Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4ffe75ca-52d1-3507-9dbd-68f71a3b2e14.roa
File:                     4ffe75ca-52d1-3507-9dbd-68f71a3b2e14.roa (raw, json)
Hash identifier:          wM0riGEYgYzcwxxMzVLVhYs+KxQVqhRbsoTJpLoy0Dg=
Subject key identifier:   01:F1:4C:DF:32:98:C9:0E:70:8A:FD:53:1C:5E:92:5B:01:B1:21:C0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F14679BD9ACCDAF3C7A3018C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4ffe75ca-52d1-3507-9dbd-68f71a3b2e14.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     55201
IP address blocks:        172.120.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:9b:d9:ac:cd:af:3c:7a:30:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=b3c68341-b2c3-43ec-ad95-0188510227bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3c:de:63:be:b1:dc:52:42:2f:c3:a4:41:66:
                    6d:31:0f:db:59:89:59:f5:cc:2a:1b:25:b8:22:74:
                    c7:72:5a:ad:b1:75:6f:22:3d:f5:40:eb:b0:4e:b0:
                    36:75:69:95:35:67:ad:1b:ef:dd:a5:f7:fa:d8:5e:
                    29:2d:77:45:d1:3c:d0:16:d9:a6:fc:ee:cf:cf:9a:
                    70:ac:05:8f:6a:dd:f2:ae:cd:ab:a6:92:39:e8:8f:
                    42:a3:21:e7:94:7a:6c:0c:b5:22:93:96:73:6a:25:
                    ce:7c:6a:92:a4:5b:f6:9f:fe:aa:14:79:3c:86:73:
                    81:50:60:65:a1:03:4f:0f:d7:f9:92:ef:cf:99:a8:
                    ce:7e:3b:2b:9f:29:4a:05:be:80:89:3f:36:07:f4:
                    5d:8b:a2:b6:30:72:65:8b:6e:03:80:22:23:f7:94:
                    a5:e6:a0:cc:e8:96:05:c5:c8:82:07:69:e7:f1:10:
                    24:60:e6:0e:8e:72:ad:00:31:c4:3e:ca:13:92:d3:
                    58:99:41:f6:43:de:1b:87:b7:8e:c0:68:4f:fc:b3:
                    b9:f3:2b:94:3b:3d:1e:ad:01:6b:fd:69:0f:12:c7:
                    8e:6c:ca:d1:5e:56:86:a3:e0:3b:82:43:a5:a0:d4:
                    77:03:c2:90:c1:25:1b:90:e4:b6:c9:be:61:0c:61:
                    31:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F1:4C:DF:32:98:C9:0E:70:8A:FD:53:1C:5E:92:5B:01:B1:21:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4ffe75ca-52d1-3507-9dbd-68f71a3b2e14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:fd:e3:ba:a4:bf:e2:57:a0:a9:2e:e6:e5:3d:2b:f1:f4:13:
         0f:b7:70:b7:45:65:7c:82:95:67:3b:a3:af:c3:a5:ba:88:d8:
         bf:ee:dc:d9:75:55:d2:4a:8c:f7:a4:d1:58:f0:f2:c2:3a:cf:
         ed:be:bb:e5:aa:4a:2f:4e:96:9a:ea:3a:f1:84:a7:8d:84:e6:
         83:a0:e8:86:df:d3:a9:bc:77:d5:8f:99:ba:6b:86:05:d0:cf:
         39:10:65:40:28:cf:7b:69:75:58:e3:d2:2a:a3:7f:20:1b:ed:
         4e:cb:8a:5a:fd:2d:1f:ae:e4:18:8e:8a:6e:f2:c8:7d:69:18:
         af:2f:e7:62:a5:70:d8:d0:aa:61:ad:ac:de:57:13:b9:04:8d:
         f1:c1:c9:28:8d:ab:31:eb:6c:16:01:38:3e:88:72:e9:bf:67:
         b1:e8:56:aa:aa:88:7e:5e:17:81:08:00:04:84:9a:e1:52:ad:
         ea:a0:c1:74:08:c5:9f:34:ee:f8:ed:df:1a:33:ce:36:f2:b7:
         16:83:9b:8f:cd:f3:a2:e5:af:f3:62:d6:3b:da:24:40:b0:2f:
         5b:26:47:ff:63:f5:4d:bb:89:d3:5e:76:8d:9c:8c:5d:84:5d:
         5b:41:85:bf:d6:41:09:28:84:9a:e0:04:b2:ce:98:24:d3:87:
         d7:6c:0d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:56:52 2026 by rpki-client