Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8eb166e4-2607-3c24-9b69-b0cc86125eb6.roa
File:                     8eb166e4-2607-3c24-9b69-b0cc86125eb6.roa (raw, json)
Hash identifier:          AP3ipcGyujY/DjEK7/Xjt3EGttvjaRwqZf4WddQe95c=
Subject key identifier:   1D:D2:25:F9:F6:B9:73:5A:DB:BE:67:85:12:C1:6E:69:E0:D4:76:B7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584CB121CABA1596B0B7487F2580
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8eb166e4-2607-3c24-9b69-b0cc86125eb6.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     149440
IP address blocks:        172.252.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:ca:ba:15:96:b0:b7:48:7f:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=b3d914d1-66ae-41d9-bf6e-01e1dbf62290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:64:e6:d7:58:be:92:92:2c:50:b2:e8:ed:a1:
                    02:41:dd:72:c0:41:6e:ca:ad:4f:e6:30:d3:9c:6e:
                    b5:a2:28:31:c7:36:20:3e:3c:bd:e2:2f:fe:19:ad:
                    60:31:40:10:06:04:ae:b4:f2:df:35:10:96:48:9f:
                    fb:a3:e1:ee:ad:93:16:2a:74:56:6d:0a:b2:80:9a:
                    4f:e7:a4:5b:42:00:ed:db:dc:29:c1:f6:22:db:e5:
                    04:c6:42:b5:e7:3f:3a:18:cd:d7:73:c7:2c:d6:c6:
                    7c:bb:1a:3e:a4:46:0e:88:c8:e9:80:0b:bf:ac:0c:
                    6e:0b:5d:ad:03:73:4c:0c:8f:fc:17:8d:4a:81:1b:
                    e0:10:66:5f:25:70:3f:75:0b:a7:dd:dd:43:70:4b:
                    c6:c0:71:8a:c3:fa:0f:6a:cf:00:f1:78:46:2d:6f:
                    cd:f8:32:e7:ad:96:5f:49:57:c0:54:fa:68:8b:79:
                    95:76:b8:18:af:b6:a2:b8:34:a2:91:e5:07:f3:c3:
                    13:ef:09:ef:40:c4:d9:36:60:45:f0:36:13:78:1d:
                    60:0a:5c:fe:9e:f9:b6:9b:be:43:0c:77:aa:db:0c:
                    b4:0d:c5:bd:b2:b4:ec:d3:41:c7:8b:ff:a8:62:c1:
                    1a:3c:07:ab:55:bd:3c:81:bd:73:da:4c:e4:6d:0d:
                    2d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D2:25:F9:F6:B9:73:5A:DB:BE:67:85:12:C1:6E:69:E0:D4:76:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8eb166e4-2607-3c24-9b69-b0cc86125eb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:34:6a:6e:40:6a:c2:4e:2b:81:a7:bd:11:5b:79:e6:de:3e:
         2c:33:77:1b:0b:27:a3:8e:22:82:50:17:bc:a1:a4:8f:4d:fa:
         9f:1d:e8:9c:8d:31:66:ca:2d:6c:04:71:b0:58:c6:29:a6:f2:
         ff:57:1b:a2:db:d2:fe:e9:ef:51:69:3a:13:ac:06:65:00:14:
         ba:a8:6d:b5:6f:e5:5b:c8:25:c5:32:02:f1:af:93:25:cd:8e:
         05:63:3e:44:3d:ff:b3:97:e0:fe:58:5a:49:40:29:9b:b1:1d:
         f4:2f:3f:e4:26:3d:e2:58:f7:f6:48:4e:f9:6f:bb:30:09:32:
         f8:d4:ce:64:27:d2:c8:dc:88:ac:66:69:c6:42:65:e1:d4:7a:
         ec:44:20:6c:40:1c:fe:ae:b4:4c:c3:63:09:78:d3:77:02:0e:
         5a:cb:ca:70:77:c7:a0:55:e0:56:24:33:5a:29:5b:3c:55:37:
         26:05:69:c4:d0:08:50:64:1b:cd:4f:3e:87:01:0c:1b:5c:fd:
         a1:c0:73:7f:0b:b0:f8:8f:90:3c:40:97:08:5a:97:f8:da:7b:
         1c:b1:89:53:7e:e5:47:68:84:6c:6b:59:ac:5f:98:8d:7e:2c:
         08:d1:1e:49:ad:fa:9b:bc:b9:fb:e7:19:f7:87:ae:05:cc:d6:
         7e:c3:6f:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIcq6FZawt0h/JYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk
YjNkOTE0ZDEtNjZhZS00MWQ5LWJmNmUtMDFlMWRiZjYyMjkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmTm11i+kpIsULLo7aECQd1ywEFuyq1P5jDT
nG61oigxxzYgPjy94i/+Ga1gMUAQBgSutPLfNRCWSJ/7o+HurZMWKnRWbQqygJpP
56RbQgDt29wpwfYi2+UExkK15z86GM3Xc8cs1sZ8uxo+pEYOiMjpgAu/rAxuC12t
A3NMDI/8F41KgRvgEGZfJXA/dQun3d1DcEvGwHGKw/oPas8A8XhGLW/N+DLnrZZf
SVfAVPpoi3mVdrgYr7aiuDSikeUH88MT7wnvQMTZNmBF8DYTeB1gClz+nvm2m75D
DHeq2wy0DcW9srTs00HHi/+oYsEaPAerVb08gb1z2kzkbQ0tywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB3SJfn2uXNa275nhRLBbmng1Ha3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOGViMTY2ZTQtMjYwNy0z
YzI0LTliNjktYjBjYzg2MTI1ZWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPzZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAc0am5AasJOK4GnvRFbeebePiwzdxsLJ6OOIoJQF7yhpI9N+p8d6JyN
MWbKLWwEcbBYximm8v9XG6Lb0v7p71FpOhOsBmUAFLqobbVv5VvIJcUyAvGvkyXN
jgVjPkQ9/7OX4P5YWklAKZuxHfQvP+QmPeJY9/ZITvlvuzAJMvjUzmQn0sjciKxm
acZCZeHUeuxEIGxAHP6utEzDYwl403cCDlrLynB3x6BV4FYkM1opWzxVNyYFacTQ
CFBkG81PPocBDBtc/aHAc38LsPiPkDxAlwhal/jaexyxiVN+5UdohGxrWaxfmI1+
LAjRHkmt+pu8ufvnGfeHrgXM1n7DbwI=
-----END CERTIFICATE-----
Generated at Sun Mar 1 19:23:26 2026 by rpki-client