Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fcc4d663-3a77-3fba-b117-8422c986da97.roa
File:                     fcc4d663-3a77-3fba-b117-8422c986da97.roa (raw, json)
Hash identifier:          aIwPZXQXNsOf+tv4OGhtLaxcjdTN7np/kSD9qZrHG0k=
Subject key identifier:   32:9E:F3:41:7D:BA:81:56:4F:80:B8:08:74:39:4C:57:E9:62:BE:B3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584DA28011EA3CBCD2A49EF7F480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fcc4d663-3a77-3fba-b117-8422c986da97.roa
Signing time:             Sun 26 Apr 2026 13:00:30 +0000
ROA not before:           Sun 26 Apr 2026 13:00:30 +0000
ROA not after:            Sat 25 Jul 2026 13:00:30 +0000
asID:                     834
IP address blocks:        172.120.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a2:80:11:ea:3c:bc:d2:a4:9e:f7:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 26 13:00:30 2026 GMT
            Not After : Jul 25 13:00:30 2026 GMT
        Subject: CN=e56fea4e-8245-4e51-a42c-d2eee088db4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:03:03:e7:fe:ae:d1:fb:74:a0:75:95:9a:e1:
                    ea:23:21:b9:6c:55:1f:14:c1:0b:37:93:f6:ad:95:
                    4c:ee:10:66:33:cb:aa:a8:64:44:00:c4:2a:97:b8:
                    9a:38:3f:01:59:a8:86:ce:67:03:64:3d:84:97:30:
                    66:ae:d4:6d:24:08:e5:47:33:db:c7:6c:7f:f3:40:
                    e3:13:53:c1:38:d3:1d:45:39:c2:12:10:a9:dd:3e:
                    99:5a:14:e7:1d:65:50:08:e2:be:dd:f2:ab:c0:14:
                    8a:72:e7:c9:b3:b9:d0:7c:b9:16:a9:ec:72:9d:d1:
                    29:c5:b6:8d:99:da:b5:b4:b4:5b:1f:fb:8a:3f:62:
                    b0:24:3e:f3:46:2d:fd:09:d7:69:bd:2d:7b:cb:5c:
                    77:86:bb:2f:de:d1:cf:c2:8d:39:5a:51:2d:8d:3b:
                    26:7a:f4:8d:90:91:19:12:b8:29:a8:d4:e5:b3:b9:
                    f8:bf:47:ae:4b:9f:7d:09:dd:10:94:87:8f:0e:52:
                    cc:ef:70:88:7b:c3:ed:44:d8:a2:5a:57:36:ea:63:
                    f8:32:ed:55:10:cb:db:bd:ee:ea:dd:f2:fa:44:a7:
                    a3:42:05:77:ec:a2:ab:eb:90:b8:b1:ff:e2:b6:22:
                    44:1d:9a:32:62:01:01:f3:65:ca:66:78:cc:89:47:
                    6f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9E:F3:41:7D:BA:81:56:4F:80:B8:08:74:39:4C:57:E9:62:BE:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fcc4d663-3a77-3fba-b117-8422c986da97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:66:45:5d:af:10:a3:4b:4f:95:01:22:47:b4:9c:9f:9e:30:
         16:9e:8f:86:4f:14:67:23:b7:85:6c:bc:11:6f:a9:5c:d8:5a:
         d9:15:d9:f6:a4:89:84:c4:ff:61:02:94:40:a9:05:90:e5:8b:
         07:8f:db:6a:67:c9:e3:a5:84:09:2d:8c:cb:35:65:6e:e0:ce:
         37:db:d6:f4:84:7b:49:61:0c:f7:3b:75:8d:21:32:33:b5:99:
         34:03:c7:7a:bf:92:22:a7:b4:ff:bd:14:f0:1c:d6:32:ed:41:
         19:c4:86:cd:95:cb:72:f9:44:6e:cc:ab:e9:ae:c8:db:a3:f1:
         5e:7a:70:b1:55:31:d9:1d:da:7a:4a:48:2f:9f:9f:79:f3:c7:
         05:0b:72:e8:eb:0c:29:79:ac:9d:79:b7:07:32:32:ff:90:1c:
         f3:7f:92:a5:bb:67:5f:36:37:01:1e:fd:53:5a:7a:92:d8:87:
         dc:d8:af:0c:b2:43:2a:34:56:0f:36:46:76:41:ac:15:14:84:
         61:76:98:7d:7a:e3:5c:a1:7c:55:9c:88:2b:a4:9e:eb:61:60:
         6b:03:56:48:dd:c4:58:d9:43:2a:74:10:92:ba:4d:a7:ff:4f:
         61:ed:80:fb:6b:7e:9e:44:1e:22:d1:f4:4c:c5:a1:12:a7:d4:
         d7:6f:6d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:46:31 2026 by rpki-client