Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/85928d09-874e-3a3e-b360-657ecb991742.roa
File:                     85928d09-874e-3a3e-b360-657ecb991742.roa (raw, json)
Hash identifier:          5WKrC1cFB0CPkOGvv1mvK7/Zmbw6S/xZK/IrnScdkTk=
Subject key identifier:   9C:46:BE:3B:04:1E:18:24:E3:B1:43:79:BF:A3:AC:54:3B:EC:5B:95
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D04E23CB0C10896647B685E80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/85928d09-874e-3a3e-b360-657ecb991742.roa
Signing time:             Sun 01 Mar 2026 02:00:31 +0000
ROA not before:           Sun 01 Mar 2026 02:00:31 +0000
ROA not after:            Sat 30 May 2026 01:00:31 +0000
asID:                     3561
IP address blocks:        45.38.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:04:e2:3c:b0:c1:08:96:64:7b:68:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  1 02:00:31 2026 GMT
            Not After : May 30 01:00:31 2026 GMT
        Subject: CN=3b371dcc-81c9-4da5-9f7e-0b24615a2672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:47:40:18:3c:a7:b7:0a:44:cd:5f:0c:4c:43:
                    7f:3d:70:8c:b7:a2:b7:93:40:d4:3a:67:2a:34:e8:
                    c6:18:09:53:7e:70:14:8b:0c:38:2a:da:4f:c2:c1:
                    5e:f4:19:61:e9:d9:0f:41:ce:3d:79:f6:df:fa:bf:
                    23:61:57:8f:aa:e8:29:16:a3:1b:e5:7d:3f:07:04:
                    a9:82:3e:b0:11:05:74:68:22:43:c4:9e:e9:da:92:
                    c1:e3:97:ac:4b:66:02:64:48:74:f5:de:c2:ae:a5:
                    f8:4c:f2:17:f9:ad:87:36:a0:47:a8:4e:f8:c1:29:
                    b5:3f:17:e7:d4:b4:5f:02:b0:a2:23:2d:56:37:12:
                    7b:ee:c5:60:be:6c:1b:b5:ea:79:b8:f8:af:81:dc:
                    b1:02:2d:f4:c8:a1:50:43:11:e9:72:24:d9:0d:83:
                    78:55:80:11:84:7c:e0:f5:0c:34:d5:43:50:7a:80:
                    5e:8f:40:43:3c:af:f3:ec:17:62:60:77:e6:95:11:
                    bf:cc:d0:87:4f:3d:0e:b7:28:3a:14:f8:3a:3a:4c:
                    7b:91:00:4e:d0:65:a2:37:53:6b:17:65:76:4c:89:
                    bb:bd:48:55:00:bf:ae:15:33:4e:b7:e0:84:b4:45:
                    e1:dd:04:1a:56:dd:f0:7e:e5:9f:db:e5:39:a1:86:
                    32:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:46:BE:3B:04:1E:18:24:E3:B1:43:79:BF:A3:AC:54:3B:EC:5B:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/85928d09-874e-3a3e-b360-657ecb991742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:eb:30:5d:39:ff:ed:80:f2:3b:86:9c:9a:99:bd:c5:ee:d4:
         b8:d9:9d:ed:1f:4c:c4:70:d7:39:23:74:87:6c:0a:a8:5b:1d:
         4f:76:44:e0:e8:3b:8b:1b:b1:28:d1:22:62:89:9e:4c:b2:f9:
         ce:ba:49:4e:f8:11:1d:41:40:5a:ff:54:f3:78:c3:f7:3e:81:
         1d:3e:f9:fb:1f:a6:00:b0:2b:8d:47:43:4a:f9:56:2a:31:3a:
         7a:74:19:b4:f8:f0:20:82:a4:8f:43:67:e6:5d:0f:22:7c:15:
         ee:5b:0f:03:95:fa:27:8b:5d:62:f7:4e:82:57:bc:74:69:26:
         f4:8d:07:d1:8d:0e:7d:58:e2:d6:98:76:d1:46:cf:60:db:4c:
         75:21:32:b1:9a:70:c9:a8:58:01:4d:cd:be:4b:30:1f:7b:25:
         a8:b8:ff:25:30:2d:7e:dd:10:31:60:3a:cd:0d:32:05:01:fa:
         3a:12:d8:69:3a:4d:fd:76:79:9a:08:31:4a:37:76:b5:16:1a:
         82:fb:34:5b:f4:e3:c1:fc:71:c3:a8:96:14:d9:98:14:ea:20:
         0d:64:c3:ff:86:30:1a:97:41:c2:aa:43:be:8e:21:0a:1d:7a:
         b9:00:9e:c7:7b:3c:55:cb:c8:1c:e2:a0:4d:48:84:62:a1:4b:
         97:3c:46:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:11:00 2026 by rpki-client