Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/143028d3-04ac-3a49-83ec-7c57c43ceb09.roa
File:                     143028d3-04ac-3a49-83ec-7c57c43ceb09.roa (raw, json)
Hash identifier:          MJLC221H7j+XzIURu6pPCxmyeUGtQn0JPcEFQfKLf5A=
Subject key identifier:   C5:29:2A:26:00:18:65:26:4D:E2:3F:75:86:4E:59:AE:05:82:01:C3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584DCF2B1D8B04ECBD42E5F19F20
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/143028d3-04ac-3a49-83ec-7c57c43ceb09.roa
Signing time:             Tue 12 May 2026 13:00:30 +0000
ROA not before:           Tue 12 May 2026 13:00:30 +0000
ROA not after:            Mon 10 Aug 2026 13:00:30 +0000
asID:                     18779
IP address blocks:        172.121.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2b:1d:8b:04:ec:bd:42:e5:f1:9f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 12 13:00:30 2026 GMT
            Not After : Aug 10 13:00:30 2026 GMT
        Subject: CN=e9e071e2-8bfc-4217-9ecb-6c5b1d082f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:34:ca:4c:f8:3c:c5:54:55:61:8a:83:d3:50:
                    e7:e7:fb:65:50:d1:e1:10:85:3b:88:1d:2e:0d:8b:
                    1f:36:be:20:0d:cd:6f:e2:fa:c0:68:6f:a4:f3:1d:
                    b7:93:64:d7:f7:85:92:69:69:98:ce:3b:ef:ac:96:
                    9d:07:63:2c:6d:98:c9:a9:cd:fc:0c:2c:67:99:c3:
                    18:66:ea:ee:4d:90:29:c6:1b:a6:a7:77:05:dc:88:
                    29:45:5c:d7:b7:77:01:26:65:3d:dd:10:bb:6b:e5:
                    05:3f:15:c1:16:f4:e4:64:a6:39:07:69:92:ad:bd:
                    d4:d7:91:63:9e:11:fd:a0:cb:3a:40:1d:79:d9:54:
                    c0:e8:52:1a:e9:41:c3:ff:96:f0:3f:c5:b1:bd:be:
                    7d:88:e9:be:54:92:06:cf:00:f7:33:73:2d:b3:b2:
                    27:29:40:57:70:fc:08:ea:77:1f:2a:82:11:41:6f:
                    d9:19:93:47:9a:3e:b3:3b:bb:4c:08:a7:da:3b:cb:
                    04:34:20:84:e4:21:98:2a:af:ec:ab:c2:84:07:c1:
                    e8:40:a7:61:c5:31:25:7d:71:84:24:f7:ad:a3:17:
                    aa:e1:8d:29:98:90:92:dc:1e:80:2e:17:6f:37:5b:
                    47:42:e1:57:89:0d:90:97:81:a9:1c:94:35:c5:1e:
                    55:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:29:2A:26:00:18:65:26:4D:E2:3F:75:86:4E:59:AE:05:82:01:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/143028d3-04ac-3a49-83ec-7c57c43ceb09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:a4:f4:87:f9:2b:76:e8:fc:8b:ec:12:b4:83:53:71:bb:e2:
         69:96:4f:12:4d:b0:44:da:69:9b:92:67:89:ae:58:ba:1a:1f:
         e8:08:67:c8:ff:c5:fd:77:b8:a2:46:8d:1c:e1:8b:f7:ef:c1:
         24:17:fe:fa:83:a3:bf:67:c3:5d:19:be:aa:92:2a:bb:f7:af:
         16:41:d6:3b:da:26:14:4f:a6:af:63:67:5e:79:96:53:9e:d6:
         3c:d9:76:79:e6:da:1f:6f:e8:8f:f6:1a:6f:bc:29:ba:ee:e7:
         6c:dd:f6:e8:61:e0:26:0d:e1:53:67:44:ab:b1:a1:e7:de:d8:
         dd:1e:f3:ba:82:da:db:d0:f9:81:75:d2:5f:c4:f1:c0:d5:cd:
         e1:0d:c4:ba:f7:73:be:22:ee:08:e9:9b:c9:7c:d0:8e:98:9e:
         ed:46:ca:ae:3e:5b:c5:9e:51:7f:f8:2f:a1:6a:2d:54:1a:31:
         fa:91:c7:67:91:3e:67:c2:e7:1c:99:cc:fe:9b:b5:fa:4a:3e:
         de:51:a6:20:f5:c1:e5:03:86:aa:52:1f:28:54:c4:98:09:2e:
         73:a5:c9:75:34:c2:96:73:8e:c7:0e:89:d6:c2:6a:51:5e:99:
         51:98:45:ae:d9:21:30:28:14:c0:c4:8c:da:12:ba:9b:9b:dd:
         9c:05:57:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:00:11 2026 by rpki-client