Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f55191fb-a022-36dc-9c9c-e5cfb64e29e8.roa
File:                     f55191fb-a022-36dc-9c9c-e5cfb64e29e8.roa (raw, json)
Hash identifier:          Pse9PtaQXjchaeT5kgKDMFEZHW+FZeEX6zHsGxu/pxI=
Subject key identifier:   BC:D2:36:EA:08:A2:1C:3C:D1:CC:8E:6F:58:18:43:D0:29:A1:83:B7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F497459E36FEFAE16E94E9300
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f55191fb-a022-36dc-9c9c-e5cfb64e29e8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     18779
IP address blocks:        172.121.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:59:e3:6f:ef:ae:16:e9:4e:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=78dd9e21-3612-4dc1-af33-9b063ebbbc63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ea:5a:91:e4:d6:49:26:bc:c1:c9:4b:14:7c:
                    47:d2:ce:e3:4a:88:90:4f:56:c1:7d:b4:57:1b:d7:
                    b5:3f:5a:7d:79:e2:c7:db:f6:b9:b6:3b:9c:a7:a4:
                    ac:48:84:3a:6f:11:24:48:25:70:53:f3:bf:23:fd:
                    0a:c2:86:a1:cd:50:8f:e1:f6:31:d0:b6:f4:f8:41:
                    73:b0:86:cd:3a:ee:98:5f:32:35:a0:83:d9:55:db:
                    b3:cd:f9:43:63:86:ea:84:ac:fb:ce:de:cd:e0:0a:
                    b1:51:39:0d:3e:f1:a9:94:fa:b4:60:eb:08:7c:73:
                    a8:09:2a:ee:1d:34:ff:94:25:ea:94:83:84:57:fe:
                    23:53:f5:04:88:f6:4c:96:de:b3:44:c0:29:36:a5:
                    ca:cd:bd:f2:aa:db:7d:fa:d7:a0:8f:5a:36:81:07:
                    f0:da:d3:e2:92:83:52:7f:b5:87:6f:84:b9:85:69:
                    5b:25:03:73:93:71:35:c2:01:df:43:8f:e4:cd:e6:
                    07:da:50:a4:82:d1:d0:2e:c9:2a:85:0d:54:cd:29:
                    16:63:68:56:e2:3d:77:fa:06:38:c5:6c:74:04:13:
                    d2:da:01:7b:8e:55:98:b6:de:6e:0d:8a:95:d2:8b:
                    7c:6e:88:9e:34:12:2b:66:13:6c:c5:0d:2c:aa:3f:
                    61:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D2:36:EA:08:A2:1C:3C:D1:CC:8E:6F:58:18:43:D0:29:A1:83:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f55191fb-a022-36dc-9c9c-e5cfb64e29e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:e9:fe:be:14:ab:d3:f5:1f:24:67:20:cd:28:e1:60:ea:7b:
         db:27:8c:63:39:58:13:cb:9a:79:64:62:21:a0:5c:a8:74:57:
         49:5d:e7:88:63:a4:63:e4:12:e6:2c:a8:43:8a:69:8d:a9:f2:
         b8:e2:09:e9:f3:01:4f:fe:e6:36:ac:f6:1c:9f:05:87:75:5f:
         e0:c0:5a:a2:72:1b:89:2e:a9:0b:94:9b:3d:3d:9e:59:56:26:
         89:af:41:48:76:c9:b2:8b:db:d1:7a:9b:1f:08:4b:cb:6b:89:
         0b:67:8f:af:67:d3:a6:65:d0:34:de:cb:4b:ab:d2:3d:dc:c8:
         35:5d:55:58:08:87:37:77:bb:70:10:32:32:37:e7:44:9e:30:
         4d:0b:f7:29:f1:26:2e:5b:be:10:a0:67:e4:86:73:00:14:36:
         24:bd:4d:eb:5c:9e:9c:e6:cd:23:9e:d3:b1:42:e0:31:10:cf:
         4c:73:cf:36:a6:f1:65:08:91:49:a4:14:ab:18:e7:d3:43:bf:
         0a:d6:44:1d:92:86:26:8c:4a:1b:66:9b:e8:73:45:04:09:f7:
         ae:c2:3b:15:b4:7f:cc:4a:52:b0:e2:46:af:73:50:95:a6:f3:
         7c:a8:e1:97:ca:6f:4b:07:af:79:8f:93:51:b8:7f:d6:fd:dd:
         28:33:d8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:22:51 2026 by rpki-client