:b0:f4:
         e2:66:43:4f:63:85:f8:eb:46:77:93:8f:10:43:66:0d:cf:bd:
         d9:4e:ee:f8:af:d1:94:93:aa:ce:fe:37:d0:07:5c:1f:25:8d:
         4d:5e:9c:1d:5e:84:c1:50:40:47:c3:38:8a:eb:a0:7b:1c:d6:
         35:45:c6:1c:87:48:b0:5b:b2:8b:7c:55:47:2f:5a:36:cb:d8:
         34:38:b3:ad:23:74:cb:54:62:ba:ef:59:d8:25:aa:e8:10:19:
         00:21:90:dd:f1:41:90:2b:be:5b:9e:0f:21:c6:74:eb:02:22:
         1a:12:8a:f4:32:b3:ad:47:48:8b:18:07:e6:39:f1:df:ad:6b:
         23:90:7b:53:a0:eb:93:98:8c:a7:42:e8:d1:b0:78:a3:81:ba:
         82:ba:4f:40:5c:c4:0b:c9:0c:01:13:74:13:3e:ad:d4:6e:e2:
         34:2e:82:2c:dc:50:51:0e:ef:d9:b7:e2:c0:17:fd:9e:3a:4c:
         a5:ca:51:01:23:db:9e:31:b0:41:db:2a:9a:a0:9d:73:7a:f1:
         f0:c9:13:6d:f8:78:fb:cb:50:c0:cf:a3:b0:38:c0:c5:ba:44:
         0f:f8:83:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 12:06:34 2026 by rpki-client