Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/85b2f6ec-becb-3c7b-851e-885075afb359.roa
File:                     85b2f6ec-becb-3c7b-851e-885075afb359.roa (raw, json)
Hash identifier:          4WZ+nyTElGnuODexQW3vGSmDrmNvcHrGl2k9mKLuttg=
Subject key identifier:   2E:05:12:15:08:7F:61:1A:80:E2:34:35:B3:06:8F:E9:51:39:33:C8
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584CC1E1CEEDE4138B0951103C40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/85b2f6ec-becb-3c7b-851e-885075afb359.roa
Signing time:             Thu 05 Feb 2026 02:00:31 +0000
ROA not before:           Thu 05 Feb 2026 02:00:31 +0000
ROA not after:            Wed 06 May 2026 01:00:31 +0000
asID:                     212238
IP address blocks:        45.38.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c1:e1:ce:ed:e4:13:8b:09:51:10:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  5 02:00:31 2026 GMT
            Not After : May  6 01:00:31 2026 GMT
        Subject: CN=11f97c24-80d2-4552-a3cf-c07b43300bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:eb:99:85:44:dd:a5:bc:b6:b5:5d:bf:97:a6:
                    4b:0a:a5:c0:d8:a0:65:ea:03:4d:8c:fe:7f:28:3c:
                    d7:09:42:5b:04:47:48:90:33:8c:b9:64:79:b6:58:
                    2e:cd:57:ae:a7:a7:9e:5d:c9:af:24:8c:6d:77:77:
                    78:ff:07:cd:ec:86:63:0a:f4:55:27:97:d2:0f:9a:
                    2c:6f:3d:c9:f5:8a:5d:98:b8:cc:99:5f:ef:93:d3:
                    db:52:94:fa:f6:a2:e2:d0:f9:c2:15:31:d9:b8:7e:
                    13:9d:61:b4:58:24:ea:bb:69:05:b1:3a:bb:36:20:
                    71:e3:a6:28:c6:2a:6e:ea:25:d3:fb:dd:52:b8:e1:
                    07:46:ff:d0:2c:df:2e:bb:5b:85:5d:52:72:b0:ac:
                    58:22:d3:0c:63:5d:26:2c:47:d4:63:ca:fc:3d:b5:
                    46:94:e2:86:18:dd:74:9c:3b:fe:34:e5:e4:2e:61:
                    c9:72:87:2d:04:89:b5:4b:60:13:1a:8a:16:10:a9:
                    90:4a:5e:0a:f3:b7:60:82:89:2f:3d:41:aa:80:6f:
                    af:66:0e:97:c1:99:37:90:3e:71:90:8a:84:fd:8b:
                    18:c3:d1:1f:9c:34:b6:97:7f:64:c5:8c:72:17:4e:
                    14:78:6e:53:99:4d:c8:fb:d5:79:66:76:cf:99:71:
                    37:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:05:12:15:08:7F:61:1A:80:E2:34:35:B3:06:8F:E9:51:39:33:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/85b2f6ec-becb-3c7b-851e-885075afb359.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:19:d6:2e:80:04:69:3d:0b:38:8f:a1:83:32:d3:5f:fe:57:
         a9:d5:95:1f:bc:97:25:d1:98:c9:30:08:67:86:65:0c:5e:f8:
         89:1b:59:d4:9a:03:e0:50:ce:56:27:c3:c6:2a:9a:e8:ef:00:
         5f:7c:bf:c8:33:16:b1:9c:83:d6:bd:a8:01:0e:c7:ee:eb:62:
         60:a6:a2:8c:38:6d:a6:60:7a:61:b8:15:65:88:aa:46:16:c7:
         e1:66:b9:cf:3d:74:8d:6e:7f:c5:9c:21:50:71:2b:da:e0:03:
         d1:5a:ad:88:a6:44:70:53:20:ed:53:98:3d:50:b8:a5:ad:44:
         65:c0:08:6c:96:fb:f6:ca:c4:9f:39:c3:67:82:6a:db:b1:23:
         b5:04:7b:8f:3d:f0:66:f2:69:79:bd:ee:3e:70:92:f2:b1:80:
         05:13:7d:cb:0c:b0:64:a9:c8:b4:ab:cb:62:4a:61:62:bb:ee:
         cc:25:75:8c:93:10:69:25:4a:92:46:15:7f:3a:e2:89:2f:1c:
         31:b3:59:91:6a:a6:71:ab:83:de:45:b0:b0:68:13:36:00:28:
         1d:cd:00:8c:ba:a1:6f:2b:36:8e:92:79:ff:ee:5f:dc:1a:3b:
         ee:25:f7:3e:68:8e:f5:c4:ab:65:53:d8:f6:26:bb:a5:bc:f8:
         99:74:53:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzB4c7t5BOLCVEQPEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDIwNTAyMDAzMVoXDTI2MDUwNjAxMDAzMVowLzEtMCsGA1UEAxMk
MTFmOTdjMjQtODBkMi00NTUyLWEzY2YtYzA3YjQzMzAwYmQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOuZhUTdpby2tV2/l6ZLCqXA2KBl6gNNjP5/
KDzXCUJbBEdIkDOMuWR5tlguzVeup6eeXcmvJIxtd3d4/wfN7IZjCvRVJ5fSD5os
bz3J9YpdmLjMmV/vk9PbUpT69qLi0PnCFTHZuH4TnWG0WCTqu2kFsTq7NiBx46Yo
xipu6iXT+91SuOEHRv/QLN8uu1uFXVJysKxYItMMY10mLEfUY8r8PbVGlOKGGN10
nDv+NOXkLmHJcoctBIm1S2ATGooWEKmQSl4K87dggokvPUGqgG+vZg6XwZk3kD5x
kIqE/YsYw9EfnDS2l39kxYxyF04UeG5TmU3I+9V5ZnbPmXE3gwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC4FEhUIf2EagOI0NbMGj+lROTPIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvODViMmY2ZWMtYmVjYi0z
YzdiLTg1MWUtODg1MDc1YWZiMzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSYjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHAZ1i6ABGk9CziPoYMy01/+V6nVlR+8lyXRmMkwCGeGZQxe+IkbWdSa
A+BQzlYnw8YqmujvAF98v8gzFrGcg9a9qAEOx+7rYmCmoow4baZgemG4FWWIqkYW
x+Fmuc89dI1uf8WcIVBxK9rgA9FarYimRHBTIO1TmD1QuKWtRGXACGyW+/bKxJ85
w2eCatuxI7UEe4898GbyaXm97j5wkvKxgAUTfcsMsGSpyLSry2JKYWK77swldYyT
EGklSpJGFX864okvHDGzWZFqpnGrg95FsLBoEzYAKB3NAIy6oW8rNo6Sef/uX9wa
O+4l9z5ojvXEq2VT2PYmu6W8+Jl0UzY=
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:11:11 2026 by rpki-client