Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c0bf8e8d-7b6a-3b14-8074-61ae70cb901e.roa
File:                     c0bf8e8d-7b6a-3b14-8074-61ae70cb901e.roa (raw, json)
Hash identifier:          6V+wyaDHrD3hZyJUVebSMMKnmZtOyij6Ie0Rs0Z6GIs=
Subject key identifier:   AA:7B:81:0A:64:B5:45:5E:21:EF:F5:6E:D8:D9:B7:B8:1A:3D:4B:53
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584DAAE03039780499E292A8E580
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c0bf8e8d-7b6a-3b14-8074-61ae70cb901e.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     272110
IP address blocks:        172.121.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:30:39:78:04:99:e2:92:a8:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=4435b4e2-9ddd-4d1d-a3b4-17608097d735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0b:83:09:84:88:19:36:67:f8:1e:9f:62:51:
                    69:69:37:48:23:5c:37:f4:7c:1e:14:23:41:16:c6:
                    33:21:86:a9:cf:21:a6:54:18:27:b1:bc:54:52:eb:
                    71:58:f7:cd:bf:d0:c1:32:d0:88:0c:5a:35:6b:da:
                    24:0d:b7:ff:aa:69:cb:60:82:66:0f:29:c6:84:13:
                    80:27:53:20:2b:a2:8d:e1:7a:6e:f2:96:53:af:f5:
                    41:13:77:4f:17:ca:bd:f0:d8:91:51:fc:5d:fa:99:
                    79:26:67:92:2c:a0:32:c1:f6:dc:b7:51:ee:e3:dd:
                    45:6e:e5:cd:67:df:ce:d7:44:d9:60:87:1a:9d:cc:
                    8b:8c:13:81:98:2e:f1:f4:7d:ad:28:34:ac:3c:dd:
                    67:aa:cc:fa:85:90:e5:c9:20:48:85:17:95:9f:18:
                    81:f0:88:1a:94:3b:ce:ad:33:0d:8d:af:e0:f2:84:
                    10:e0:99:bc:2b:2e:91:25:8f:64:62:fe:0c:28:5d:
                    0b:b3:b0:ec:72:ed:e2:82:31:94:dc:36:5d:8a:77:
                    9a:af:2b:05:17:87:71:f0:d7:47:be:3d:ee:a5:ad:
                    ed:a5:f5:07:03:93:1e:ae:50:f9:0d:8c:ba:de:43:
                    cb:23:d8:b2:71:be:7b:9b:18:8a:2f:fd:9b:e2:2b:
                    b0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7B:81:0A:64:B5:45:5E:21:EF:F5:6E:D8:D9:B7:B8:1A:3D:4B:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c0bf8e8d-7b6a-3b14-8074-61ae70cb901e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:eb:0a:9b:c8:7d:8b:c6:3d:e2:29:e8:02:01:84:cb:13:f9:
         60:c1:50:74:e8:2d:4f:c5:18:be:44:ab:a1:b6:ae:df:98:28:
         2e:5d:f6:31:2e:86:9d:a9:ee:e4:ab:42:66:6d:d8:ce:b7:12:
         68:15:9e:cb:ea:a2:b7:70:58:62:53:c5:1f:0f:9d:13:b0:33:
         d3:3f:e9:24:ed:9a:5b:41:18:ed:eb:45:c1:55:40:bc:b5:0e:
         c7:fd:e3:f3:b3:7a:67:3e:92:29:d0:48:1b:80:55:27:97:79:
         13:fd:e0:3d:c4:02:b9:f3:fe:0d:ae:c0:6a:ae:98:29:b6:c5:
         0a:81:c9:7c:a8:01:ba:7f:e2:79:05:27:89:f8:60:9c:1f:38:
         b5:d4:70:44:8b:30:ac:23:14:ea:fd:dc:b1:ba:0e:e8:26:b3:
         31:fc:8f:6d:99:e5:ef:a0:1c:9a:a9:b0:a9:b6:fe:a8:b2:5b:
         12:e4:ad:e9:7b:d8:04:19:4c:d1:21:bf:1a:10:0b:82:24:55:
         6a:72:6b:82:5b:a4:0e:39:9a:af:30:75:4f:35:a8:02:18:98:
         ed:4c:6b:2a:0a:0f:cd:fe:2a:4c:63:b8:d4:61:65:6b:52:0a:
         99:db:7d:7b:5c:3d:14:28:0b:c8:9c:1c:4b:1d:0c:51:f3:d3:
         0e:0a:e5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:50:12 2026 by rpki-client