Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6f4f85c1-a6ff-3d76-bb5e-83439a69cb59.roa
File:                     6f4f85c1-a6ff-3d76-bb5e-83439a69cb59.roa (raw, json)
Hash identifier:          eSKfK/wFn28uUf9hZo5YJBgyn7Gwz7eqer1AcDN3APg=
Subject key identifier:   22:7C:54:F2:3C:57:04:56:64:75:E8:18:12:3D:3D:74:2F:1D:8E:30
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F4972FB97F98DFE9CABEB4330
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6f4f85c1-a6ff-3d76-bb5e-83439a69cb59.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     8447
IP address blocks:        172.120.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:fb:97:f9:8d:fe:9c:ab:eb:43:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=391ca47b-11e6-4a18-b2c9-fc9aad84fac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:88:76:07:fe:64:e7:ce:7d:8e:1a:2b:26:2a:
                    e7:b3:20:42:4c:25:ba:ba:0f:26:28:4b:ba:d3:d9:
                    b1:ad:a0:42:40:91:b9:0b:db:49:ee:a2:00:83:1c:
                    e8:bc:01:4c:5f:98:ff:dd:40:3d:a4:4e:c9:4f:96:
                    2f:65:a9:cf:73:eb:a1:c9:ea:2f:42:ca:48:eb:66:
                    9e:cd:79:c6:7c:ec:85:37:8e:80:42:8c:d5:01:75:
                    a8:a9:84:dd:b9:f3:df:c3:09:ac:51:66:02:ae:a0:
                    f7:fd:3b:dc:49:12:f6:01:99:92:d5:58:eb:6f:a4:
                    4e:3b:ed:f8:5b:30:d1:a6:6d:ab:ea:07:bb:7f:89:
                    30:d7:e3:69:b3:04:1e:b5:8c:f5:27:0c:6e:0f:c8:
                    85:00:ab:91:67:21:f3:86:97:3c:eb:93:e7:b8:3a:
                    5d:fc:0e:4f:2c:46:a5:1b:26:4a:a0:3f:78:37:60:
                    f5:72:ad:40:71:a4:f0:70:79:3c:0d:a4:b1:d9:c1:
                    c5:12:ea:31:94:78:b1:7c:a3:a1:ec:77:aa:c7:a9:
                    bd:76:81:0d:76:72:5d:f9:12:32:07:3d:41:86:f6:
                    bc:4b:ec:b9:f5:2d:5a:22:61:2b:cb:0e:eb:fc:fa:
                    3e:50:84:49:6a:a5:cb:d3:ca:10:49:f1:16:73:9b:
                    60:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7C:54:F2:3C:57:04:56:64:75:E8:18:12:3D:3D:74:2F:1D:8E:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6f4f85c1-a6ff-3d76-bb5e-83439a69cb59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:a6:9f:20:42:88:b6:14:10:8c:87:ea:3d:1f:15:2e:d1:4b:
         c5:bf:2a:19:d1:1d:0b:0f:9d:3c:03:a9:47:58:ae:be:88:06:
         f1:4a:05:8d:6a:97:b9:bd:b1:91:e3:fb:e9:a2:c5:ad:dd:a2:
         f1:98:e0:72:22:ae:fe:cc:b2:13:cf:51:20:4d:44:9f:ad:22:
         1e:80:4d:0b:15:ce:70:2e:52:84:c8:ce:81:75:0d:38:70:d1:
         ee:ad:fb:6b:ac:e8:c1:18:2d:06:78:3a:80:a1:38:45:19:d0:
         5d:43:cb:28:50:b3:59:b7:f7:82:a8:f3:8c:4d:c7:a2:0b:9f:
         d3:38:31:60:23:69:16:d2:52:53:0f:ad:7e:e8:d0:8f:a3:62:
         e3:35:23:d7:8a:17:ed:81:73:82:ef:b5:b0:9c:75:f6:bd:ce:
         63:04:0e:bd:51:da:ca:ea:09:91:20:1f:e0:3a:99:a6:82:5b:
         bd:92:ba:de:80:a4:1f:22:cd:2f:d3:4e:f8:32:05:ae:38:69:
         bd:2d:21:cb:86:5b:ef:eb:98:08:72:e1:eb:8a:bf:76:e1:2a:
         69:95:a0:8e:b0:af:19:a5:31:a2:09:be:51:29:da:15:d4:6e:
         47:22:36:66:c8:91:5e:2c:55:80:c1:71:da:ab:2b:a5:76:a8:
         02:5d:3e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:07:35 2026 by rpki-client