Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/de15bd94-b128-3b53-8e3a-9f3ff11a8b76.roa
File:                     de15bd94-b128-3b53-8e3a-9f3ff11a8b76.roa (raw, json)
Hash identifier:          /Nmr8Fxb7Y5zRxV20Ykd7buMUEJd3k0EFT9Z+xz2ZbU=
Subject key identifier:   A5:3B:10:49:1C:D5:CD:96:87:43:F1:3E:58:5B:D3:36:52:3E:4D:C3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D91C01C62129616A93FD2E580
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/de15bd94-b128-3b53-8e3a-9f3ff11a8b76.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     7018
IP address blocks:        172.121.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:1c:62:12:96:16:a9:3f:d2:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=5f791bfe-3184-4be0-96d1-3b6b47443f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5f:7f:76:a3:f2:36:f3:83:44:ff:b8:55:3c:
                    a8:9f:cd:e4:da:59:3f:28:7c:cc:6d:34:84:3f:b0:
                    9c:db:88:a3:d7:89:e1:e7:e5:78:b9:5e:48:58:26:
                    e2:eb:89:8b:ed:19:8b:f9:e5:09:9b:57:1c:41:19:
                    55:d0:ec:db:cc:e8:08:45:d4:90:61:72:96:17:f7:
                    d5:d7:27:92:d9:91:67:37:a5:74:34:d9:a4:45:86:
                    54:e8:11:2f:72:be:6d:79:e3:cf:6c:31:e6:65:4f:
                    e9:f8:ce:b4:34:98:76:9f:53:c5:85:26:40:ae:fa:
                    c2:51:50:c4:cc:37:a3:47:67:d1:6f:6f:b2:97:b9:
                    a5:9c:ec:a6:ca:3c:9e:e7:0f:bc:4b:c6:3b:c9:0e:
                    0e:e7:aa:49:89:fe:fb:13:03:2a:89:e2:97:5b:fb:
                    5b:b5:2e:c1:3e:85:72:5f:e2:da:d9:87:d0:b6:02:
                    a9:95:70:cd:7e:dc:a0:3d:e2:c0:d0:7d:b9:9f:37:
                    02:82:55:d2:5b:dd:e8:60:d0:d5:2d:53:d6:de:44:
                    b0:cf:a0:47:90:56:e8:f2:74:f4:75:6f:9f:56:de:
                    0f:cf:51:c2:b1:43:a6:72:56:0f:b4:9b:f5:fc:e6:
                    fa:c1:3b:19:01:0f:4a:44:29:29:6f:d5:d5:3c:ae:
                    04:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3B:10:49:1C:D5:CD:96:87:43:F1:3E:58:5B:D3:36:52:3E:4D:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/de15bd94-b128-3b53-8e3a-9f3ff11a8b76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:05:46:42:48:b9:e7:70:0f:73:4d:d0:0d:03:41:bf:83:12:
         55:0d:1f:49:c1:48:59:57:b2:3a:89:d1:54:cb:2e:7a:e9:f8:
         4a:0d:de:86:43:8c:f4:59:86:76:72:10:14:60:eb:71:70:0e:
         3f:ba:d6:26:e5:52:6d:e7:08:62:63:c2:ed:05:64:38:9f:28:
         21:ef:67:98:b0:d1:ff:3f:8a:53:52:a2:99:38:10:28:51:01:
         ab:a2:9f:50:01:98:5a:6f:84:6e:39:5f:75:ac:52:a7:11:46:
         48:34:a2:e2:e0:b1:15:c6:8c:93:ea:56:f5:5c:cd:01:d6:79:
         49:7c:4f:ec:d6:f6:59:ff:74:0a:31:79:08:2a:c7:97:07:9f:
         ec:0e:3f:18:84:68:a2:fe:2e:fa:09:4a:1e:14:35:ea:47:c2:
         fc:76:4f:fe:3b:96:f4:22:87:a4:2f:4b:90:94:37:46:08:3e:
         7a:6b:40:cc:61:d8:85:a4:db:04:94:b8:2a:cf:9f:a6:d2:27:
         51:c9:9e:21:61:67:c1:ea:a9:c5:69:33:ff:8d:da:e3:39:a9:
         98:e0:cb:dc:40:d8:21:e3:6f:22:e5:fb:8e:60:47:ed:03:87:
         4d:cd:37:c1:e8:10:57:12:d5:d1:55:3e:8f:e2:42:a8:16:99:
         76:78:7e:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwBxiEpYWqT/S5YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk
NWY3OTFiZmUtMzE4NC00YmUwLTk2ZDEtM2I2YjQ3NDQzZjc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiV9/dqPyNvODRP+4VTyon83k2lk/KHzMbTSE
P7Cc24ij14nh5+V4uV5IWCbi64mL7RmL+eUJm1ccQRlV0OzbzOgIRdSQYXKWF/fV
1yeS2ZFnN6V0NNmkRYZU6BEvcr5teePPbDHmZU/p+M60NJh2n1PFhSZArvrCUVDE
zDejR2fRb2+yl7mlnOymyjye5w+8S8Y7yQ4O56pJif77EwMqieKXW/tbtS7BPoVy
X+La2YfQtgKplXDNftygPeLA0H25nzcCglXSW93oYNDVLVPW3kSwz6BHkFbo8nT0
dW+fVt4Pz1HCsUOmclYPtJv1/Ob6wTsZAQ9KRCkpb9XVPK4EGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKU7EEkc1c2Wh0PxPlhb0zZSPk3DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZGUxNWJkOTQtYjEyOC0z
YjUzLThlM2EtOWYzZmYxMWE4Yjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHk1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA8FRkJIuedwD3NN0A0DQb+DElUNH0nBSFlXsjqJ0VTLLnrp+EoN3oZD
jPRZhnZyEBRg63FwDj+61iblUm3nCGJjwu0FZDifKCHvZ5iw0f8/ilNSopk4EChR
Aauin1ABmFpvhG45X3WsUqcRRkg0ouLgsRXGjJPqVvVczQHWeUl8T+zW9ln/dAox
eQgqx5cHn+wOPxiEaKL+LvoJSh4UNepHwvx2T/47lvQih6QvS5CUN0YIPnprQMxh
2IWk2wSUuCrPn6bSJ1HJniFhZ8HqqcVpM/+N2uM5qZjgy9xA2CHjbyLl+45gR+0D
h03NN8HoEFcS1dFVPo/iQqgWmXZ4ftk=
-----END CERTIFICATE-----
Generated at Tue May 12 21:34:26 2026 by rpki-client