Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7ed28137-fdae-374f-9098-91e1a68859dc.roa
File:                     7ed28137-fdae-374f-9098-91e1a68859dc.roa (raw, json)
Hash identifier:          IykjyDrxtdNZOJZzELkA2HK6dHkiIv+rqQ5x9uhsgPo=
Subject key identifier:   A3:7D:DC:B3:EC:D2:2E:9D:67:63:7D:F4:61:7F:14:2C:38:07:5D:70
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D3D910BBC837405A84DE0D300
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7ed28137-fdae-374f-9098-91e1a68859dc.roa
Signing time:             Sat 21 Mar 2026 09:18:08 +0000
ROA not before:           Sat 21 Mar 2026 09:18:08 +0000
ROA not after:            Fri 19 Jun 2026 09:18:08 +0000
asID:                     199825
IP address blocks:        172.121.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:91:0b:bc:83:74:05:a8:4d:e0:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 21 09:18:08 2026 GMT
            Not After : Jun 19 09:18:08 2026 GMT
        Subject: CN=8b9fb9a1-1934-4401-b8f3-fd76206370fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b2:78:88:26:85:29:fd:a6:84:a6:5f:c9:e3:
                    77:28:22:62:17:33:ab:13:f9:ca:85:cd:c2:11:ef:
                    8d:21:3f:70:d5:ed:a3:cf:53:5c:fc:61:b8:12:7c:
                    d6:9d:f0:69:91:44:43:84:cc:c1:c2:1c:1e:7a:4a:
                    91:e7:a6:9f:ef:6f:38:7e:38:11:05:0c:2c:90:8c:
                    a5:b5:9b:45:12:81:ab:5a:ec:1f:95:93:6d:6f:5d:
                    dd:fe:d3:f9:59:c3:bc:71:f5:6b:ae:4b:45:cf:ec:
                    66:b4:17:9a:53:cd:be:07:90:3b:f1:2d:27:6d:a1:
                    78:c1:20:8a:03:69:77:39:c3:76:37:06:e9:ea:23:
                    65:9c:fd:41:26:d1:bf:07:b4:da:db:cb:a1:84:ce:
                    c0:fe:3d:f1:af:ea:6b:ff:60:98:ce:c9:00:ee:c5:
                    e4:17:7d:36:78:fd:10:a3:eb:f1:13:da:7e:46:86:
                    bf:22:0e:69:0c:0a:ec:b9:1f:42:77:7c:e0:83:aa:
                    c5:3b:a7:0b:d5:e2:9d:77:67:c6:77:97:7b:f7:dd:
                    89:5c:30:a5:3d:55:8b:0d:64:7a:ea:5b:a0:23:b6:
                    11:6b:2a:03:79:9f:57:82:28:fa:83:20:69:02:f5:
                    0a:ea:b7:e7:50:72:8e:17:55:35:c1:5d:b8:ba:d0:
                    67:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7D:DC:B3:EC:D2:2E:9D:67:63:7D:F4:61:7F:14:2C:38:07:5D:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7ed28137-fdae-374f-9098-91e1a68859dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:f0:d2:ad:c3:2f:2f:30:d7:02:ac:e0:67:10:d1:bc:9c:88:
         7c:2e:10:5c:8a:22:b7:92:78:7a:9e:cb:27:55:af:26:e1:4f:
         ab:57:1e:0b:7f:cf:6d:09:4c:ea:44:c6:bf:52:cf:d0:02:e7:
         f4:c6:a3:df:7c:ee:a0:38:19:1c:cf:83:22:5f:3b:ba:2c:b2:
         56:78:77:c6:ad:c1:ba:76:97:9f:29:be:7f:84:81:89:2d:4e:
         b5:5e:5f:d1:33:6c:7a:d9:0e:0d:f9:b2:ec:12:32:d5:d8:87:
         04:5c:70:20:e6:f8:95:ec:9e:62:85:c1:1a:34:05:39:79:ce:
         f6:0b:52:2a:f0:21:c5:a1:19:9d:5b:49:24:be:60:bc:68:cd:
         9a:71:f1:c1:23:79:28:ce:ac:d7:66:5d:59:2d:78:11:11:6a:
         e2:21:9a:93:96:51:da:50:a9:49:be:71:20:d9:48:db:88:f0:
         0c:b1:8f:6c:aa:c7:01:af:3f:d5:76:82:9c:5c:9a:f1:26:44:
         66:7a:e6:3f:07:f8:36:fa:b9:09:cb:68:c1:f1:cb:16:f4:7e:
         96:0a:0a:1d:24:af:93:21:5c:5c:95:66:11:9b:4c:30:9d:9d:
         5c:38:94:c3:ce:35:d6:63:08:f7:e8:3f:e4:47:de:b2:30:bc:
         0a:c9:e4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:19:32 2026 by rpki-client