Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0ff50641-a428-3497-956b-617924387661.roa
File:                     0ff50641-a428-3497-956b-617924387661.roa (raw, json)
Hash identifier:          wZtx4r7PlzPiI8DsCNMgFYzapf+Oy3cRL786WAK73To=
Subject key identifier:   AF:3C:B5:C9:40:64:FB:58:1C:14:E9:75:59:DF:42:41:47:D4:04:E5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F58CD5ECDF0115A9C4A225880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0ff50641-a428-3497-956b-617924387661.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     212238
IP address blocks:        172.121.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 17 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:5e:cd:f0:11:5a:9c:4a:22:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=c2a556ce-238e-4b54-b6a3-eee08b4d1ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ba:b5:f6:70:3e:e8:2c:3c:88:a2:04:19:95:
                    af:f2:fd:1c:58:bc:1e:f7:a8:de:72:c4:ae:0f:ee:
                    fb:66:9d:6b:a4:fb:e9:5e:9f:81:9a:f3:c7:17:25:
                    59:90:27:9a:65:02:c0:d7:ff:42:4c:ea:50:d2:54:
                    79:2e:fc:94:cc:06:71:f9:ec:38:6a:55:46:80:1a:
                    5e:55:41:6c:72:b6:d5:d7:ad:54:44:4c:84:ff:f6:
                    c6:e3:90:59:48:ca:8d:60:52:71:c4:ff:00:bd:cf:
                    d0:df:d9:08:bb:fd:74:d5:0a:fe:d0:bb:ef:76:29:
                    2f:8a:1d:6d:11:cf:28:b5:8a:81:be:28:c4:df:e2:
                    83:d9:08:db:c8:3c:83:a2:96:21:cc:cb:dd:fa:54:
                    37:d8:f6:f5:01:6b:02:0d:d9:f2:47:7b:21:ba:4e:
                    f5:c7:c5:83:7f:5d:c2:99:bf:38:a6:a9:7b:2f:23:
                    57:17:00:05:a3:72:db:82:f2:9e:26:3b:dc:00:4c:
                    90:a5:cc:3a:76:57:4c:28:22:af:3b:cd:c6:81:25:
                    f3:0b:d4:e3:15:2d:3d:de:be:7a:c5:56:01:4c:1d:
                    fd:4e:1c:b4:7b:d0:fc:a3:72:a3:7e:dd:40:19:a4:
                    cf:b6:78:02:9f:c4:0b:a4:3b:d6:00:b6:f4:0a:28:
                    74:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3C:B5:C9:40:64:FB:58:1C:14:E9:75:59:DF:42:41:47:D4:04:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0ff50641-a428-3497-956b-617924387661.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:54:ac:3f:ef:6b:6f:be:35:42:05:18:72:a0:d4:8c:dc:ec:
         27:d1:35:a7:7e:0d:82:32:68:65:0f:a2:ab:ad:e1:71:0f:0d:
         ec:ef:6a:ef:67:2c:fc:5c:90:ba:6c:c8:e3:0f:7e:71:c7:2a:
         cd:3c:c1:4e:ba:6d:2d:ec:70:1b:9c:35:87:b0:b9:13:81:3d:
         4e:eb:ee:db:69:54:3b:ec:fd:6c:24:14:5c:38:e6:75:90:6e:
         d7:17:71:94:6d:ea:40:18:f7:ea:d3:9b:37:18:c2:51:f5:9f:
         e4:16:c1:74:2e:bc:77:30:d1:c0:df:46:e2:6b:c8:8e:bb:0e:
         32:ce:3a:13:1a:2c:ed:88:0d:98:d7:dd:0a:1c:b6:64:8f:b7:
         c0:45:56:fc:f1:bb:9a:93:45:68:4f:a9:23:0e:65:8e:5c:fa:
         84:25:d7:82:9a:89:a5:e5:8b:05:87:37:c8:34:8d:26:fb:9a:
         19:0a:63:e1:5e:4a:52:fe:74:a3:98:45:a7:77:1a:b3:b1:1f:
         f0:bf:60:dd:84:4e:54:24:b9:55:ae:f2:a9:4e:98:1e:40:a6:
         1e:f1:90:d3:64:eb:bc:b6:e9:73:2b:68:ec:6c:48:75:f8:d2:
         29:82:33:60:a1:c5:6b:c9:51:b9:59:69:84:d9:22:5e:26:1c:
         f5:52:d5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 15:32:21 2026 by rpki-client