Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/be8f0a92-87d3-3d48-906b-b1c29f74d340.roa
File:                     be8f0a92-87d3-3d48-906b-b1c29f74d340.roa (raw, json)
Hash identifier:          tBlPyODbTdbUp/3crCgswXulzYINU2jFZBy1SrnJ600=
Subject key identifier:   A3:E0:5C:D3:DE:25:3B:A5:04:8D:F7:82:71:41:96:58:5C:04:4E:06
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D343A34B929E24E28667F7800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/be8f0a92-87d3-3d48-906b-b1c29f74d340.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     212238
IP address blocks:        172.121.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:34:b9:29:e2:4e:28:66:7f:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=f332117a-ff53-4006-b720-d41d91581f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:74:27:6f:ac:2d:5a:72:d2:76:bb:bf:64:f8:
                    27:92:bd:f9:91:83:44:c7:fa:73:80:a3:41:35:75:
                    05:f6:e7:ff:da:c2:fb:b5:a4:b5:15:4c:55:21:3b:
                    6e:78:f8:d8:54:5c:68:2b:d2:35:ea:ca:f7:31:6f:
                    cf:17:eb:19:77:31:c3:c5:d9:4f:b0:4d:34:a7:e4:
                    a2:1b:d1:12:6b:fd:07:6c:47:88:21:2c:9d:38:25:
                    96:82:40:3a:40:ce:92:4c:92:51:d5:6e:a3:b3:c1:
                    c1:21:4d:fb:50:9c:30:75:5d:66:ab:b5:01:ad:6d:
                    79:45:44:74:4b:bd:af:73:db:84:26:35:4c:01:ff:
                    c0:49:eb:d2:82:5d:ba:bf:2b:4e:57:94:7f:5c:0d:
                    45:5d:bb:14:a7:fd:f7:ce:d9:b1:91:18:59:78:7d:
                    a1:7e:3b:cd:03:c3:99:97:67:a2:4a:f9:68:61:d2:
                    08:9a:dc:36:ed:63:ab:31:02:ef:99:81:b2:15:67:
                    99:50:94:2f:13:f3:7e:8a:72:dd:d7:77:c9:12:19:
                    7b:71:c5:0e:de:30:4f:2c:b7:51:b8:11:2c:cd:c8:
                    82:ef:4a:b4:02:1b:05:aa:fc:ae:13:f2:7b:c6:ad:
                    1e:77:5d:b9:b8:9e:eb:54:8d:b2:23:3f:07:4a:82:
                    6b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E0:5C:D3:DE:25:3B:A5:04:8D:F7:82:71:41:96:58:5C:04:4E:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/be8f0a92-87d3-3d48-906b-b1c29f74d340.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:27:fe:c4:98:64:67:60:41:76:f9:0d:32:04:d3:ae:c8:d1:
         ec:37:c6:6a:b7:b5:b1:15:4d:f6:0d:13:47:2f:3e:6e:89:aa:
         9e:a0:65:72:f8:06:0c:27:8c:95:18:4f:e9:96:8e:ee:4c:79:
         9e:5b:13:65:37:3d:17:ec:d1:19:2e:97:ad:fd:7b:43:a9:4a:
         cf:eb:44:3e:43:f7:49:f4:72:51:b7:60:05:7c:d8:43:86:a5:
         58:5a:38:96:f2:c0:9b:eb:bc:f9:52:d7:23:0a:b1:ab:f2:c1:
         40:bb:04:ae:f5:71:17:dd:c3:7a:f6:e0:85:1e:3a:0c:87:9b:
         9a:d0:c2:23:b1:17:0b:ef:eb:84:26:ce:e6:83:77:29:f7:6d:
         d1:95:da:46:1c:49:d3:7f:ae:50:df:f8:f7:a6:88:e9:75:70:
         e1:d0:73:bc:3d:db:92:40:e7:82:87:0b:dc:f8:3a:44:89:69:
         cb:93:c7:83:b6:34:2f:bc:95:e7:73:76:32:c1:81:36:be:55:
         69:2d:57:12:9e:fe:8b:22:2d:ac:18:57:5f:3c:b9:91:2c:71:
         be:4d:2e:d2:d7:1b:ab:49:43:21:1a:62:e9:b8:85:0a:c3:ee:
         3a:ac:1f:0b:b7:80:18:bd:f3:2c:5a:25:3f:80:90:53:ac:18:
         9e:c6:c8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:47:02 2026 by rpki-client