Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af6a6156-753a-38af-bc91-c504330afdc8.roa
File:                     af6a6156-753a-38af-bc91-c504330afdc8.roa (raw, json)
Hash identifier:          zboGKswEIUISn87n4xh0AUlJyMy9oTRLZQdbD79J/Qs=
Subject key identifier:   41:16:66:16:5C:AF:E2:B1:16:1A:A6:CD:E7:90:68:97:4C:8F:51:35
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584CF6ECE4E794435A3996F27440
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af6a6156-753a-38af-bc91-c504330afdc8.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     59711
IP address blocks:        45.39.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:e4:e7:94:43:5a:39:96:f2:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=b04b86b5-e2e7-46c5-847e-77a8c9042cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c2:bc:66:34:ae:4f:a5:16:af:37:fb:7c:e1:
                    e4:52:bc:c2:e5:db:6f:fd:9e:c2:4b:81:90:bf:e6:
                    1a:54:10:1e:b0:89:c0:b6:73:21:90:18:b3:a5:36:
                    51:37:6c:b9:2c:bb:56:53:62:88:9b:d8:6f:48:9c:
                    06:96:a9:aa:58:74:11:ef:1b:b8:0e:15:30:c8:1b:
                    1f:04:6f:93:f6:72:0e:d1:28:c3:49:3f:09:d9:e0:
                    a4:0d:00:8a:03:5e:a8:07:d9:5c:34:05:b1:48:9f:
                    16:a8:72:aa:d1:55:55:7b:64:15:78:70:a1:88:0b:
                    20:fa:5d:5e:97:cc:fc:57:f0:1e:b7:ec:03:2b:fb:
                    25:c4:0f:d3:e7:45:76:55:55:d1:6e:36:8b:2e:17:
                    0a:23:b2:be:13:b5:41:d1:6a:83:a9:4c:d5:bd:33:
                    7d:1c:59:f7:09:41:75:70:42:26:0f:57:09:35:1e:
                    67:7f:b3:1b:2c:ee:75:46:18:75:fd:ed:e5:ab:6e:
                    18:cb:81:c8:a8:b0:fd:a3:c6:14:1a:82:ee:f3:20:
                    6a:e4:c1:b3:9d:64:09:4d:e8:a7:7f:bd:d4:8b:2a:
                    08:de:f6:ce:e0:29:c8:8e:c8:68:bd:9f:d8:3b:4c:
                    70:66:54:ae:00:a8:78:c1:80:68:da:3d:34:7f:fb:
                    7d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:16:66:16:5C:AF:E2:B1:16:1A:A6:CD:E7:90:68:97:4C:8F:51:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af6a6156-753a-38af-bc91-c504330afdc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:c0:c2:71:7b:ed:4a:80:38:2a:9c:47:dc:af:8d:c4:6a:ae:
         5f:6a:da:40:cf:45:7f:4b:73:f9:c1:24:84:10:fe:f4:0c:ed:
         6f:50:f0:0a:4c:19:57:5b:c4:ca:7d:ae:a1:b6:6a:b3:fa:30:
         d8:8b:c0:2c:77:45:78:63:4f:f3:51:c4:fd:d2:75:cf:be:0e:
         08:6b:a3:7e:e2:53:cc:9a:dc:57:4c:e3:5c:67:20:08:f2:bf:
         6c:db:12:61:56:52:a4:5e:80:66:89:14:5c:78:9f:a9:63:a6:
         c7:e7:f8:85:15:14:33:16:24:1a:73:98:5c:a7:96:a0:f6:8f:
         4c:48:b0:73:67:b8:bc:79:78:54:eb:89:79:bb:50:88:26:34:
         aa:3e:c8:c4:7e:36:a2:04:ad:a8:51:93:a1:0a:8f:13:06:df:
         99:ef:24:eb:50:ad:f9:72:75:04:c5:63:8b:32:31:26:09:b1:
         4c:f1:44:f5:77:a5:5c:1f:bc:14:70:68:23:62:65:51:22:c3:
         03:77:c3:c2:41:fd:29:19:c6:b0:e1:2d:07:1d:3b:d4:bc:c5:
         d5:41:99:83:65:3f:36:22:2b:e3:ea:c1:2e:c1:af:55:88:59:
         80:f6:5e:37:eb:f5:ad:69:24:ca:9a:15:b1:2f:21:85:8b:35:
         b3:2e:7f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:38:47 2026 by rpki-client