Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c1cabb0-e052-3495-81c8-a94ca921a4ad.roa
File:                     3c1cabb0-e052-3495-81c8-a94ca921a4ad.roa (raw, json)
Hash identifier:          yAUnuvESvFHxkoH4Usgmf8hyY4/GPPEXbYuReWB18NY=
Subject key identifier:   9B:E4:1A:18:42:E1:95:E7:EC:EF:FA:15:D6:3B:50:AC:5F:D2:A4:F5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584E5BAF601297572219764B7FC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c1cabb0-e052-3495-81c8-a94ca921a4ad.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     834
IP address blocks:        172.121.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:60:12:97:57:22:19:76:4b:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=5bdd6e44-101c-4485-9b4b-e9f2063b2c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ee:b7:9d:6c:cf:06:43:e2:51:40:3d:81:11:
                    fc:ef:9a:8b:f9:79:74:8f:d1:c2:13:6d:51:01:cd:
                    5a:92:c9:32:2d:98:4c:da:8f:0b:b7:07:b8:6c:8c:
                    4d:25:fc:28:e1:8a:42:90:3e:72:29:ec:1a:f7:f3:
                    d9:48:2c:bb:00:29:2c:c8:7b:71:17:a0:fe:47:d9:
                    ab:38:7e:4f:76:e1:3e:13:19:48:7a:19:07:ac:9d:
                    a9:8b:f6:b1:aa:ce:d6:ad:a7:03:c7:18:d9:5a:d9:
                    d8:3a:fe:61:58:73:d1:80:1f:14:6a:32:2f:8c:be:
                    92:cf:df:09:8d:e8:53:97:d9:a3:07:9c:0a:33:57:
                    38:e9:ac:57:69:86:cd:53:e6:47:ae:ad:7d:f2:3d:
                    1a:c2:b8:b7:b5:e2:9f:30:e7:e9:3f:6d:03:1e:6e:
                    00:73:af:4e:2c:b4:dd:58:99:11:2b:f2:6b:04:5c:
                    28:d2:72:12:cb:d5:1f:1f:14:64:86:99:c0:9a:71:
                    87:d4:60:35:a5:a0:9d:51:e6:fc:99:77:0c:96:32:
                    3b:6f:d4:2c:82:3c:c8:7c:fb:9b:01:c4:86:23:42:
                    b4:68:68:67:96:fd:0d:f6:b7:64:3e:2a:43:be:c9:
                    e2:af:65:9e:e9:32:2d:75:98:12:93:5d:90:ac:85:
                    bb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E4:1A:18:42:E1:95:E7:EC:EF:FA:15:D6:3B:50:AC:5F:D2:A4:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c1cabb0-e052-3495-81c8-a94ca921a4ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:8d:51:0e:cf:1c:b0:3f:15:68:f5:92:e5:fa:13:b9:2d:8a:
         7d:f9:79:7e:63:c9:c3:99:ee:27:b8:8b:de:d0:f6:05:95:9f:
         29:9e:7a:1b:d5:25:87:91:ce:b1:6a:92:0f:27:a2:61:6c:e7:
         3a:36:ee:fb:07:48:2e:7d:86:30:2a:e2:01:07:89:9c:28:7a:
         7e:30:78:66:00:a1:07:57:03:0c:5a:e9:8b:dd:6b:eb:8d:39:
         83:9c:2e:f0:15:a7:20:d7:af:1d:24:cb:e4:af:e6:e7:43:be:
         64:5f:78:60:b6:a8:55:c1:b4:4f:3b:5e:bc:5f:dd:d9:38:1e:
         f5:ee:dc:18:37:ed:1e:36:29:ba:45:f7:78:c3:9d:0c:90:5b:
         3f:c7:f0:08:0d:67:55:cb:68:08:f6:b5:03:e2:cb:a3:d7:1b:
         dc:98:d4:06:85:ee:6b:81:fd:9c:ad:c8:fd:d1:12:48:8c:7e:
         15:51:98:89:6d:66:8a:33:fe:d3:ff:77:b7:06:21:5b:37:cd:
         aa:6f:06:69:1a:b2:fa:aa:76:60:18:f3:2a:75:33:ed:67:f4:
         d2:80:2a:d5:17:01:7f:b0:08:60:9d:40:51:eb:c0:30:4e:45:
         84:8b:73:65:12:1c:8e:51:79:17:05:b9:6c:9d:07:f1:90:c6:
         5a:41:6c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:01:58 2026 by rpki-client