Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0388b98f-e554-326f-a1b5-08592c3b7669.roa
File:                     0388b98f-e554-326f-a1b5-08592c3b7669.roa (raw, json)
Hash identifier:          x4p+/JNJqTv6tXvzkBCOPpHfmXwmhH/wWF0KkzJIQ2k=
Subject key identifier:   2F:24:05:2A:51:E5:15:CE:7F:B0:94:8C:B7:FC:FE:B6:63:BF:DE:28
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F497F7B0124F9E9CA2BCCE780
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0388b98f-e554-326f-a1b5-08592c3b7669.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     3257
IP address blocks:        172.121.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:7b:01:24:f9:e9:ca:2b:cc:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f65853b0-7227-448b-af5b-aef9b83f8fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fa:22:65:4c:b8:e1:24:f6:69:39:62:8e:60:
                    6b:36:9a:4d:70:af:81:ad:fd:0c:06:08:07:09:1a:
                    ec:50:a4:a3:a3:eb:d4:7b:43:09:00:a8:bf:56:65:
                    c4:b5:e5:d7:7f:f1:5b:f8:ee:42:42:f5:09:34:dd:
                    b4:97:bc:e4:9c:0f:26:e2:02:e6:1c:6a:55:11:58:
                    d7:16:66:bc:15:f4:e1:30:40:f8:7e:b3:89:f3:0a:
                    94:7d:ff:bd:ce:23:78:b0:6c:fd:6d:10:94:91:6c:
                    38:23:9e:9d:98:53:75:a3:e0:96:99:ce:59:d8:f5:
                    77:22:0a:3a:ba:9a:6d:87:4f:ea:3b:0b:97:58:cd:
                    62:a8:65:5c:7d:6b:92:ec:e5:51:bc:46:10:43:1f:
                    8b:25:a8:d7:b9:8d:4f:c2:48:cd:6e:26:79:20:4e:
                    00:96:1d:0e:63:79:a1:30:2c:f4:65:e5:f7:eb:fa:
                    c1:24:47:05:8d:12:e8:c3:c2:b0:9d:1d:57:22:5c:
                    f3:f6:7a:05:2c:54:15:3b:fd:e6:a5:ee:46:0b:6d:
                    16:c6:d7:3e:d8:ab:5e:3d:db:f8:93:31:bc:55:3e:
                    53:bb:4d:ff:2f:7a:17:6d:fe:f1:ea:33:f7:d2:94:
                    80:49:2b:a3:65:37:46:2a:a2:2a:4d:72:3f:ff:f7:
                    35:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:24:05:2A:51:E5:15:CE:7F:B0:94:8C:B7:FC:FE:B6:63:BF:DE:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0388b98f-e554-326f-a1b5-08592c3b7669.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:84:5d:c0:a4:7a:c3:77:5f:4a:08:47:56:33:57:fd:b0:c6:
         1c:d3:0e:ed:88:45:0a:4c:7e:28:b7:76:4c:99:3d:b9:e1:d9:
         ff:56:e4:2f:2d:b5:59:be:b7:aa:4b:7f:0d:0c:43:a1:01:68:
         8d:93:d4:5a:d8:24:8f:02:42:ce:ff:01:6e:74:87:b9:fd:d1:
         2e:f5:24:0f:5d:3d:4b:2b:fd:79:7c:6e:95:93:66:e2:aa:d9:
         2b:e1:c0:75:99:31:bf:48:27:bb:ac:47:e0:26:ad:cc:7c:c4:
         02:bf:13:6e:8d:5d:df:1b:87:69:5a:da:a6:65:36:88:96:4f:
         6c:6d:36:89:0b:54:b4:48:8c:97:67:14:31:3c:ea:57:9d:bb:
         08:36:33:4e:56:1f:4a:a3:e9:2c:3b:fd:22:1b:19:6e:6b:a3:
         9c:50:e7:f4:e1:d0:ff:e5:6c:f5:0c:5b:75:46:d1:f3:0a:29:
         33:e6:07:bf:9d:e5:18:ea:a6:4a:00:2a:5c:4b:da:c9:6c:95:
         48:0a:3d:77:a3:16:a5:c4:db:64:f5:80:fb:50:82:b9:fa:38:
         e0:e0:98:a1:c1:de:68:fa:bc:da:62:0f:c8:29:a4:03:a6:57:
         2b:6b:43:b1:5c:be:c5:fa:2b:91:86:f4:63:aa:07:4f:82:4d:
         9f:9a:62:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:14:08 2026 by rpki-client