Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c7032ab9-f810-3bc4-8e61-9d2ff3d62a14.roa
File:                     c7032ab9-f810-3bc4-8e61-9d2ff3d62a14.roa (raw, json)
Hash identifier:          OcjvIA3qhUnF+/2Fr6vS5qQfmrthbAuyUQi5WfnOeNY=
Subject key identifier:   2B:97:02:5E:E1:C5:C0:5A:DC:37:45:FA:BB:92:E9:E6:D8:2B:08:F0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F629318824BC75542E5639880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c7032ab9-f810-3bc4-8e61-9d2ff3d62a14.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     18779
IP address blocks:        172.120.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:93:18:82:4b:c7:55:42:e5:63:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=64ad9240-5cc9-450c-85d3-0e5f1efed5fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cf:fc:21:db:50:17:55:62:30:83:78:6f:9e:
                    fd:a8:5c:a1:db:78:be:e3:c3:52:f7:76:cc:96:3b:
                    5a:69:0c:36:09:f4:ed:0d:db:ad:a3:e1:92:e7:ce:
                    56:77:ca:a7:77:32:b6:fa:3f:a8:e9:a9:da:43:f1:
                    27:1f:d8:c3:36:7b:b1:5d:01:84:9f:77:d5:1e:56:
                    7d:48:f3:87:d5:19:12:5e:04:06:e5:1b:f3:30:2c:
                    17:41:6a:8f:c7:04:1c:7f:a8:ff:bc:9e:81:b8:e7:
                    15:de:59:00:4f:25:be:8a:ff:77:86:f5:c6:a7:aa:
                    65:ac:c4:c3:50:28:35:e5:6b:ba:f4:2c:b7:c0:55:
                    fa:07:fd:45:b3:39:42:53:0d:36:84:ab:13:b0:11:
                    dd:70:7a:73:9a:0c:92:bb:52:f6:fc:0e:35:b3:22:
                    08:95:3a:70:2c:85:31:82:4f:80:31:ae:bd:61:e0:
                    dc:97:0b:96:70:82:4d:4d:8b:39:90:59:e0:9e:3e:
                    b3:70:9f:fd:ca:47:7e:3f:d2:69:8b:c2:bc:bb:1a:
                    79:3e:b0:62:6b:5b:7c:32:96:cc:97:5b:e1:2d:e2:
                    12:f5:48:75:84:9c:15:76:e7:91:c2:d5:66:81:2d:
                    b1:8a:3a:9e:f8:f1:e8:e5:ee:7b:4c:75:3c:f4:8c:
                    52:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:97:02:5E:E1:C5:C0:5A:DC:37:45:FA:BB:92:E9:E6:D8:2B:08:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c7032ab9-f810-3bc4-8e61-9d2ff3d62a14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:9e:4c:31:40:c3:03:fa:79:8b:f1:d8:5b:ed:e3:f7:d5:a0:
         0f:ec:a7:92:23:d0:c2:23:d9:5b:a7:9b:e4:dd:4c:c5:c0:d5:
         8a:58:f7:3f:2b:fa:a0:81:90:05:ba:8a:8e:71:39:fa:65:69:
         ef:cb:c7:dc:c2:27:fb:1c:99:ab:db:0d:4a:2f:82:2d:b4:9d:
         13:58:c9:c7:a1:87:a7:12:07:8e:95:7f:54:6d:19:c7:61:aa:
         c9:a7:79:b6:86:1f:21:ff:23:f8:03:a6:8f:6f:9d:7e:5a:8e:
         ec:fc:51:bb:35:27:80:48:88:79:ae:67:0f:d0:16:98:ff:fa:
         2b:57:83:09:1d:ad:3f:3e:90:a3:58:ab:4e:d4:de:a6:17:ae:
         3c:b3:8d:eb:d1:58:d8:be:e2:97:3e:b9:9f:b6:39:29:76:cd:
         5e:ba:70:28:ad:9d:cd:5b:97:5b:e5:58:22:1e:33:4c:b8:5c:
         51:2a:43:63:8a:00:c6:a7:ac:92:f3:e3:45:0e:cd:a8:2d:71:
         59:00:38:06:96:aa:13:c8:f6:70:74:76:f8:78:8e:b4:15:c9:
         1f:95:48:97:d5:35:d6:82:cc:24:5a:ff:da:7a:15:ad:2e:94:
         60:c5:6d:6a:7d:50:57:fe:b6:a1:4e:cf:69:dd:47:4b:c3:9a:
         b6:a8:7b:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikxiCS8dVQuVjmIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
NjRhZDkyNDAtNWNjOS00NTBjLTg1ZDMtMGU1ZjFlZmVkNWZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs/8IdtQF1ViMIN4b579qFyh23i+48NS93bM
ljtaaQw2CfTtDduto+GS585Wd8qndzK2+j+o6anaQ/EnH9jDNnuxXQGEn3fVHlZ9
SPOH1RkSXgQG5RvzMCwXQWqPxwQcf6j/vJ6BuOcV3lkATyW+iv93hvXGp6plrMTD
UCg15Wu69Cy3wFX6B/1FszlCUw02hKsTsBHdcHpzmgySu1L2/A41syIIlTpwLIUx
gk+AMa69YeDclwuWcIJNTYs5kFngnj6zcJ/9ykd+P9Jpi8K8uxp5PrBia1t8MpbM
l1vhLeIS9Uh1hJwVdueRwtVmgS2xijqe+PHo5e57THU89IxS2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCuXAl7hxcBa3DdF+ruS6ebYKwjwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYzcwMzJhYjktZjgxMC0z
YmM0LThlNjEtOWQyZmYzZDYyYTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHg4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJmeTDFAwwP6eYvx2Fvt4/fVoA/sp5Ij0MIj2Vunm+TdTMXA1YpY9z8r
+qCBkAW6io5xOfplae/Lx9zCJ/scmavbDUovgi20nRNYycehh6cSB46Vf1RtGcdh
qsmnebaGHyH/I/gDpo9vnX5ajuz8Ubs1J4BIiHmuZw/QFpj/+itXgwkdrT8+kKNY
q07U3qYXrjyzjevRWNi+4pc+uZ+2OSl2zV66cCitnc1bl1vlWCIeM0y4XFEqQ2OK
AManrJLz40UOzagtcVkAOAaWqhPI9nB0dvh4jrQVyR+VSJfVNdaCzCRa/9p6Fa0u
lGDFbWp9UFf+tqFOz2ndR0vDmraoe+Q=
-----END CERTIFICATE-----
Generated at Sun Oct 11 10:16:20 2026 by rpki-client