Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8752908c-5d82-3917-a9e7-8d3388cedad6.roa
File:                     8752908c-5d82-3917-a9e7-8d3388cedad6.roa (raw, json)
Hash identifier:          iH1hqlP41sTKmqSp47dBwKsfnLouXdAWyMnMfFRXz/I=
Subject key identifier:   A7:31:AC:C7:AE:A0:E9:43:36:B6:2C:CF:A9:49:86:65:99:D6:65:D7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D39CF97DB4CEC318881DF2300
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8752908c-5d82-3917-a9e7-8d3388cedad6.roa
Signing time:             Fri 20 Mar 2026 01:00:32 +0000
ROA not before:           Fri 20 Mar 2026 01:00:32 +0000
ROA not after:            Thu 18 Jun 2026 01:00:32 +0000
asID:                     18779
IP address blocks:        50.117.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:cf:97:db:4c:ec:31:88:81:df:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 20 01:00:32 2026 GMT
            Not After : Jun 18 01:00:32 2026 GMT
        Subject: CN=ddad074f-12cf-46a3-8fee-360cf828a16c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5b:ae:04:62:5c:e9:34:d1:5a:37:ad:1f:1f:
                    19:1b:25:43:bc:d5:e4:b4:0a:7f:ac:e8:e0:f4:b5:
                    d1:c1:c2:56:29:b5:01:bd:ba:b1:9a:2f:23:a8:c5:
                    23:02:63:37:c9:76:5e:76:7e:c8:29:ed:2d:82:06:
                    f1:46:fb:0e:48:05:5a:ed:7b:ac:9c:90:9e:6f:f0:
                    c6:bc:bf:e3:eb:4f:a0:14:90:ea:34:9b:52:b2:14:
                    61:2a:a1:83:88:94:93:71:6e:34:6a:8a:fb:86:49:
                    15:f6:ad:61:ed:c1:80:2a:a5:c3:a4:48:37:aa:67:
                    d1:ab:dd:8f:d4:7c:14:20:12:1d:fe:f4:cb:56:ce:
                    a3:b8:f9:f2:a5:f0:e6:37:eb:34:83:ed:9f:56:dd:
                    42:de:7c:31:13:06:90:0b:a6:43:c2:9d:b3:2d:fd:
                    c4:c0:93:98:1d:72:79:91:c2:c8:89:39:4f:6b:10:
                    f1:c5:e0:48:1b:18:41:a0:38:3b:db:cb:2f:2c:07:
                    41:4a:24:c3:a0:09:e4:46:7a:86:70:37:92:49:e0:
                    50:b4:bb:f3:5a:b7:90:fc:9c:0e:48:3b:d1:01:92:
                    70:34:6f:78:82:95:ea:67:1a:d6:d8:ca:0e:1e:7b:
                    2f:a0:4b:0d:e7:df:d4:8b:7e:ab:83:fc:fc:c6:36:
                    53:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:31:AC:C7:AE:A0:E9:43:36:B6:2C:CF:A9:49:86:65:99:D6:65:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8752908c-5d82-3917-a9e7-8d3388cedad6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.117.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:e9:4f:5f:5b:6a:7e:74:1e:eb:63:76:1e:33:cf:7e:f2:e3:
         ed:29:54:4f:f7:b4:06:81:4a:56:5a:10:81:4d:31:02:73:1e:
         29:7c:42:a6:02:ef:de:0a:0c:ff:fa:5c:61:6c:3c:51:d4:31:
         93:6b:f0:98:85:65:17:a7:0d:a0:c1:9c:91:e9:fa:63:b6:16:
         26:05:69:9a:d2:71:31:77:03:16:34:87:fd:81:34:6b:8b:8e:
         66:73:57:29:1d:46:18:22:06:2f:06:0f:1d:0a:a0:87:7a:66:
         74:55:b1:f2:ea:fd:84:0e:b3:c1:26:a6:9e:a5:11:62:37:b3:
         eb:cc:b5:27:95:7a:95:b2:24:ce:43:25:5f:b2:7a:7b:8d:87:
         bb:c7:4c:45:ee:76:7f:9e:5e:be:df:ba:30:21:a4:fc:3d:f2:
         33:c5:6d:3c:86:c0:75:8b:03:d2:76:c7:10:e0:45:1a:4a:0d:
         53:73:60:1d:a2:cd:01:cc:f2:87:22:32:fe:27:f8:bd:10:33:
         c0:1b:ae:c5:5c:f1:d6:41:75:09:1c:23:33:7b:7a:63:d9:fc:
         1c:d1:5f:6f:be:d1:d5:7a:22:b8:90:c5:1f:66:de:23:bd:cc:
         02:e5:10:96:c1:60:29:77:0b:fa:ba:e4:11:2a:47:c7:3d:13:
         74:0e:c0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:49:27 2026 by rpki-client