Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9d391d26-70a8-3e1e-9a4f-a098ac5ebee0.roa
File:                     9d391d26-70a8-3e1e-9a4f-a098ac5ebee0.roa (raw, json)
Hash identifier:          TBEfZFtp6BG0zrLdxWCZZjnvtcQV76u6p/HCXNfSEzg=
Subject key identifier:   A3:98:30:6B:62:45:CE:15:C4:FE:38:96:47:28:B7:71:FC:BB:A4:88
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584CFB1CFDE8C79B33BC78B54E00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9d391d26-70a8-3e1e-9a4f-a098ac5ebee0.roa
Signing time:             Wed 25 Feb 2026 14:00:39 +0000
ROA not before:           Wed 25 Feb 2026 14:00:39 +0000
ROA not after:            Tue 26 May 2026 13:00:39 +0000
asID:                     64445
IP address blocks:        45.39.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fb:1c:fd:e8:c7:9b:33:bc:78:b5:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 25 14:00:39 2026 GMT
            Not After : May 26 13:00:39 2026 GMT
        Subject: CN=32281fb4-4b72-4423-936a-428474e2821d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c5:91:59:39:68:2d:33:b5:29:c2:67:71:3b:
                    ad:6e:18:46:ff:cd:a7:b1:f1:53:07:01:24:48:81:
                    d1:ec:d7:fd:28:e0:bf:36:e5:12:58:f2:dd:0a:b0:
                    97:fc:a9:f1:88:f5:2c:64:80:d6:4d:b7:a6:7a:87:
                    a0:8c:a5:33:f7:ea:9a:1a:14:32:a6:81:58:21:41:
                    d1:9f:69:2d:b9:47:70:e5:59:62:48:00:20:aa:67:
                    5c:1b:b3:36:f4:fd:da:88:ac:76:8a:e2:fe:c2:32:
                    39:78:b3:a9:19:aa:dd:08:e2:a8:f9:13:d9:e7:a4:
                    e1:a6:19:87:90:eb:21:4e:bb:c8:34:49:04:12:69:
                    f8:d8:19:5d:96:02:7d:a3:6c:7b:0e:7b:e2:46:49:
                    bd:72:fb:e4:57:12:78:b3:32:2f:78:f6:37:7e:e1:
                    be:15:b1:95:51:c0:fe:c8:87:a6:fb:f1:e3:0b:41:
                    94:88:1e:78:75:d2:96:30:6a:b4:0c:f5:08:61:05:
                    c1:47:25:07:5d:f4:a5:53:56:e3:86:c0:3e:7a:69:
                    f7:7a:dc:55:40:c8:6e:80:c5:03:70:76:6c:32:eb:
                    24:c2:c6:d3:dc:36:ca:11:40:fc:35:b3:cf:cc:66:
                    d1:be:b5:2f:d2:52:83:f2:2d:1e:b5:54:2d:ef:6b:
                    d1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:98:30:6B:62:45:CE:15:C4:FE:38:96:47:28:B7:71:FC:BB:A4:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9d391d26-70a8-3e1e-9a4f-a098ac5ebee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:bd:57:ce:37:ce:28:23:b1:2b:e6:fd:58:3f:45:1e:60:f0:
         48:23:57:f7:4e:22:0c:d3:fb:f3:58:9c:a0:49:4e:ba:b8:af:
         6a:0c:a8:b2:ac:3e:4a:77:0a:80:15:e4:23:66:bf:d9:d0:92:
         66:fa:5c:44:52:74:dc:bc:00:44:ed:4b:3b:cd:b7:fb:d0:7b:
         bc:2f:a3:b7:cc:44:0c:53:3c:1f:fe:23:24:61:00:f8:53:f4:
         3e:4e:c2:e4:aa:7e:ad:d3:ea:24:47:29:e1:76:54:f1:2b:f8:
         29:85:7c:2b:db:50:c6:2a:b4:38:97:ae:5e:87:95:0b:a8:eb:
         e1:a5:e4:3a:a0:d0:1a:1c:76:2d:96:39:36:46:15:74:8f:31:
         03:56:77:0d:3e:57:68:de:5c:e7:04:93:7d:6c:99:66:37:b0:
         c8:fd:e3:bd:11:e9:62:d7:c4:5f:43:33:a9:77:f1:fd:9c:ef:
         14:d4:8e:2f:be:94:87:5e:bb:03:62:b7:a0:30:a8:db:88:30:
         91:a3:00:63:46:c4:b9:b2:ea:de:89:29:f2:64:98:04:93:9e:
         f4:32:c5:1a:47:f6:de:75:b0:a6:cb:31:df:2c:32:0b:7d:20:
         46:6c:b7:fb:ae:38:3e:ed:df:a5:52:95:92:b8:11:d9:0a:be:
         c2:f9:ce:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:17:47 2026 by rpki-client