Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bcd2491d-767f-36f4-a7b1-3dc83ca3a9f3.roa
File:                     bcd2491d-767f-36f4-a7b1-3dc83ca3a9f3.roa (raw, json)
Hash identifier:          W0IiBvdjHLdL05bf5YPizuI280VUZU3hGDSiv5xgMgw=
Subject key identifier:   57:17:EB:A3:BC:F4:E4:DA:1A:24:9A:85:D1:FF:16:88:B3:68:9E:F2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F3E48043BA7EF5AD80DE63210
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bcd2491d-767f-36f4-a7b1-3dc83ca3a9f3.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     212238
IP address blocks:        172.121.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:48:04:3b:a7:ef:5a:d8:0d:e6:32:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=61b72752-1515-4c1c-8210-2f023af2ac61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:72:15:60:cf:d3:0d:6e:76:15:3e:98:1a:03:
                    07:32:77:a5:6e:93:2b:27:c4:c5:3f:f2:41:bc:9a:
                    b4:77:fa:a7:74:2f:8f:11:f1:83:ac:4e:5f:40:66:
                    12:a8:85:10:23:22:f3:ac:e3:86:f3:b9:fc:c8:e1:
                    a0:10:e2:c5:42:a6:f6:7e:17:07:33:b6:cf:dd:64:
                    fd:2c:98:f4:bd:4f:fe:6a:1d:8e:ed:f2:7c:24:43:
                    a9:a4:3a:e9:69:54:33:1d:ef:a6:01:d2:9a:4e:84:
                    4a:eb:e4:47:84:37:55:82:32:ab:d9:da:59:f6:a0:
                    2c:63:a7:6d:92:98:5c:06:88:45:03:e9:81:e1:c1:
                    72:0d:eb:f6:15:bd:b1:d6:73:d0:2e:b5:cd:71:2d:
                    d6:7b:db:1c:42:85:14:4d:37:c0:73:5f:4d:9d:2d:
                    74:00:ad:7c:49:ab:3b:b7:55:fd:2e:69:ff:6c:e7:
                    72:78:07:c6:b1:7e:27:85:4e:3a:c4:72:65:6d:59:
                    12:93:89:08:55:fd:f1:49:79:f4:f0:4c:0c:31:5f:
                    7f:69:81:ab:fd:c1:a9:cd:f8:af:8c:a0:86:16:97:
                    72:25:7b:b0:69:83:1e:70:5d:cc:b2:8e:01:70:b4:
                    1e:04:d0:ff:78:ce:19:e0:3f:0d:53:9f:ec:61:30:
                    a7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:17:EB:A3:BC:F4:E4:DA:1A:24:9A:85:D1:FF:16:88:B3:68:9E:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bcd2491d-767f-36f4-a7b1-3dc83ca3a9f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:43:87:0e:50:c1:aa:03:0e:60:a0:2d:09:b9:95:15:f6:f0:
         d7:2f:85:0e:89:da:c3:b7:7b:ad:ab:2f:13:51:0c:65:ee:84:
         f1:49:86:d6:ff:09:b0:85:c1:ab:9c:14:cb:ab:81:7e:dd:b6:
         32:84:53:80:e1:76:31:92:94:c1:5c:a0:25:03:77:e3:88:91:
         ad:0c:49:6b:e5:d5:41:79:e9:59:60:80:c8:f5:a6:63:a2:7f:
         6e:07:29:82:29:57:86:8b:f1:01:c1:41:3c:9c:bd:78:4d:08:
         7f:81:4f:48:47:40:91:6f:02:ca:61:9b:ae:05:8f:86:0b:e4:
         ef:81:72:ec:93:a4:8c:59:c1:65:d6:a7:ab:cd:c9:90:e4:46:
         d0:dc:ab:9b:b3:79:d3:6a:e3:ac:ce:40:a1:3a:94:22:59:68:
         47:4a:31:49:94:c4:d6:43:ec:58:35:15:88:45:c2:e7:26:40:
         15:27:53:9f:18:44:99:91:6f:ae:86:5b:ef:5c:bd:b3:4a:4e:
         e1:03:39:90:2f:39:61:f8:d0:07:83:84:90:5b:70:e2:71:04:
         08:91:43:15:38:7b:d7:48:42:93:46:ab:40:e9:2a:04:a7:8e:
         9f:da:6f:e8:df:e6:83:4c:ed:ce:95:c1:28:36:ce:1f:86:1b:
         36:8c:9e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:31:12 2026 by rpki-client