Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9fe5032a-37c3-3993-bb87-b5523e44cb2e.roa
File:                     9fe5032a-37c3-3993-bb87-b5523e44cb2e.roa (raw, json)
Hash identifier:          /FGf95BkIFz80DMO5DxEAzTEKTD8DvdbVwUex/8JVNk=
Subject key identifier:   21:3B:92:AC:3E:BE:26:83:5D:F4:6D:B4:A9:1A:BC:9E:57:91:C5:46
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584DBBA06C624F1E7401FF5EDC00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9fe5032a-37c3-3993-bb87-b5523e44cb2e.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     35554
IP address blocks:        172.121.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:6c:62:4f:1e:74:01:ff:5e:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=8172a05c-cafb-42aa-818e-cd96406eb235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a4:f0:af:5d:89:c1:e5:7b:98:8f:94:df:7c:
                    cc:52:52:2c:06:1d:b9:c9:6c:1b:05:2a:e0:7e:8f:
                    1e:e1:d6:f5:e5:c8:25:8b:ac:90:18:ae:e0:fa:e0:
                    87:d8:54:c7:1a:0b:21:e2:72:89:cb:cf:04:54:4f:
                    45:cd:c5:8f:87:35:bc:1a:9a:35:d6:a3:d0:86:48:
                    79:35:ce:c0:1e:4e:43:ca:5f:79:96:a7:71:c5:85:
                    9d:64:50:45:9c:bf:cf:72:3c:2b:b2:14:60:4a:9d:
                    2c:83:e3:4c:d8:7d:19:e2:06:fc:7d:2b:6c:b5:dd:
                    6f:f9:66:3a:bd:c3:84:8e:ee:49:7d:dc:65:c7:72:
                    77:17:5e:c0:e1:30:65:b8:e1:5e:1e:ea:9e:66:3d:
                    01:c6:45:22:31:87:8a:ae:c6:db:8c:e9:03:08:44:
                    ad:81:aa:8a:66:0c:cd:f1:65:15:33:43:92:f2:21:
                    cc:3e:d5:57:29:10:8c:8b:76:8b:5b:f6:a6:b8:b1:
                    21:6f:bc:7e:04:54:ac:30:5d:64:91:ae:e7:af:fb:
                    e9:60:39:aa:07:39:1a:b0:d2:cd:8d:2e:30:ad:eb:
                    eb:1b:a5:06:c0:53:19:89:0b:85:a7:83:b5:72:5f:
                    9b:2f:7b:e2:72:97:b2:20:07:2a:0b:28:0d:3b:67:
                    03:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3B:92:AC:3E:BE:26:83:5D:F4:6D:B4:A9:1A:BC:9E:57:91:C5:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9fe5032a-37c3-3993-bb87-b5523e44cb2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:14:a9:48:c7:fc:4b:a6:b1:84:0b:93:14:aa:b4:da:1a:c9:
         0c:7f:15:3e:81:4a:51:41:3b:ee:7e:63:83:26:c0:23:13:28:
         0b:2c:9c:bc:fa:9a:73:d5:03:26:1f:5a:0b:09:7b:20:f5:5a:
         3f:dc:a5:58:ab:af:28:79:ed:7d:91:99:a0:fb:cb:0a:59:05:
         23:a5:0a:6d:78:ea:8f:2a:b0:22:7d:11:2c:4f:7a:ad:be:dc:
         64:45:0c:ff:34:12:cf:26:f9:4b:96:85:5e:b2:64:82:42:ed:
         9a:ab:7c:52:98:19:25:a5:d9:d2:f0:f1:b3:a7:86:6a:1b:24:
         fd:38:a3:eb:71:7c:3c:cb:50:46:6b:e9:e0:d5:3b:94:a8:f4:
         e6:e5:a6:a1:4d:42:d4:a1:6d:67:d3:6b:c7:8e:e9:33:97:d2:
         5a:ae:e0:f4:f2:e9:f3:1e:9a:55:32:f6:2c:66:f6:e2:13:21:
         08:48:2f:d3:ed:26:fa:5f:ed:88:59:fb:c1:6a:1a:ed:62:4f:
         91:39:81:18:a5:cf:33:92:0a:06:09:1f:64:ad:59:02:70:f4:
         b9:50:ec:ef:bc:80:44:5c:c2:6f:10:eb:a2:68:d8:bf:0d:33:
         a3:42:6f:49:c0:57:7f:a7:d5:52:32:58:09:e0:d9:42:df:c0:
         6e:8f:57:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:01:35 2026 by rpki-client