Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/258242da-1c45-37be-b7c9-dc730628d6d5.roa
File:                     258242da-1c45-37be-b7c9-dc730628d6d5.roa (raw, json)
Hash identifier:          boGCgAjWMi2aWjtWXOgp7pIakSdAY9L9EyUmvmJqjEM=
Subject key identifier:   67:43:FA:B9:DE:DD:96:E9:E9:68:33:32:9D:2B:09:E9:92:F8:14:9B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D1F4A053861ECBF27906B9880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/258242da-1c45-37be-b7c9-dc730628d6d5.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     397630
IP address blocks:        172.121.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:05:38:61:ec:bf:27:90:6b:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=40d7c7bb-84b6-4504-bdf7-24cf2bbc7ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a3:a2:34:1a:5c:46:6b:bb:48:16:81:3b:90:
                    d2:7a:81:d4:ed:47:b4:b3:5d:8b:a8:8f:b0:1f:d4:
                    bd:8e:58:43:af:2a:69:73:c0:6a:cd:9b:56:b5:b8:
                    d1:9c:94:31:b2:72:3f:91:fc:d8:64:3e:25:c9:57:
                    d9:cf:05:de:9f:a2:eb:ae:46:09:78:21:e8:34:6d:
                    bf:b8:f7:17:e8:83:d5:ee:a8:a2:ff:6e:a2:64:73:
                    76:a8:f2:78:06:b8:e2:66:da:ab:44:d4:00:d3:f9:
                    7a:83:fc:37:ad:d7:f0:97:fe:bc:56:6a:47:54:08:
                    e9:5e:7d:75:18:80:fa:82:6f:a0:3d:e1:0e:f6:e6:
                    5f:9e:b7:b9:d5:c8:3f:fe:d7:7b:9e:22:c7:07:13:
                    ba:57:2f:1e:96:27:6a:7d:17:c3:0e:0a:44:43:41:
                    5b:b6:cb:3c:7f:cc:03:c2:8c:36:64:eb:0c:bc:c4:
                    10:9a:3c:0d:3b:7d:55:d4:2c:48:ec:81:dd:fa:f5:
                    9d:e4:d4:f9:18:1e:66:50:2f:6d:38:22:92:17:14:
                    a1:a6:10:c1:8f:47:91:a1:e2:cb:96:c6:df:b3:56:
                    95:f4:ac:3c:af:0f:30:fc:fc:74:4b:c3:4e:57:2a:
                    42:9f:22:2e:49:e3:15:19:7c:bd:85:33:6f:48:84:
                    a8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:43:FA:B9:DE:DD:96:E9:E9:68:33:32:9D:2B:09:E9:92:F8:14:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/258242da-1c45-37be-b7c9-dc730628d6d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:8f:59:4a:2c:47:2d:4c:98:d5:b1:8d:0e:80:cd:b9:d1:ad:
         d5:64:fe:91:1f:93:a9:33:1c:da:eb:e4:75:9e:71:13:57:91:
         38:c9:b7:97:e3:3c:6d:fe:e6:4c:ef:1b:a8:fe:2e:88:38:89:
         92:fd:f0:9f:8e:cc:03:39:0f:6f:fd:58:66:99:3a:9b:c2:34:
         22:83:2a:ca:b8:5f:2e:d2:5d:99:8a:27:72:06:a7:63:d1:65:
         30:f0:87:2c:c4:b6:e2:33:54:ee:ba:25:1a:a6:e9:c3:f6:23:
         9f:d7:4f:a2:8b:ce:c7:06:cf:29:df:55:79:67:70:aa:03:2b:
         4f:4e:9b:05:85:e6:83:26:f5:82:64:de:2c:09:5c:bb:2e:dd:
         d4:06:d5:76:82:29:6f:e5:8b:92:d1:73:7e:fd:be:f2:c3:c1:
         29:58:b0:28:44:7d:4b:7f:30:b1:cf:ae:2d:e1:72:cd:a2:46:
         1e:74:1b:c6:1e:1d:a1:de:c5:8f:58:4b:7a:a9:2b:dc:eb:9d:
         94:5e:ed:d3:ea:4d:bc:11:55:6f:bc:1f:95:03:c9:60:68:81:
         90:43:c1:fb:dd:77:58:4a:56:93:c2:c3:ef:93:aa:e3:1a:ce:
         da:10:fc:71:81:14:fc:af:52:84:df:dd:a0:7e:9f:bb:97:ce:
         37:20:2f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:53:32 2026 by rpki-client