Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ac08ffd1-75f9-36bf-8e5f-35a158e8451b.roa
File:                     ac08ffd1-75f9-36bf-8e5f-35a158e8451b.roa (raw, json)
Hash identifier:          fvDUEYsXnFpUMf7/xkT7eXSW+xEP9Xm62WPTvYMlrns=
Subject key identifier:   EF:4C:33:63:0A:28:61:0B:B7:24:C6:14:89:2A:EA:28:81:D2:0B:79
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584CE46453188D9CCD9AFB1CCB00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ac08ffd1-75f9-36bf-8e5f-35a158e8451b.roa
Signing time:             Tue 17 Feb 2026 10:41:05 +0000
ROA not before:           Tue 17 Feb 2026 10:41:05 +0000
ROA not after:            Mon 18 May 2026 09:41:05 +0000
asID:                     215728
IP address blocks:        172.252.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:64:53:18:8d:9c:cd:9a:fb:1c:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 17 10:41:05 2026 GMT
            Not After : May 18 09:41:05 2026 GMT
        Subject: CN=2464c85f-1a2b-4d96-ba35-d2b85f992b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f6:e4:c1:c1:13:6a:63:04:7c:16:80:9b:da:
                    a1:ea:12:05:bd:dd:e8:0d:65:ef:9a:2b:db:4d:2c:
                    4d:dd:aa:f3:da:29:44:76:37:08:c2:57:3c:62:f6:
                    ac:42:c3:51:93:83:ed:ec:62:8b:0c:52:2f:08:dd:
                    13:0b:78:5e:fe:6d:e7:0e:f3:06:a0:be:b5:2f:21:
                    08:53:9f:46:7a:d7:a3:73:94:67:48:7a:f0:ef:03:
                    d5:b5:15:58:c1:92:e0:19:96:6e:da:80:91:18:41:
                    cc:01:e3:06:2f:43:20:ef:5b:47:5b:00:8d:03:87:
                    d4:de:dc:81:de:c3:62:ff:68:e1:f2:5d:6d:04:60:
                    39:c3:88:11:f3:8d:7e:b7:d1:c3:c7:e8:8c:91:d4:
                    28:5d:68:3d:fe:b3:97:5c:15:06:8f:90:53:0a:20:
                    35:0d:ec:83:3f:fe:b4:b0:1d:c5:12:44:70:9a:49:
                    c9:ae:10:5f:93:f8:27:0f:d2:66:c0:7a:14:86:f9:
                    7b:fb:fa:27:7c:7c:b5:d9:94:61:65:66:a5:ac:55:
                    5d:c4:51:20:2b:fc:0e:12:ce:43:cf:34:63:2e:a3:
                    87:ce:a3:1e:af:9c:08:77:a0:47:51:71:4f:48:eb:
                    7a:99:49:39:d0:6a:1f:52:7b:c8:2c:58:03:59:2f:
                    24:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4C:33:63:0A:28:61:0B:B7:24:C6:14:89:2A:EA:28:81:D2:0B:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ac08ffd1-75f9-36bf-8e5f-35a158e8451b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:0c:25:15:d8:82:70:78:2c:e6:a6:61:8b:7f:e9:46:09:2f:
         9b:88:56:35:92:04:20:7c:2e:b1:b4:21:c4:d2:c3:c4:ce:f7:
         96:15:fd:b9:8e:8d:db:78:ed:70:84:82:b0:da:fc:88:7a:b3:
         09:45:23:45:90:9b:02:0f:ff:c6:a7:ba:72:b6:66:18:81:ba:
         fe:1a:0d:e9:0c:b2:1d:ed:ac:59:62:cd:75:11:4d:90:f8:59:
         1d:c7:b4:fa:1e:48:17:bb:56:bd:e2:6b:22:99:ee:90:cb:14:
         14:05:01:e1:cd:52:b0:b2:30:7a:7b:fe:70:a4:de:d2:2a:49:
         3c:63:b5:2c:db:28:db:95:12:ce:79:9a:e9:71:dc:83:ff:8a:
         02:c9:4b:c0:f2:08:a5:47:b5:3d:3a:b5:4c:47:6c:a7:89:89:
         90:4d:59:4a:cd:87:9d:3d:80:28:c5:c9:82:90:60:12:42:ef:
         d2:94:96:a8:f4:c9:79:df:1e:40:11:e6:21:69:91:43:d4:3a:
         ec:40:f5:eb:52:28:5d:ec:b4:07:7b:15:b9:02:e5:7c:4c:71:
         2a:2c:7e:aa:4b:35:36:a2:0f:62:27:c2:b2:ff:99:c1:d8:f9:
         84:53:c0:fd:e6:eb:79:3e:29:e8:72:fb:75:d5:c0:49:e6:13:
         bc:36:b6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 24 15:43:25 2026 by rpki-client