Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e376bb20-67ed-32f6-87b9-7fe802a8f2df.roa
File:                     e376bb20-67ed-32f6-87b9-7fe802a8f2df.roa (raw, json)
Hash identifier:          qXl9kHBs96tC9wBrzYGk5Xdv4oC3qS4LtG0HweA6gKM=
Subject key identifier:   BA:C2:D9:6D:E1:95:7A:D0:D4:51:F1:D5:55:59:4C:F6:EB:36:94:49
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D1D886580922F8F8F69D5B780
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e376bb20-67ed-32f6-87b9-7fe802a8f2df.roa
Signing time:             Mon 09 Mar 2026 21:54:50 +0000
ROA not before:           Mon 09 Mar 2026 21:54:50 +0000
ROA not after:            Sun 07 Jun 2026 21:54:50 +0000
asID:                     398781
IP address blocks:        172.252.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:88:65:80:92:2f:8f:8f:69:d5:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  9 21:54:50 2026 GMT
            Not After : Jun  7 21:54:50 2026 GMT
        Subject: CN=1fc7b0f8-fcb6-4489-ad81-5ca4b014cf99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ee:14:55:1a:3a:d4:1a:65:43:09:f2:0b:55:
                    47:20:9b:bb:de:44:54:38:3d:8b:91:e9:fc:7d:7f:
                    52:81:81:ea:81:c9:c5:db:a5:af:df:99:d7:f2:59:
                    52:05:c2:79:09:92:ea:82:2a:85:d1:6c:fd:d5:f1:
                    38:70:b5:d8:88:11:4c:0a:81:69:68:2b:97:20:69:
                    6f:29:07:f6:8f:9a:ad:2e:b2:ac:ab:ea:23:58:b3:
                    1a:53:33:15:e3:01:a9:2c:17:9e:0c:3e:f5:36:9b:
                    49:d0:7b:09:08:49:e2:5a:9c:2d:4e:2a:24:e7:93:
                    52:26:1d:16:17:fa:19:33:ff:d8:78:9f:87:2a:34:
                    d1:b4:02:1b:b1:bb:c3:0a:08:0d:77:dc:02:88:40:
                    ac:61:05:67:8a:19:21:fa:5d:ab:7e:45:f1:ed:80:
                    93:65:8f:15:1d:12:eb:f1:e7:1b:86:74:7d:bb:25:
                    3a:ad:71:f6:cf:80:86:92:df:59:b7:11:77:70:36:
                    62:d8:cf:da:e3:8f:50:54:8c:be:12:e9:02:3e:55:
                    80:1d:49:17:37:02:ef:a7:2f:34:e1:83:29:c7:aa:
                    d8:dc:51:6d:df:98:1a:16:11:dc:79:1d:13:b6:f9:
                    53:fc:a3:59:d6:3c:7e:bf:49:67:eb:c4:21:87:b7:
                    27:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C2:D9:6D:E1:95:7A:D0:D4:51:F1:D5:55:59:4C:F6:EB:36:94:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e376bb20-67ed-32f6-87b9-7fe802a8f2df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:ce:87:f6:70:d7:f9:4a:46:fc:53:85:28:ef:0c:bd:21:ff:
         98:be:f5:59:71:ba:cd:e9:21:f8:63:78:44:0e:48:3d:4c:fb:
         41:f3:7b:a3:4a:27:11:34:cb:98:5b:20:53:81:8b:03:84:71:
         dd:43:af:10:59:d5:f9:12:b5:2e:ce:89:79:a0:40:37:f8:97:
         1c:30:84:df:bd:8c:ff:03:fb:20:6d:6b:73:2c:7e:ad:e4:d7:
         66:49:cb:7c:90:1a:71:87:5a:01:7c:3c:0f:3a:0b:52:c2:ed:
         07:93:4a:f3:3f:bc:c8:2c:8e:08:69:0d:24:43:8f:e0:21:d6:
         78:aa:6f:40:49:f2:df:8c:3a:d9:6e:76:61:07:8b:8d:32:3c:
         af:22:18:d4:47:23:45:bc:40:53:ea:5a:f0:f3:bc:33:1b:02:
         78:fe:c7:e3:de:8b:69:51:62:93:7e:7b:c2:d4:11:1a:ed:27:
         fc:a6:44:97:36:5c:64:9d:58:b0:33:2f:96:d1:c4:94:6a:c7:
         bc:a1:ce:1a:32:45:09:42:e0:d5:7a:d4:8b:c0:4e:e1:8d:df:
         db:e0:70:a0:99:61:ba:75:4a:d5:23:0c:b7:ca:11:00:fd:c1:
         e4:89:ae:29:86:e1:37:92:a0:5b:31:bb:d7:8b:cc:4a:96:ac:
         9f:a3:9e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 18:47:16 2026 by rpki-client