Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b8b39658-559d-378b-9499-db63e1ddd490.roa
File:                     b8b39658-559d-378b-9499-db63e1ddd490.roa (raw, json)
Hash identifier:          PdDJzj607V7StzwE6P1wSyOuAN2XZhgM09aOA74B5kw=
Subject key identifier:   F5:74:9B:6B:1C:02:23:F2:2E:52:BB:9D:5D:AB:4E:04:AE:0D:6E:56
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584CEFF24AE6F33B41906DC4E0C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b8b39658-559d-378b-9499-db63e1ddd490.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     56971
IP address blocks:        45.38.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:4a:e6:f3:3b:41:90:6d:c4:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=b724b555-9ee1-4447-9f29-863f7316a480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e4:f5:b1:2e:d0:db:a7:72:99:7d:a6:1c:7a:
                    ce:31:10:f7:76:a2:80:c5:ed:87:70:7d:8a:2a:66:
                    72:47:6a:e6:33:22:5e:4e:e6:64:17:95:1c:a2:ca:
                    41:3f:36:0b:de:ee:c6:12:5f:ad:96:34:6f:20:0c:
                    c8:b3:9b:d6:ff:b1:98:de:ad:a3:dd:1d:22:10:5a:
                    c7:04:15:b0:3e:46:bb:e0:3a:00:ee:2d:62:22:b8:
                    f6:19:88:4d:cc:6f:05:91:cb:59:81:19:e9:5f:ce:
                    b3:fc:44:f4:e9:64:0f:6f:c6:40:2d:65:bd:92:3e:
                    09:09:8b:22:15:8b:7e:04:1e:5d:ad:11:04:e9:91:
                    83:a4:9f:57:54:43:2a:41:f6:a1:b1:11:ee:ae:dd:
                    61:3e:9d:df:25:8c:b8:56:cb:0b:d3:63:b8:f4:5e:
                    91:43:e1:fd:16:d2:e5:ea:f1:8f:1f:5f:88:4a:a6:
                    94:d1:1e:c3:e1:69:09:cd:38:d7:a0:5f:d7:4f:33:
                    ee:2e:49:80:12:64:87:a9:d0:d2:a1:48:26:47:63:
                    08:8a:a2:e7:dc:02:5d:8a:9b:73:b8:51:d1:12:e4:
                    81:52:dc:5e:ea:a3:65:4e:e9:99:01:b3:13:0f:e6:
                    e0:da:aa:c7:c9:6e:42:67:b3:32:fb:43:14:ad:df:
                    5e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:74:9B:6B:1C:02:23:F2:2E:52:BB:9D:5D:AB:4E:04:AE:0D:6E:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b8b39658-559d-378b-9499-db63e1ddd490.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:13:3c:70:b8:91:55:cc:cd:f6:b5:ee:54:4a:81:52:25:de:
         71:75:6e:4e:da:d2:15:2c:03:be:e2:a7:38:44:ec:f5:1d:01:
         16:64:f4:d4:16:9e:e0:32:49:16:ec:c9:32:42:cc:59:e1:2a:
         92:5e:91:b3:7c:c0:2d:ff:6a:1a:69:18:1a:78:7b:3c:24:8c:
         51:87:b8:57:39:ff:f8:2f:ee:72:32:ee:80:2a:52:d6:5b:e7:
         8f:72:86:d0:ec:bb:79:09:f1:6c:1a:9a:6d:ff:2b:8e:05:96:
         35:7e:60:27:6a:db:bd:4c:29:03:a1:7f:b8:40:08:19:68:46:
         93:b0:9d:77:2a:d4:92:6b:57:c0:08:88:5a:bf:4a:ab:52:a9:
         e2:57:f7:a8:18:e7:a1:66:ea:3e:6f:ca:60:12:63:f2:ad:15:
         15:5f:a3:e4:95:a5:a4:c5:6c:cd:12:dd:cf:de:34:b5:7a:8b:
         3e:b7:ac:65:9b:6b:e4:1a:40:ef:1b:ec:50:2d:83:d7:02:5a:
         00:60:d9:1c:a5:b6:e3:75:15:b2:42:ab:52:5f:a4:8d:14:d9:
         cb:5f:25:a5:4b:b9:2c:f9:92:6e:66:0d:51:05:6f:7b:f3:06:
         7d:3c:0e:79:a5:b8:c5:ee:63:41:95:e4:39:07:b2:ec:28:0a:
         4f:da:bb:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzv8krm8ztBkG3E4MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk
YjcyNGI1NTUtOWVlMS00NDQ3LTlmMjktODYzZjczMTZhNDgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOT1sS7Q26dymX2mHHrOMRD3dqKAxe2HcH2K
KmZyR2rmMyJeTuZkF5UcospBPzYL3u7GEl+tljRvIAzIs5vW/7GY3q2j3R0iEFrH
BBWwPka74DoA7i1iIrj2GYhNzG8FkctZgRnpX86z/ET06WQPb8ZALWW9kj4JCYsi
FYt+BB5drREE6ZGDpJ9XVEMqQfahsRHurt1hPp3fJYy4VssL02O49F6RQ+H9FtLl
6vGPH1+ISqaU0R7D4WkJzTjXoF/XTzPuLkmAEmSHqdDSoUgmR2MIiqLn3AJdiptz
uFHREuSBUtxe6qNlTumZAbMTD+bg2qrHyW5CZ7My+0MUrd9ezQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPV0m2scAiPyLlK7nV2rTgSuDW5WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYjhiMzk2NTgtNTU5ZC0z
NzhiLTk0OTktZGI2M2UxZGRkNDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSYqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAwTPHC4kVXMzfa17lRKgVIl3nF1bk7a0hUsA77ipzhE7PUdARZk9NQW
nuAySRbsyTJCzFnhKpJekbN8wC3/ahppGBp4ezwkjFGHuFc5//gv7nIy7oAqUtZb
549yhtDsu3kJ8Wwamm3/K44FljV+YCdq271MKQOhf7hACBloRpOwnXcq1JJrV8AI
iFq/SqtSqeJX96gY56Fm6j5vymASY/KtFRVfo+SVpaTFbM0S3c/eNLV6iz63rGWb
a+QaQO8b7FAtg9cCWgBg2RyltuN1FbJCq1JfpI0U2ctfJaVLuSz5km5mDVEFb3vz
Bn08DnmluMXuY0GV5DkHsuwoCk/au8A=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:53:02 2026 by rpki-client