Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/20fbc16c-35e8-3525-8346-fb53423c2aec.roa
File:                     20fbc16c-35e8-3525-8346-fb53423c2aec.roa (raw, json)
Hash identifier:          Bu+2OMQmIwPzkZU/OVVxVOXu879Nz8JlsVgFx8D6lZ8=
Subject key identifier:   B9:E9:92:93:1C:79:7D:FF:B9:93:C5:EC:8D:6A:5D:2E:02:D7:8D:F3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F58CD5D9522D1BDF77FBF9480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/20fbc16c-35e8-3525-8346-fb53423c2aec.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     62240
IP address blocks:        172.120.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:5d:95:22:d1:bd:f7:7f:bf:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=cb4c6f3a-fd5d-4419-b970-eff790e7464f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d4:0e:3a:e3:3e:42:e7:68:58:97:d4:94:dd:
                    d9:c2:51:c1:dd:a3:51:95:89:57:e4:7d:df:42:8d:
                    9e:56:95:de:bc:76:56:a3:8b:44:ae:52:66:e7:82:
                    ff:cd:18:36:89:b3:b2:e1:3e:fe:d7:03:e6:64:8d:
                    7c:77:2b:5a:29:44:fe:e6:df:ce:02:7d:7c:05:46:
                    06:7b:a8:ca:a9:a6:cc:24:9c:8f:57:88:b1:48:ce:
                    7f:a2:64:54:ed:3f:cc:91:65:36:ac:4c:1f:8b:11:
                    1e:8a:16:d3:6a:7f:04:97:4d:24:86:2b:17:77:76:
                    aa:8e:c1:d7:a5:d8:e8:8f:53:55:b7:a3:59:75:0d:
                    ff:f5:42:1b:af:5f:d4:98:d1:c7:43:67:de:75:32:
                    3a:2d:c3:8f:24:c9:07:b8:53:1a:02:c3:4d:7d:df:
                    a8:c3:27:88:6b:53:3b:66:ec:ea:34:ba:47:6e:10:
                    72:3a:e9:8d:69:8c:98:46:59:a5:c9:aa:98:fb:54:
                    d4:84:ac:ae:74:21:f0:fd:3d:22:e0:96:7d:bf:5f:
                    1b:76:06:34:61:c3:14:35:f7:98:3d:17:b3:9d:2b:
                    3d:df:a4:1c:fd:82:58:f3:04:a8:76:af:86:2a:c2:
                    4f:6c:e2:5f:4f:14:3f:40:80:6b:f6:c8:bc:da:74:
                    74:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E9:92:93:1C:79:7D:FF:B9:93:C5:EC:8D:6A:5D:2E:02:D7:8D:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/20fbc16c-35e8-3525-8346-fb53423c2aec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:d3:3f:e9:4e:5c:ca:55:af:19:d8:c1:c4:f6:13:e3:ae:71:
         0d:98:cf:31:92:f9:5f:ad:5c:5a:6e:a9:39:84:f7:14:04:f2:
         3b:e6:6a:7c:e3:5b:f5:96:b2:ef:bb:d7:84:b9:d7:94:69:fd:
         ac:c2:84:f9:22:dd:c8:93:12:a8:c7:6b:47:cb:3a:de:e8:4f:
         3a:e2:b8:bd:88:f5:2e:97:27:33:77:13:04:24:3f:0f:72:5e:
         d4:13:26:a9:5e:24:54:d2:7f:f5:b9:51:17:7f:5a:4c:ea:eb:
         26:d9:08:b9:9c:a6:ae:1c:6e:d6:ec:66:70:13:ef:38:bd:27:
         d7:d8:46:ff:f1:0d:c0:e9:43:c5:bf:08:41:91:08:26:4b:db:
         38:aa:d0:84:e0:4e:db:9f:07:c8:55:6f:0f:70:27:c9:4f:be:
         1d:50:c0:bc:0e:1f:3a:15:e7:31:e7:5d:59:ca:77:9c:35:12:
         6f:a1:c9:a6:27:30:9b:1b:69:62:41:a7:ae:1a:88:de:da:7f:
         09:37:b2:98:53:de:7c:c7:ff:db:fc:84:5e:1e:2b:e8:c6:39:
         73:25:3b:8c:94:bb:d6:29:8a:db:86:54:32:7d:f3:f0:51:3e:
         71:1d:ff:96:e4:38:f9:7f:d8:6e:f3:3c:70:d6:07:8f:f3:3f:
         44:8d:5f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:25:31 2026 by rpki-client