Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c069e446-13eb-37ef-9027-e887bb972fe7.roa
File:                     c069e446-13eb-37ef-9027-e887bb972fe7.roa (raw, json)
Hash identifier:          ScNezRAONusYf9kW63YD+vwaRvYvPkFSp01+WARyZyk=
Subject key identifier:   BA:28:98:A7:33:B7:09:40:B2:DD:D4:9D:55:DF:22:31:8A:7E:E2:3A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584CA5F73F08E3002958F3C80B00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c069e446-13eb-37ef-9027-e887bb972fe7.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     205467
IP address blocks:        45.38.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:3f:08:e3:00:29:58:f3:c8:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=29bd8628-a08a-416b-addb-3a8bf992d271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:19:a6:24:57:48:6b:97:7a:75:eb:48:88:2f:
                    56:c1:6d:f0:0b:4a:2c:b0:24:48:a6:29:fc:89:ec:
                    4f:5e:64:19:16:57:82:e3:0f:7f:5a:d4:1a:4c:ed:
                    29:36:22:34:b6:60:18:bb:eb:a2:90:c8:0e:1b:fb:
                    c4:87:dc:6c:54:36:76:68:52:94:06:76:f6:f8:ed:
                    0a:21:47:ec:e3:b8:7e:d5:28:d1:f4:1a:ae:96:65:
                    9c:a5:e6:6d:11:d4:7f:3d:e1:75:9b:ef:25:89:f1:
                    1b:68:1c:88:54:ea:6f:75:4d:35:9b:d6:4e:cd:c3:
                    53:3c:d0:48:82:3b:81:79:79:b4:53:54:9d:59:8c:
                    59:8d:2b:7e:b5:cd:96:5f:2f:65:9c:40:7d:b1:1d:
                    64:7c:d0:ee:1f:5e:0d:7e:aa:08:20:14:58:6c:3f:
                    9c:fe:8a:6c:67:fc:8a:b0:a4:fd:8d:c1:fb:dd:6e:
                    bf:b7:f5:4b:a7:1b:a4:6d:68:6b:eb:9e:32:07:94:
                    40:f7:64:46:19:aa:f3:e7:22:38:1f:ed:f6:0a:61:
                    e1:13:19:7d:d2:8a:9d:54:53:c1:f6:f9:1b:41:b4:
                    ce:53:74:fa:fd:b8:f1:85:bc:87:20:7b:bb:3b:e5:
                    af:b9:ca:3c:99:46:d0:a3:22:37:a1:9d:a3:35:80:
                    d5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:28:98:A7:33:B7:09:40:B2:DD:D4:9D:55:DF:22:31:8A:7E:E2:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c069e446-13eb-37ef-9027-e887bb972fe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:32:27:27:1b:ae:ee:a2:24:e1:e0:d4:d7:03:41:e4:fd:4d:
         79:51:86:83:d0:c1:d9:f1:51:73:71:68:92:2b:b7:9d:06:f2:
         d4:73:18:89:53:bc:a0:23:57:0d:c5:7c:2f:67:36:77:4d:9d:
         47:61:81:04:f5:e7:a9:c5:3b:ef:ba:d6:8f:c7:f1:c9:6b:48:
         78:01:dc:a5:e5:9a:fd:e8:fd:ea:7c:c1:87:bd:84:f9:9c:82:
         60:d1:aa:0f:91:6f:a4:2f:a3:93:90:e3:08:95:e7:ea:a6:8f:
         f5:0e:a2:e4:bf:dd:9e:c5:6f:49:62:42:16:66:47:e4:c3:40:
         1a:37:cc:71:e4:77:1d:5a:ec:1f:bb:49:ed:64:47:d2:2c:79:
         45:fd:fb:90:43:fe:26:c1:74:dc:ea:be:c8:c4:06:98:dd:f2:
         c8:78:35:4a:58:8e:e4:bd:34:92:67:ce:7d:ac:c0:db:23:18:
         4e:51:25:71:0f:44:5a:33:bd:ee:70:6d:b6:69:09:b2:a6:92:
         b6:a7:86:5d:19:a9:4b:26:c8:6d:8e:df:55:5f:da:f9:99:ac:
         ab:20:e8:9a:77:3d:84:90:db:f6:c2:49:67:78:26:31:a6:32:
         e1:82:32:42:71:89:76:af:2b:a5:be:2a:4b:0f:a3:d0:08:5b:
         08:71:a2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:28:24 2026 by rpki-client