Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5ab4cfb3-40bd-344b-9a7f-b58ab131126a.roa
File:                     5ab4cfb3-40bd-344b-9a7f-b58ab131126a.roa (raw, json)
Hash identifier:          lJHxrHenndCetQHsTlxQpFfPzha13s9KXPmjNzu1qCo=
Subject key identifier:   F4:5C:88:30:02:8C:40:7E:64:8B:79:7D:FE:75:7A:46:70:E7:C3:7B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584CAE5EA372DD4013EE4B1B2B70
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5ab4cfb3-40bd-344b-9a7f-b58ab131126a.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     212238
IP address blocks:        45.39.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:a3:72:dd:40:13:ee:4b:1b:2b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=6af844aa-7aca-4abc-8550-0e974c5efe7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cf:ef:62:1c:b6:30:a5:4a:c7:39:fd:a8:b7:
                    1a:8b:d7:dd:c4:0c:3a:fe:03:b0:71:31:59:d0:d1:
                    c1:04:66:4a:33:10:af:91:0a:9b:ea:38:a5:7c:0e:
                    9c:5c:b8:08:b4:ac:b2:c6:72:65:7d:6a:04:3e:56:
                    a2:81:2b:20:54:03:63:da:9a:59:76:a7:31:c4:92:
                    a6:a7:03:30:62:b2:e4:e0:3d:fa:7a:f7:81:95:1a:
                    7c:94:ff:c6:e8:ad:83:08:0b:be:4a:14:a2:53:c2:
                    ce:90:14:d1:da:0e:3c:b4:b6:1b:1e:e6:91:74:a7:
                    33:ef:5c:39:44:af:97:f4:e7:91:fd:10:c5:74:27:
                    43:36:1f:17:b2:9b:45:e2:58:83:a7:2b:8f:e3:5c:
                    94:95:e3:bf:88:82:de:d1:44:7d:39:a7:71:eb:48:
                    33:03:9c:52:d3:65:70:bd:e1:83:07:77:58:a8:57:
                    80:fe:31:8a:55:3d:54:bb:10:74:5b:01:a8:be:70:
                    5f:97:19:45:b8:f3:c9:fd:fe:7d:fc:46:31:3b:57:
                    7f:ac:35:54:6f:88:f7:1e:e2:54:70:33:b0:0f:52:
                    b0:04:03:4a:d2:ee:11:1b:bd:85:1d:6a:9c:75:17:
                    a6:95:de:5d:66:11:50:aa:ff:d1:00:42:bf:66:80:
                    1a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5C:88:30:02:8C:40:7E:64:8B:79:7D:FE:75:7A:46:70:E7:C3:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5ab4cfb3-40bd-344b-9a7f-b58ab131126a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:a1:6a:08:d2:7c:29:d2:1e:79:b1:7b:24:3a:96:9e:05:0a:
         22:25:c2:71:b2:b9:94:0a:8f:5c:58:73:5a:15:43:cd:3e:5a:
         78:f5:d3:be:a1:49:fc:79:06:e0:43:5a:14:ca:71:f1:80:cc:
         3d:ed:ce:57:d3:c8:81:06:e4:64:21:fe:9a:c5:c6:2f:a2:ff:
         c5:f9:ec:78:61:c9:fd:a5:b0:f6:d2:87:7e:dd:95:77:77:be:
         18:09:d3:36:22:40:93:c2:6c:72:61:eb:98:c2:70:f2:48:aa:
         04:b4:17:8b:5d:ce:cd:31:57:96:d9:5f:71:19:03:b3:5c:e2:
         ce:83:5e:f7:34:00:1e:96:5f:8e:db:e0:41:72:e4:e7:d7:32:
         b0:ab:3a:94:1c:e3:c4:47:34:08:08:62:37:b0:17:b5:89:3a:
         92:ea:e9:8c:4f:89:27:45:20:e4:11:5a:45:ff:1f:02:0b:be:
         77:29:d1:11:7b:af:f3:49:e9:15:81:82:2b:ed:80:cc:09:87:
         05:80:27:8d:2b:0f:4d:fb:a1:8a:49:a7:2a:06:19:27:9b:a5:
         75:4e:f9:9e:b6:8e:43:23:55:ff:d6:24:38:b4:08:e6:ca:5f:
         a9:f0:ef:97:21:e9:c9:a2:ed:7b:15:d9:55:b3:e7:9a:ca:70:
         e2:c1:77:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:19:36 2026 by rpki-client