Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/de2badef-fb8f-321a-9c36-e3e0fd2a1bfa.roa
File:                     de2badef-fb8f-321a-9c36-e3e0fd2a1bfa.roa (raw, json)
Hash identifier:          vnI8Wnocp5i//GJ8XB87RahCBbgD5Ir4xaKYvSBrbqU=
Subject key identifier:   21:2A:33:36:B0:2D:9A:58:3F:15:F2:FB:02:66:3E:03:F6:16:76:0E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D143DA73270F69CF348F77300
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/de2badef-fb8f-321a-9c36-e3e0fd2a1bfa.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     54339
IP address blocks:        192.177.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:a7:32:70:f6:9c:f3:48:f7:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=ecff15b6-3ce8-4354-80b9-78229905bbd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1f:59:79:3f:7e:85:2a:14:ab:4f:8f:c6:ea:
                    49:1f:f3:15:01:c7:fd:f6:57:a8:d6:d5:c6:64:3d:
                    0f:17:5d:93:47:c7:74:cc:85:a0:8c:d9:4b:1b:63:
                    a7:55:82:0e:14:90:d8:68:2a:97:3d:6c:af:21:54:
                    13:74:d0:44:3d:2f:1a:00:18:c2:47:f6:64:a1:23:
                    f8:39:fd:7e:a0:8f:7b:78:18:32:fe:de:ed:20:23:
                    e9:5c:ee:30:cc:4e:1c:30:b3:ee:7e:85:d2:13:7f:
                    ed:f0:82:86:73:86:fb:bf:0d:37:3a:59:b3:bd:5d:
                    8d:ee:d1:55:d2:1a:a7:49:ae:8b:3f:6f:59:8f:41:
                    c7:81:d3:c3:2e:7d:aa:ba:e1:82:01:6a:9a:36:7c:
                    29:2d:ac:38:ff:c6:b5:62:b9:61:07:4d:60:38:55:
                    a5:c7:06:6e:11:19:8b:eb:78:3f:c6:09:df:5a:23:
                    6b:94:b2:55:c2:23:6d:54:7b:66:3a:76:74:93:0f:
                    dc:43:84:81:b9:01:a7:01:c6:6d:72:1d:fe:28:6f:
                    f6:bd:c2:08:e7:ea:f4:34:65:27:b6:06:68:c2:73:
                    51:fb:2b:20:04:64:a3:f1:6e:6b:80:96:e5:b1:46:
                    6b:6b:52:71:a2:a3:58:38:93:34:32:c3:e4:5c:48:
                    1b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2A:33:36:B0:2D:9A:58:3F:15:F2:FB:02:66:3E:03:F6:16:76:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/de2badef-fb8f-321a-9c36-e3e0fd2a1bfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:3c:0f:be:6d:94:dc:a4:be:04:8b:e5:77:2a:c4:71:f6:d4:
         76:81:9d:d3:3e:06:d5:6b:3b:59:09:30:c6:1a:a5:87:b8:fe:
         5a:cf:60:95:f7:42:67:0f:9e:11:17:a4:4d:df:53:0b:80:ac:
         98:82:f3:15:3f:54:78:6f:c0:50:2c:98:a1:20:5a:4f:b7:13:
         10:dc:47:e9:2b:cb:c7:79:29:41:f2:42:eb:10:2d:91:40:31:
         20:ef:52:b7:19:30:4d:f1:49:d7:8b:73:7a:f9:8c:6c:ef:c9:
         68:ae:ab:9a:fd:f2:1b:2b:88:c7:aa:7e:f5:9d:19:4c:c4:88:
         84:b0:41:db:d9:66:97:3c:84:ba:b9:dd:11:5e:77:2d:17:88:
         71:09:5b:01:64:19:2f:19:3a:52:63:3b:9d:e6:5a:a0:2f:d6:
         1b:b5:04:85:fb:42:9d:d4:0d:30:e8:f1:b9:c3:00:26:55:c1:
         f1:4c:9b:5e:a9:8f:c5:fa:82:09:73:a3:fc:8c:b4:ce:0e:91:
         0b:61:87:62:f1:af:6a:ff:52:d5:6c:61:b7:1f:07:ac:4a:93:
         e5:a5:e6:6f:3b:30:75:86:84:69:32:f7:98:4a:f5:24:06:25:
         df:d2:e1:06:da:fb:66:f2:50:8f:e6:41:9e:f7:2c:98:66:e7:
         1c:8b:76:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:29:16 2026 by rpki-client