Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5f7d88d4-f7dd-361a-890d-a4f4590b7e6f.roa
File:                     5f7d88d4-f7dd-361a-890d-a4f4590b7e6f.roa (raw, json)
Hash identifier:          wc7hdJul9QFDYWZZszSzMVDyTg5U03p6I2slhAMOjsU=
Subject key identifier:   06:DC:7F:4F:73:62:A0:99:35:13:CB:73:F2:18:2A:17:AC:1C:E7:48
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F498BF4319DDF701A74089B80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5f7d88d4-f7dd-361a-890d-a4f4590b7e6f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     18779
IP address blocks:        172.120.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:f4:31:9d:df:70:1a:74:08:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8dfb3175-344f-4070-98cd-d89bd859865f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fe:0d:7e:0f:0a:ac:77:b6:fd:c9:0d:92:58:
                    f1:fb:ac:0e:67:8e:80:c7:d4:99:fe:e9:ab:f4:f4:
                    a6:a9:95:f6:83:e4:60:b5:13:ae:51:b1:ea:94:2d:
                    ba:f1:8c:6a:67:01:b8:cd:a3:89:58:10:be:79:37:
                    5c:89:2b:6c:90:ad:97:52:16:79:43:cf:68:0a:33:
                    98:eb:ac:9d:ae:65:c0:90:60:b8:b6:76:ee:b6:f0:
                    8e:68:d4:2a:7c:24:d9:de:f9:92:9c:55:c3:cb:44:
                    9f:12:75:e0:ad:b3:92:03:d4:69:d5:83:61:c1:64:
                    56:b2:35:b1:6d:b4:17:fe:f5:cf:ab:e1:63:2a:f3:
                    00:f4:60:0c:f6:4e:44:90:6d:c4:e9:09:d9:c5:cb:
                    fb:d2:0b:a4:c5:9d:04:58:9e:09:49:c9:83:0f:43:
                    14:8f:be:8a:cf:39:96:17:da:b9:56:dc:c2:85:5a:
                    d3:2f:3e:23:23:b0:ff:35:cb:0f:15:94:fa:c3:d8:
                    85:62:4b:26:6b:b7:96:25:de:11:21:3d:34:ec:54:
                    99:f4:25:b8:f0:e8:9b:aa:ce:4d:a2:17:8c:20:58:
                    9e:e0:d5:06:96:55:43:f7:c0:5b:53:d2:88:76:4d:
                    02:9e:54:60:ed:d4:1e:03:cc:dc:58:0f:3d:11:47:
                    c1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DC:7F:4F:73:62:A0:99:35:13:CB:73:F2:18:2A:17:AC:1C:E7:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5f7d88d4-f7dd-361a-890d-a4f4590b7e6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:54:ff:48:7b:ce:37:0c:ab:5f:39:6c:fe:90:82:5e:2f:cc:
         c6:41:2b:e1:df:a6:18:65:9a:5a:9c:39:cd:79:f1:d1:fa:c2:
         47:82:d1:a3:35:b6:1a:11:6a:c0:9c:d5:4b:fd:85:f3:89:1c:
         9b:9e:87:c8:9c:10:42:ed:a1:5e:20:2d:48:af:bf:24:6d:be:
         65:13:05:59:8d:71:f1:87:7b:50:36:84:e3:cb:4f:0f:a2:ba:
         1c:d7:55:1a:9a:b0:75:a0:c5:1c:b3:49:72:f2:c1:ca:db:ea:
         46:38:5e:22:78:5d:af:cc:e8:8c:e8:72:77:98:ff:63:3a:07:
         fe:d8:95:a9:ff:4c:db:7f:66:63:d7:fb:d6:3e:69:57:ef:8b:
         6f:89:ae:af:21:67:d3:53:25:be:fa:c0:85:0a:3e:59:d5:78:
         53:e9:45:10:4e:c6:d7:83:a2:41:b6:c2:25:c2:cf:ef:5e:c1:
         4f:86:8f:c5:3b:91:21:4c:21:53:d5:c9:b4:a2:1b:19:b1:b9:
         12:2a:db:d2:3b:eb:ed:a7:1b:4a:59:15:f7:62:8c:bf:fa:ae:
         ef:d7:cd:f1:0c:88:7c:a4:cd:98:a7:0e:6c:b6:47:bd:64:bc:
         98:02:cb:40:bf:86:18:ca:21:f6:5e:0e:63:ec:90:af:43:59:
         e2:f5:41:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji/Qxnd9wGnQIm4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OGRmYjMxNzUtMzQ0Zi00MDcwLTk4Y2QtZDg5YmQ4NTk4NjVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjv4Nfg8KrHe2/ckNkljx+6wOZ46Ax9SZ/umr
9PSmqZX2g+RgtROuUbHqlC268YxqZwG4zaOJWBC+eTdciStskK2XUhZ5Q89oCjOY
66ydrmXAkGC4tnbutvCOaNQqfCTZ3vmSnFXDy0SfEnXgrbOSA9Rp1YNhwWRWsjWx
bbQX/vXPq+FjKvMA9GAM9k5EkG3E6QnZxcv70gukxZ0EWJ4JScmDD0MUj76KzzmW
F9q5VtzChVrTLz4jI7D/NcsPFZT6w9iFYksma7eWJd4RIT007FSZ9CW48Oibqs5N
oheMIFie4NUGllVD98BbU9KIdk0CnlRg7dQeA8zcWA89EUfBIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAbcf09zYqCZNRPLc/IYKhesHOdIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNWY3ZDg4ZDQtZjdkZC0z
NjFhLTg5MGQtYTRmNDU5MGI3ZTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrHhqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEtU/0h7zjcMq185bP6Qgl4vzMZBK+HfphhlmlqcOc158dH6wkeC0aM1
thoRasCc1Uv9hfOJHJueh8icEELtoV4gLUivvyRtvmUTBVmNcfGHe1A2hOPLTw+i
uhzXVRqasHWgxRyzSXLywcrb6kY4XiJ4Xa/M6IzocneY/2M6B/7Ylan/TNt/ZmPX
+9Y+aVfvi2+Jrq8hZ9NTJb76wIUKPlnVeFPpRRBOxteDokG2wiXCz+9ewU+Gj8U7
kSFMIVPVybSiGxmxuRIq29I76+2nG0pZFfdijL/6ru/XzfEMiHykzZinDmy2R71k
vJgCy0C/hhjKIfZeDmPskK9DWeL1QYw=
-----END CERTIFICATE-----
Generated at Sat Oct 10 16:29:49 2026 by rpki-client