Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fdb74f09-71fc-3da3-9a85-9c208a2ded53.roa
File:                     fdb74f09-71fc-3da3-9a85-9c208a2ded53.roa (raw, json)
Hash identifier:          AP9qDqK7sKxBt+hkHXypFl5Q+noQCq4kYe9LEXlStdE=
Subject key identifier:   79:9C:A1:58:89:DA:C4:32:0E:F8:36:0E:ED:95:39:AC:F1:E5:65:B7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D1F4A64B32FB07EB60B8A3B80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fdb74f09-71fc-3da3-9a85-9c208a2ded53.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     3257
IP address blocks:        172.121.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:64:b3:2f:b0:7e:b6:0b:8a:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=b6957b9f-b255-4242-8512-cf0104b5e0a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cc:b5:48:20:a2:57:6c:df:4e:ce:d3:6b:b4:
                    99:17:a9:a9:9f:46:8d:37:09:d3:48:23:23:69:33:
                    3f:ab:74:04:ed:20:72:0b:f4:98:96:68:04:4b:5a:
                    68:e8:bd:2e:74:5c:9a:6d:0c:d4:13:a2:22:a2:4a:
                    fc:c0:07:2a:46:d0:f8:64:ea:a5:20:70:73:ee:fd:
                    2e:50:cb:e3:ad:63:70:21:45:72:58:4c:45:49:cf:
                    53:c9:bf:76:71:c6:90:27:94:96:7e:ce:c9:1a:88:
                    98:0d:3b:e4:cd:c5:4f:37:58:94:5e:e3:7c:7f:5b:
                    98:04:a6:41:e0:94:b7:e4:ec:02:cc:c9:62:94:2b:
                    13:a8:3f:6d:99:aa:d5:09:fb:0a:43:c5:a7:09:a8:
                    f8:e8:b4:71:9a:01:22:b3:b5:42:d1:d0:da:68:c5:
                    8a:a5:f7:2c:91:b5:86:d7:92:94:48:96:f2:a1:56:
                    41:77:38:bc:d1:d9:56:65:5d:e6:45:d3:04:9d:ba:
                    61:5b:5f:58:32:2e:9f:7d:32:aa:d3:c3:d2:c7:80:
                    5c:f2:17:cf:30:0a:23:56:58:43:34:ea:5a:c7:0a:
                    80:2b:58:a1:00:bc:b4:43:b6:93:34:6f:ca:09:4c:
                    06:2b:56:2e:f2:60:a3:b6:6f:bb:b6:b4:a9:3e:42:
                    84:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9C:A1:58:89:DA:C4:32:0E:F8:36:0E:ED:95:39:AC:F1:E5:65:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fdb74f09-71fc-3da3-9a85-9c208a2ded53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:3b:f9:9a:16:1d:fb:fe:0b:eb:a8:43:62:6d:cc:62:55:cd:
         06:b6:86:5c:7d:e1:37:e9:3d:29:31:d1:42:fa:f1:90:78:37:
         da:25:f5:a9:2f:c4:3a:62:5f:90:c1:38:9a:c6:05:57:ee:3c:
         52:1a:59:3a:4f:4d:c2:26:6b:0f:06:69:0b:04:36:4c:52:4b:
         3a:52:69:5b:08:58:c0:fa:25:19:f8:7a:a2:af:70:04:67:3a:
         d4:8e:f1:7a:53:f8:a2:2d:22:8e:77:bb:b8:90:4f:d6:bc:38:
         a6:32:f8:66:5a:8c:4e:c9:2b:cd:9b:8c:92:9b:ac:39:16:30:
         ed:17:3b:64:d4:5b:34:99:28:64:5b:1e:9a:2c:96:3c:d5:85:
         ac:65:c6:c8:88:8e:1f:0a:00:4a:5b:e6:63:74:0d:72:23:f8:
         ea:de:43:a9:75:a7:f6:99:79:71:ca:7e:bf:a8:77:c0:c0:04:
         9a:8d:c9:4e:6d:b8:c2:b1:b6:0e:7c:54:51:2e:2f:1d:86:44:
         aa:18:a8:f4:af:7f:7c:74:d6:cd:1d:0d:eb:a8:46:34:01:23:
         d5:de:16:bf:6e:ef:dc:5c:61:a2:e7:99:8a:c1:b7:33:df:23:
         d5:37:c5:c2:16:d9:94:c3:3d:55:2c:fd:a3:41:04:98:ae:02:
         43:91:86:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSmSzL7B+tguKO4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
YjY5NTdiOWYtYjI1NS00MjQyLTg1MTItY2YwMTA0YjVlMGEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksy1SCCiV2zfTs7Ta7SZF6mpn0aNNwnTSCMj
aTM/q3QE7SByC/SYlmgES1po6L0udFyabQzUE6Iiokr8wAcqRtD4ZOqlIHBz7v0u
UMvjrWNwIUVyWExFSc9Tyb92ccaQJ5SWfs7JGoiYDTvkzcVPN1iUXuN8f1uYBKZB
4JS35OwCzMlilCsTqD9tmarVCfsKQ8WnCaj46LRxmgEis7VC0dDaaMWKpfcskbWG
15KUSJbyoVZBdzi80dlWZV3mRdMEnbphW19YMi6ffTKq08PSx4Bc8hfPMAojVlhD
NOpaxwqAK1ihALy0Q7aTNG/KCUwGK1Yu8mCjtm+7trSpPkKEmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHmcoViJ2sQyDvg2Du2VOazx5WW3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZmRiNzRmMDktNzFmYy0z
ZGEzLTlhODUtOWMyMDhhMmRlZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHmlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAQ7+ZoWHfv+C+uoQ2JtzGJVzQa2hlx94TfpPSkx0UL68ZB4N9ol9akv
xDpiX5DBOJrGBVfuPFIaWTpPTcImaw8GaQsENkxSSzpSaVsIWMD6JRn4eqKvcARn
OtSO8XpT+KItIo53u7iQT9a8OKYy+GZajE7JK82bjJKbrDkWMO0XO2TUWzSZKGRb
HposljzVhaxlxsiIjh8KAEpb5mN0DXIj+OreQ6l1p/aZeXHKfr+od8DABJqNyU5t
uMKxtg58VFEuLx2GRKoYqPSvf3x01s0dDeuoRjQBI9XeFr9u79xcYaLnmYrBtzPf
I9U3xcIW2ZTDPVUs/aNBBJiuAkORhhU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:41:08 2026 by rpki-client