Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8540b0cb-2f0a-3032-900c-aee63684a4c0.roa
File:                     8540b0cb-2f0a-3032-900c-aee63684a4c0.roa (raw, json)
Hash identifier:          b6pacRa2PxmRs5/rNCAEIFJJVIyUz0ee1cd/eeIL/7Y=
Subject key identifier:   D0:DC:5F:96:FF:EF:75:11:E5:E6:C2:A5:55:F3:A5:BB:97:FB:8B:EB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D24DF7CBC3A934656F1922C80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8540b0cb-2f0a-3032-900c-aee63684a4c0.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     44559
IP address blocks:        172.120.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:7c:bc:3a:93:46:56:f1:92:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=14d1619d-a8b6-42ae-96f6-d03804492a9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e4:11:95:09:93:f9:c6:15:ee:ed:5f:16:a7:
                    ca:d1:fe:f5:66:7d:fd:d3:ac:35:0b:9f:c7:8f:89:
                    7c:46:d4:e2:8c:df:3b:d2:7f:b0:23:8f:46:a5:ae:
                    3b:d8:e6:89:72:1d:64:24:a7:52:63:98:8f:34:6e:
                    07:e5:00:48:b9:04:4a:fa:54:a2:1b:f2:00:d1:76:
                    95:cd:a9:d4:c2:f0:cb:a5:e7:cc:e2:ff:8a:08:25:
                    36:f7:c4:2a:81:f3:52:85:04:53:6e:11:bf:77:27:
                    45:6a:c5:c3:f1:45:ee:b3:ca:bc:9e:53:c1:e3:82:
                    32:1a:a4:98:97:5f:cc:3b:fb:b0:f3:b1:fa:1b:bd:
                    92:38:ea:ec:e8:e6:54:87:d9:56:f5:2f:dc:5b:b7:
                    eb:43:27:7e:d3:60:1d:4b:3a:4f:9d:a8:27:80:e1:
                    85:98:22:38:66:ad:f7:64:b3:20:61:6f:c3:1e:1e:
                    0b:b3:4c:ea:98:48:b3:24:8f:cc:0d:53:3c:2a:43:
                    cf:11:a0:50:79:89:7a:d5:b9:6b:67:8b:c0:95:26:
                    8f:10:0a:fb:9b:e5:48:cb:1b:22:d9:02:fc:e9:87:
                    cd:02:94:f8:f0:b9:bb:53:c1:5f:b7:7a:95:9e:98:
                    0d:0c:6f:d8:33:58:d8:57:4c:fc:cd:f4:ab:b6:ad:
                    82:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DC:5F:96:FF:EF:75:11:E5:E6:C2:A5:55:F3:A5:BB:97:FB:8B:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8540b0cb-2f0a-3032-900c-aee63684a4c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:62:cd:73:55:37:3e:2d:92:e8:f7:11:b5:1d:7f:b2:d9:ec:
         ec:80:08:84:14:54:79:ae:23:8b:51:91:15:18:a3:d9:0a:38:
         53:65:19:d6:90:b3:55:4d:d1:5a:5d:eb:c6:fd:90:df:37:ba:
         57:b2:19:27:37:72:8c:49:7c:e2:c0:3c:33:0b:23:87:fc:dd:
         91:7e:be:74:6c:8a:fb:ea:e3:86:b3:5d:11:4f:b7:b1:aa:ca:
         c9:ad:26:36:66:f7:ed:6e:f5:50:d3:d7:e9:2b:ce:cf:1e:c2:
         69:d4:17:eb:1f:28:04:eb:0c:b0:c5:ce:1f:07:16:72:b1:eb:
         63:5f:88:ab:d8:61:89:18:bf:ce:03:ca:78:4f:67:ab:37:02:
         6f:c8:a6:c6:93:1b:8e:29:22:59:b3:03:63:ed:49:44:2a:9f:
         85:91:7d:ae:22:a9:3a:55:45:16:50:93:51:6f:59:85:33:5a:
         f8:ad:f1:25:95:7b:bf:14:61:15:7f:a3:29:9a:1e:99:9a:8f:
         8a:98:47:e1:49:e1:46:26:a7:dc:25:60:8b:1c:8e:09:cf:58:
         34:83:9c:e0:25:03:50:1f:61:66:b9:f9:dc:61:50:04:20:68:
         6f:a1:26:da:b1:cc:99:a3:66:35:f7:ce:08:41:97:2e:33:cb:
         8d:2f:1f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:49:45 2026 by rpki-client