Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df20f6f4-31d6-3c03-a6c6-cfde5a223ac0.roa
File:                     df20f6f4-31d6-3c03-a6c6-cfde5a223ac0.roa (raw, json)
Hash identifier:          b2+yf4zw18EkPyzyoOutKsQxuI/rTd/dXUQ2ciV8Y1M=
Subject key identifier:   5B:35:FB:18:FB:81:A3:EC:F3:A9:B7:92:BB:BF:28:22:B7:D2:04:5D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584DC0C947B171E8727F59D09B40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df20f6f4-31d6-3c03-a6c6-cfde5a223ac0.roa
Signing time:             Thu 07 May 2026 09:22:20 +0000
ROA not before:           Thu 07 May 2026 09:22:20 +0000
ROA not after:            Wed 05 Aug 2026 09:22:20 +0000
asID:                     834
IP address blocks:        172.120.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c0:c9:47:b1:71:e8:72:7f:59:d0:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May  7 09:22:20 2026 GMT
            Not After : Aug  5 09:22:20 2026 GMT
        Subject: CN=5f8ae081-cafe-41f7-b294-4b3ab12a1cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5d:d5:65:d0:ca:23:54:68:5d:ae:d9:e6:39:
                    fe:6d:3c:86:97:2f:b7:71:65:e5:cb:2b:d1:4a:a1:
                    95:ef:49:65:84:83:57:dd:f7:d7:ed:d9:1a:e2:08:
                    ab:3a:d9:93:5b:97:a1:78:0f:d1:5d:94:42:a4:39:
                    6f:a2:94:53:46:2b:48:eb:ca:a4:5c:50:32:91:43:
                    13:a4:b2:34:1c:6f:5b:45:51:f3:c1:dc:fc:20:27:
                    84:79:72:c1:9d:cd:fb:61:3e:fc:11:ac:09:53:75:
                    fb:7a:58:ac:e4:09:4c:ee:78:80:de:cf:0b:aa:4c:
                    2a:81:2d:35:da:5b:6b:cb:29:5e:e9:8b:da:97:0c:
                    0e:8d:9a:cf:f5:b9:c7:25:db:65:1b:95:bf:39:ea:
                    86:42:ab:7c:34:9b:87:2c:2c:67:34:e0:4d:64:91:
                    9d:2c:ff:f2:c4:5e:a1:7a:6d:d1:a8:d6:54:0b:a6:
                    88:59:f1:23:a2:86:51:18:c6:d3:b9:5a:fc:b1:50:
                    56:44:13:8e:8a:b9:64:cc:1b:05:75:8a:3f:b1:ae:
                    d2:93:36:3a:38:72:5f:bf:d7:2b:cb:6c:80:58:2c:
                    0e:a0:45:5e:80:36:aa:16:95:7a:cd:bc:51:7a:df:
                    b5:64:44:70:28:8e:f1:d2:54:01:f1:c4:05:73:1f:
                    fe:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:35:FB:18:FB:81:A3:EC:F3:A9:B7:92:BB:BF:28:22:B7:D2:04:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df20f6f4-31d6-3c03-a6c6-cfde5a223ac0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:3a:6c:ff:8a:96:8e:16:28:95:86:47:3a:8d:6a:72:2f:34:
         a9:27:86:c2:54:af:c0:af:c5:e7:a2:fc:bc:87:58:c6:68:e6:
         9b:80:c8:84:6b:97:6c:e1:ae:ed:f9:0d:d5:1a:ad:4c:09:8e:
         19:8f:ab:3f:f1:aa:2c:1c:29:17:4a:61:65:cf:46:91:81:5c:
         73:8e:8f:12:52:a8:be:13:e1:61:d7:a5:2d:7e:86:4f:d8:d4:
         cf:80:f7:5d:a3:8b:dd:25:a4:6c:db:e2:9c:a6:03:29:d2:00:
         d8:02:8e:03:01:19:13:43:ad:ac:af:79:35:0c:7e:50:1f:7f:
         e6:bb:86:ef:76:22:f6:9c:75:3c:b1:3d:fe:7d:29:8a:76:ac:
         59:fc:ba:92:da:fa:de:63:f1:e7:dc:0f:ef:04:09:e0:a7:ff:
         81:ae:ae:7c:70:07:46:fc:5d:6a:78:6d:47:a1:59:4f:80:63:
         96:23:de:73:8b:91:ff:a3:3a:02:84:d9:d5:59:12:84:26:ff:
         75:a6:f2:b6:1c:3b:7d:26:72:47:25:57:a6:c2:79:8b:95:d2:
         54:e6:f4:3d:fb:f1:ea:19:d0:19:eb:c4:46:2a:2b:bf:48:d2:
         2b:47:51:36:88:a3:06:ad:7e:9f:22:08:30:d5:e1:e5:7e:58:
         21:0a:ea:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:48:15 2026 by rpki-client