Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/14481cd6-eccc-359d-bbbc-53f14a61bfd2.roa
File:                     14481cd6-eccc-359d-bbbc-53f14a61bfd2.roa (raw, json)
Hash identifier:          7dH/iPUHKs/6Wr+KJR0JWZ0/esnlrr05cKdOxuxq6hY=
Subject key identifier:   38:91:3D:55:BE:A5:B7:F9:E4:7A:CE:81:DF:64:0A:62:C0:EC:64:08
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584CAE5B3EA2683309724F1A5B00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/14481cd6-eccc-359d-bbbc-53f14a61bfd2.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     26481
IP address blocks:        209.73.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5b:3e:a2:68:33:09:72:4f:1a:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=76927a1c-240c-4b1d-b869-6790d9a3f70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:66:3c:4e:a8:e9:ed:3c:ce:56:ae:6e:68:39:
                    82:68:80:ec:32:63:0a:3f:fd:ff:ae:79:e3:7d:8f:
                    1d:fb:12:8c:5e:14:d2:de:d2:72:54:91:09:5c:8f:
                    31:51:a1:6a:48:88:30:2e:eb:f6:98:86:ee:dc:03:
                    34:33:77:e2:07:99:ef:63:44:13:01:e9:d0:97:40:
                    39:ba:27:3e:b9:20:c4:ae:29:81:3c:6d:25:f6:0f:
                    11:fb:f3:07:70:e7:a9:de:ec:59:62:05:39:34:ad:
                    da:87:72:c0:3c:9c:75:72:05:83:2f:05:11:22:33:
                    b8:39:af:d4:45:fb:35:f7:4a:2c:83:88:4b:9a:10:
                    a0:1d:21:04:7e:0c:80:be:59:86:bd:1c:8c:6b:a4:
                    a1:63:d0:ff:a3:bb:a8:32:58:2b:2e:60:0a:ee:9a:
                    44:e4:02:e3:15:f7:aa:1b:0c:92:34:42:d4:6e:f2:
                    53:77:7b:94:cf:38:82:1b:a3:da:45:3b:0f:6c:a9:
                    1e:28:20:35:23:9b:45:35:b9:7c:b7:dc:dc:d7:7f:
                    b3:ac:52:fe:c3:38:ef:24:94:c5:23:88:93:cf:da:
                    07:1d:c9:38:7e:82:24:52:8f:2c:18:da:fb:d6:7b:
                    a7:3c:a5:89:64:2a:21:46:f3:36:42:54:b4:ff:b7:
                    34:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:91:3D:55:BE:A5:B7:F9:E4:7A:CE:81:DF:64:0A:62:C0:EC:64:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/14481cd6-eccc-359d-bbbc-53f14a61bfd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.73.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:7f:ac:a3:44:10:82:d3:02:bf:72:6d:0d:d0:67:80:e5:04:
         17:a3:73:48:78:84:fb:0d:a8:c5:94:83:86:c0:ad:b1:57:5e:
         93:bb:61:8e:cb:9e:22:db:df:64:ef:86:30:75:21:c2:d2:d5:
         fd:79:a3:a1:13:34:42:95:74:95:ec:f1:ee:a4:64:46:19:f3:
         f8:43:18:a1:39:2b:9e:df:65:a3:27:f8:c0:5b:24:80:29:1b:
         27:18:54:eb:e4:22:a6:36:01:3b:a7:67:91:1d:f9:70:31:6e:
         5f:8b:09:a5:70:38:54:9a:55:fb:43:45:06:70:e6:ee:44:19:
         6f:16:6c:2e:fd:c4:16:40:cb:ff:31:b7:59:cf:27:82:01:79:
         cc:1d:c0:a2:e4:a4:6c:e8:1c:6b:1f:8b:48:5e:a8:b5:3a:b1:
         53:94:e8:aa:85:43:5b:d2:43:ee:df:1a:df:92:09:0f:e5:57:
         1e:ba:42:ff:8f:31:d8:fa:ec:16:33:af:91:b3:d9:50:09:37:
         18:3c:e8:0b:6c:3b:45:ee:81:34:77:09:26:86:7c:7f:fa:74:
         13:d0:80:46:19:a8:33:ab:95:c5:2a:9a:b3:6c:58:c0:94:91:
         54:ff:0c:e2:ca:50:76:3b:b5:8a:5c:c9:5d:aa:35:42:d3:0e:
         be:66:e3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:52:09 2026 by rpki-client