Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c0822a8c-5dc3-3c3a-9f58-8997aa8bbf3c.roa
File:                     c0822a8c-5dc3-3c3a-9f58-8997aa8bbf3c.roa (raw, json)
Hash identifier:          9I0nxPsaTywdo3yrvSf4xtIBN2a2E9DGNuNH1bjxEEg=
Subject key identifier:   7D:07:4A:BD:BD:2A:1F:CB:4D:B4:8B:73:EB:DA:B2:90:CD:89:7C:63
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D1D886336920ACFEAD94D7A00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c0822a8c-5dc3-3c3a-9f58-8997aa8bbf3c.roa
Signing time:             Mon 09 Mar 2026 21:54:49 +0000
ROA not before:           Mon 09 Mar 2026 21:54:49 +0000
ROA not after:            Sun 07 Jun 2026 21:54:49 +0000
asID:                     398781
IP address blocks:        172.252.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:88:63:36:92:0a:cf:ea:d9:4d:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  9 21:54:49 2026 GMT
            Not After : Jun  7 21:54:49 2026 GMT
        Subject: CN=b87cb050-53df-4799-96ff-34c34ba7cd22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b1:58:39:59:29:d4:f7:21:61:be:ee:e6:d3:
                    f4:ab:23:fb:7a:dc:5a:76:ee:f5:00:91:de:4c:fc:
                    02:b2:61:37:74:a6:80:a4:66:30:a9:11:53:8c:0e:
                    64:cb:73:5b:cc:eb:af:07:73:02:9c:fa:48:7a:e6:
                    ce:fe:0b:e1:40:c9:62:2c:20:d7:cb:e4:6c:cc:a5:
                    df:91:34:0b:ff:42:07:d9:19:12:03:be:78:c3:b1:
                    0b:18:fd:b7:3d:ea:f4:df:32:37:f3:76:c9:64:aa:
                    36:24:30:c2:e9:c3:c5:2d:ce:01:0b:5e:57:df:89:
                    b6:c5:c4:81:f6:4b:a2:5c:ad:02:23:72:3f:a2:ba:
                    48:c5:a1:ee:79:c0:d0:e4:d5:a7:50:5d:d0:da:6f:
                    69:05:32:56:d9:e4:7d:24:08:0f:56:1a:a6:9f:e1:
                    e0:dd:6e:65:07:37:14:a6:b0:a2:f2:d5:fe:74:cb:
                    4b:e5:13:bc:bf:b8:8d:28:3c:be:29:fa:8c:c6:76:
                    5c:e6:b1:d0:9d:d7:81:05:46:3c:d9:4c:22:48:2d:
                    2e:e2:7c:32:99:30:e1:18:d3:6d:82:8a:b9:34:73:
                    38:a8:29:56:03:9b:5e:0d:99:85:9d:f6:b6:ac:98:
                    4d:c4:8c:a9:7a:c6:ed:bb:a8:ba:27:40:cb:34:79:
                    e6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:07:4A:BD:BD:2A:1F:CB:4D:B4:8B:73:EB:DA:B2:90:CD:89:7C:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c0822a8c-5dc3-3c3a-9f58-8997aa8bbf3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:bc:10:17:46:10:dc:a8:f6:6e:2f:cd:bb:a1:55:f6:c3:08:
         3f:c6:37:1b:2f:81:dd:50:1a:a1:18:1b:00:f9:96:0b:9f:f5:
         da:dd:77:04:cf:65:3d:6c:4a:3a:fe:51:28:19:f9:fc:fd:e6:
         85:25:ff:17:68:88:d2:c2:43:e5:26:91:0f:c5:bc:42:69:c8:
         99:ba:ad:e8:23:1d:11:68:58:a0:d3:43:13:70:57:71:8e:23:
         c8:8f:81:2a:96:11:24:64:6a:d9:5b:d2:d9:7b:b7:45:e9:4a:
         e9:35:f5:a2:71:69:5a:3e:2a:f4:c8:eb:dd:25:16:61:40:37:
         d1:43:71:fb:57:38:89:89:83:13:72:7b:c8:2f:61:f8:ee:52:
         42:56:62:1b:1c:e9:fd:91:5b:30:88:36:6b:ef:32:ef:f5:fc:
         57:62:47:43:25:bb:0a:0b:45:2e:99:7e:17:cd:02:a6:7e:d2:
         f6:7e:ef:1b:5d:76:0f:f8:03:7b:84:17:b7:52:a4:b2:e8:67:
         15:e5:6c:2e:6a:86:30:6d:46:b0:93:d4:83:45:c6:cf:ca:e4:
         69:cf:34:dd:72:c1:2c:91:03:60:3c:09:da:c7:45:7d:07:9f:
         6b:35:db:1c:d3:7a:e9:34:fe:38:e6:25:8c:20:55:19:c8:cb:
         5e:f9:87:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 18:48:48 2026 by rpki-client