Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2f51c6d7-104b-30d8-a0e9-cb8e7d2cd193.roa
File:                     2f51c6d7-104b-30d8-a0e9-cb8e7d2cd193.roa (raw, json)
Hash identifier:          pklTFmD+EpZGiDfK2ULnLUAePbhpwhWD6acy4RqEsIo=
Subject key identifier:   5A:13:E5:F6:06:9E:4B:EC:34:FE:03:88:D2:BC:EB:83:52:CF:5B:EA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EB57C66CE1CA5E2AB031CA680
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2f51c6d7-104b-30d8-a0e9-cb8e7d2cd193.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     44559
IP address blocks:        172.121.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:66:ce:1c:a5:e2:ab:03:1c:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=4fd70b3a-d5d1-4cd1-9563-c5ed0974ef11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d7:2a:bb:59:03:bc:8d:0b:01:46:0f:5c:07:
                    8d:2f:c9:04:b3:e5:a0:16:ba:1b:b4:2a:fa:7c:98:
                    15:31:4d:b5:7b:a7:99:d6:de:57:19:28:ca:56:95:
                    b8:fc:b0:71:dc:d9:f9:45:9f:9a:03:b2:16:40:4f:
                    de:22:4b:40:a7:e9:a0:bc:25:b7:12:4d:ef:b8:73:
                    78:8f:c0:b7:0d:18:b0:cd:a8:09:f1:5b:bc:5a:a3:
                    c1:7c:72:f3:b5:d5:c9:5c:00:7a:9a:87:2d:a9:3d:
                    e0:51:c0:1b:12:a4:27:c2:f8:f6:bc:3e:b9:44:a0:
                    2a:77:b8:43:b7:ca:46:ca:d2:9e:94:fe:fa:76:fa:
                    65:50:64:af:94:b0:21:7e:7a:36:9e:40:ae:dc:69:
                    7f:db:9f:85:d0:33:30:56:39:ef:4c:54:04:bc:34:
                    d2:71:d7:7a:9c:bc:39:2b:e6:4e:30:44:eb:4c:6f:
                    7d:54:59:22:3c:12:7f:31:5b:38:20:fb:77:c6:23:
                    a1:09:6b:51:a6:e5:ab:79:fa:12:23:32:a2:ee:96:
                    1a:1e:04:cd:9c:dc:ae:fb:78:b0:ba:d4:3e:f2:2c:
                    09:42:1a:83:30:bc:01:96:54:68:82:6e:de:a2:0a:
                    03:fc:d5:3c:05:f2:db:c6:fb:60:e8:ff:70:2d:fb:
                    24:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:13:E5:F6:06:9E:4B:EC:34:FE:03:88:D2:BC:EB:83:52:CF:5B:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2f51c6d7-104b-30d8-a0e9-cb8e7d2cd193.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:e2:2e:26:5e:c5:97:3b:cf:a4:72:58:af:14:fc:e5:94:2d:
         fd:4e:1a:b8:7f:f9:70:28:b8:65:40:44:d5:d2:31:83:3e:fe:
         4a:ab:22:1f:de:13:48:64:29:39:94:d0:77:ea:8b:3a:37:c7:
         12:38:51:08:94:f9:de:dd:ec:34:13:c4:20:f5:e7:ce:fe:e1:
         c0:f0:38:60:d2:0d:2e:6b:33:9b:bb:24:38:27:50:4f:e8:cb:
         cb:f9:aa:fc:dc:bd:e0:82:d8:50:7b:b2:eb:49:b8:6f:7b:f2:
         d6:01:19:94:a1:95:5e:0c:3f:b5:1f:05:4f:11:dd:ec:a3:9b:
         1d:6a:17:c5:4d:7c:8a:b0:92:5c:c5:e0:94:8a:0c:6b:0f:0a:
         87:3a:05:b7:b5:50:5f:f5:ef:e7:16:fb:5c:da:9b:5f:e0:2c:
         82:90:18:0d:51:ad:e9:50:39:bb:2d:d5:45:d4:38:86:87:28:
         92:c3:a8:9f:2e:c3:f8:98:f6:bc:be:e9:cb:e2:b6:d8:7b:fa:
         19:7c:f1:8e:ae:ae:e1:9b:19:bc:a1:74:27:9d:de:7b:1f:1e:
         52:c8:91:14:25:20:62:b1:b5:20:d5:90:cb:7d:06:2b:cc:ba:
         bc:c3:b4:0a:4e:34:90:af:9b:8b:0e:69:84:ee:2e:33:c0:2b:
         25:f9:4f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:26:21 2026 by rpki-client