Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bf31a503-22e3-31bb-9673-5e2012cffa6c.roa
File:                     bf31a503-22e3-31bb-9673-5e2012cffa6c.roa (raw, json)
Hash identifier:          wY0a/kEojNwlpdkye5xI+vQFdX3DHlPPauEjS2JC1bk=
Subject key identifier:   AF:C2:AD:3D:C8:AF:71:B0:3E:94:86:9F:D8:A1:54:98:E9:60:B2:36
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F497319399BBC6837A0983BC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bf31a503-22e3-31bb-9673-5e2012cffa6c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     18779
IP address blocks:        172.121.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:19:39:9b:bc:68:37:a0:98:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4f32f05c-4d98-44ba-9d55-5edc487cf30d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:11:04:93:a6:4c:86:d3:31:b4:03:02:c1:90:
                    18:d9:88:61:ad:44:b2:98:d0:36:ff:ad:12:8c:57:
                    c0:da:5e:5a:1c:50:5b:47:64:b0:a9:d4:9a:35:d1:
                    58:ac:b0:8e:5f:ce:b3:50:89:e2:de:0f:51:13:10:
                    38:09:fc:bf:3c:14:cb:79:6f:96:b0:3c:ad:ef:82:
                    09:c1:ee:a3:b0:ae:f1:e6:21:cd:a3:9b:ea:8c:f8:
                    3d:9e:f4:a7:75:1c:04:0e:c7:39:1c:99:0a:76:2b:
                    96:d9:19:be:f3:ab:69:4b:91:25:1d:e9:01:4a:08:
                    c9:a7:77:71:dd:fb:af:3f:5a:3d:22:53:39:74:a0:
                    5b:ce:5a:21:93:0a:63:7d:21:31:3b:b2:28:2f:8e:
                    ad:3d:66:7d:ac:47:3a:08:e0:f6:d6:29:06:2a:18:
                    42:4e:c3:70:0d:a8:16:4d:26:31:52:96:24:21:04:
                    2d:1d:6c:af:a0:99:f8:ee:9d:38:08:47:83:77:f4:
                    9a:11:f1:67:8e:58:96:da:1e:b0:84:49:93:83:c4:
                    ec:8e:68:98:52:cf:b8:1b:3a:3f:ca:15:0b:56:0e:
                    b6:f3:94:5f:e0:bc:33:ae:a2:4a:af:5a:69:55:19:
                    dc:ff:9f:b0:63:1a:16:bd:ce:46:56:df:d3:75:18:
                    62:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C2:AD:3D:C8:AF:71:B0:3E:94:86:9F:D8:A1:54:98:E9:60:B2:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bf31a503-22e3-31bb-9673-5e2012cffa6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:14:94:7f:36:7e:6c:41:61:5d:f7:56:23:ab:74:fa:71:93:
         3f:82:d5:85:1d:6f:87:de:f2:bd:b4:b4:84:15:d8:07:9a:16:
         17:fa:b9:1f:10:e6:20:14:61:b8:05:9b:52:61:ec:44:ff:10:
         ec:bd:8a:61:62:58:89:7b:60:9f:0b:3a:7d:fe:f5:d6:f9:27:
         17:9e:1e:fd:af:49:56:5d:30:ab:9e:75:98:b9:c9:45:fc:69:
         1e:0c:67:74:11:34:9b:5b:82:ba:5b:e9:e2:e4:3d:d8:a8:d0:
         f4:e6:cf:0c:96:b6:57:db:49:b6:06:6a:93:25:23:74:b7:77:
         5a:a3:f8:fa:87:91:36:35:1b:6d:6e:65:9d:fb:1d:3d:ed:fa:
         f0:09:fe:ee:3b:4e:81:a9:c9:a9:b2:cc:84:49:dc:d4:d8:d6:
         3a:d5:04:8c:8f:a5:f4:d8:4d:89:9a:1e:05:5a:33:85:b7:52:
         a4:37:2b:4d:0f:1a:f3:66:8c:c5:d2:11:ca:7c:1a:83:4c:a0:
         77:3b:7a:e1:7e:bd:d1:cf:2c:8f:59:15:13:b2:a4:e1:11:41:
         f5:30:94:28:50:1a:dd:89:1d:5c:6a:d7:94:f9:8d:18:62:ef:
         ac:ec:bd:dd:ca:93:b1:f7:d4:f4:fd:a5:d2:54:e6:e9:b3:79:
         05:72:b8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 08:41:32 2026 by rpki-client