Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/34b7f9d4-7132-3a16-b482-6e711eab0546.roa
File:                     34b7f9d4-7132-3a16-b482-6e711eab0546.roa (raw, json)
Hash identifier:          Ex4gXocKQ3J+id3RfcwlTHunPpEAmBJzxJK4/s1DPn4=
Subject key identifier:   D5:DC:45:10:0D:F8:29:69:78:0F:C8:9E:85:10:75:73:F1:9A:9A:5E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D343A267367AB1D913A6E6200
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/34b7f9d4-7132-3a16-b482-6e711eab0546.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     62240
IP address blocks:        172.120.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:26:73:67:ab:1d:91:3a:6e:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=5df15099-6514-4e3f-a38c-1cd0776234f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2e:d1:0f:c6:a5:36:7b:fe:04:99:0c:db:6d:
                    06:b3:45:84:0e:c5:54:2a:7f:11:52:c9:6f:98:03:
                    ef:ba:f2:e5:3b:d1:d5:46:fb:bf:0e:0f:ee:91:12:
                    86:d7:ee:ef:cf:95:ba:89:fd:2f:5a:23:12:70:aa:
                    a5:5d:9a:af:3a:60:6b:55:15:30:3b:fd:21:fb:c2:
                    fd:05:cf:31:da:ec:74:49:1d:7c:04:fc:e7:b4:ff:
                    45:e7:b7:86:30:e5:28:db:95:f8:2d:43:27:8f:4f:
                    dd:c9:42:a1:4f:6c:1c:8a:9d:e9:8f:9a:f3:84:9c:
                    2a:dd:bb:1f:fc:52:5a:d2:91:a7:b4:d4:51:36:94:
                    e2:9b:b5:fa:c2:dd:1b:05:8e:e5:8b:3e:65:d6:e8:
                    7f:90:4c:71:8a:b1:11:34:c4:9c:9a:26:2f:e3:e2:
                    23:ab:25:7e:7b:36:0f:e5:d1:fc:fb:59:5b:63:90:
                    cd:bf:75:72:48:f7:a7:29:3b:8b:53:d1:5e:59:c5:
                    3c:9c:4c:c1:6b:c2:b3:c2:f8:e9:87:80:d4:71:23:
                    17:f1:a7:97:88:cf:17:91:98:bc:93:65:1f:16:e9:
                    c2:c4:6f:2a:a6:de:48:68:9b:84:a9:58:e1:4d:00:
                    ef:13:53:88:d3:c2:88:8c:16:90:6f:e8:85:13:4a:
                    d5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DC:45:10:0D:F8:29:69:78:0F:C8:9E:85:10:75:73:F1:9A:9A:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/34b7f9d4-7132-3a16-b482-6e711eab0546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:6e:5d:b6:40:f1:d1:8e:03:2c:c2:0b:d1:19:11:f9:28:15:
         05:53:84:2f:86:f7:1a:32:27:3b:05:4a:66:56:41:94:8c:02:
         b5:25:b6:32:89:7e:94:a2:e8:5f:64:dd:a8:98:27:9c:5e:32:
         26:86:f9:dd:01:c5:f1:cc:e7:fc:b5:6b:15:da:fd:35:7f:99:
         6e:64:99:70:9e:4d:3d:a4:1a:0c:5b:35:c5:5a:17:93:06:b1:
         9c:77:aa:99:60:8f:72:00:0b:fe:59:92:43:1e:07:c5:91:47:
         6f:f7:4c:24:e3:59:ba:85:2b:b0:fe:c2:3a:28:28:ef:2c:b3:
         47:0f:c1:dd:a7:c7:92:b4:dd:cc:9b:4a:f2:04:22:1b:2b:1f:
         8d:ca:2b:c9:89:7c:02:a7:ac:dd:ec:fa:8b:30:62:8f:14:27:
         84:24:0a:47:b3:21:b3:60:50:30:21:f2:bd:59:a8:89:97:7e:
         85:30:dd:5d:08:da:c1:f8:53:c0:c7:7d:82:3f:9c:34:01:da:
         e7:62:af:bb:69:5a:f2:fe:fe:cc:2c:dd:83:3e:4a:d0:dd:7d:
         b4:79:4a:02:3c:34:2d:69:8c:9b:f7:07:ea:59:73:0b:0c:02:
         14:82:e4:e1:2e:70:12:80:55:f6:c6:02:d9:2c:b7:56:7b:bc:
         09:96:2c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:47:53 2026 by rpki-client