Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/321845db-591e-3801-9777-e2a4fa842292.roa
File:                     321845db-591e-3801-9777-e2a4fa842292.roa (raw, json)
Hash identifier:          z6Mf2ON4My34CLAHeGRkikebPzacLMu0ZbgbWR5/jUg=
Subject key identifier:   44:2C:79:A4:6F:37:A6:08:9F:E0:CA:06:66:99:4D:69:87:7A:94:BF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F49746C7D43153E6A44139F00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/321845db-591e-3801-9777-e2a4fa842292.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     9009
IP address blocks:        172.121.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:6c:7d:43:15:3e:6a:44:13:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0bbdb86e-f3ae-442d-a76e-927128dff2a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d7:3e:37:56:16:69:6d:55:36:7b:47:20:39:
                    be:5f:c4:c6:55:bc:d1:9d:80:6c:b4:db:18:bb:e0:
                    b2:ef:30:24:75:0e:06:d2:4f:be:06:c1:d0:9d:d0:
                    39:6a:d5:58:56:7a:d5:d2:9b:54:97:0e:0d:1f:5e:
                    99:db:73:18:23:49:f8:2a:a8:cf:a7:da:df:2f:69:
                    bd:80:c4:67:51:e3:f8:8e:55:94:4c:47:39:01:3d:
                    f8:78:2d:3d:29:48:c9:d6:8f:e3:72:db:2f:bf:92:
                    85:45:ae:a6:c9:c8:72:47:b6:67:de:47:f0:cb:52:
                    25:6c:2c:ca:3b:2e:c7:dc:2a:61:fe:23:20:4d:cc:
                    48:3a:5d:64:dd:4d:78:da:f8:16:b0:7e:29:ce:4c:
                    8e:9a:6b:5d:db:4c:8a:e0:e7:48:44:1e:34:c8:39:
                    90:31:87:36:95:14:98:a7:d0:78:55:40:8a:08:0c:
                    3b:ce:d8:61:fa:0d:f8:d0:3c:08:a1:fb:86:48:e5:
                    ec:46:7f:94:b5:0f:a1:dd:c1:a7:18:ac:7e:3e:59:
                    62:15:a7:41:c0:ea:ab:8b:48:36:8c:8b:e3:15:48:
                    26:b2:00:77:82:71:81:6e:3b:03:ec:4d:54:e2:9b:
                    1d:f3:d8:0a:13:3c:96:96:08:35:a3:40:46:fc:0d:
                    41:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:2C:79:A4:6F:37:A6:08:9F:E0:CA:06:66:99:4D:69:87:7A:94:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/321845db-591e-3801-9777-e2a4fa842292.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:36:68:fb:a3:83:dc:4c:74:05:62:b2:45:02:ef:ad:b1:eb:
         33:2d:cb:f8:a8:a7:89:c5:da:c2:83:43:d5:62:63:f9:ca:ab:
         a7:2e:9b:f0:84:43:79:96:d8:d5:35:8b:66:fb:7e:d3:35:0d:
         86:2e:95:8c:b2:0d:c0:a9:6c:c9:9b:3e:d7:09:af:8d:dd:84:
         a6:13:01:d8:e3:15:26:cd:a3:76:90:a1:b2:5d:6b:99:99:54:
         3c:12:2c:0f:c7:7e:ec:5c:48:6c:00:7a:63:58:13:f8:33:8d:
         37:8a:9a:b4:04:e0:46:2e:f0:a6:c5:58:c2:ce:9d:72:02:a2:
         cc:c6:2e:41:21:26:5e:89:67:cd:df:2d:d8:ae:04:b9:4a:e1:
         e3:69:9f:c1:6c:c8:e8:d8:37:81:9d:f3:4b:6c:0c:4d:dc:b6:
         e9:71:5d:18:f6:13:ce:7c:66:f7:0d:8d:f5:f0:fb:ef:9e:74:
         2b:08:ab:54:2e:89:92:45:e1:4e:bc:6b:cd:f2:3d:98:6d:ce:
         53:c3:bb:6a:4a:0e:ff:50:50:91:2f:46:cf:ea:67:b0:8f:48:
         de:2f:82:74:51:22:bf:55:7a:7a:96:c9:95:7a:8f:47:c6:3b:
         bb:91:88:97:3e:a4:9a:26:bd:91:2e:05:f9:cb:60:af:05:a3:
         f0:09:22:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:03:21 2026 by rpki-client