Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09ca74f3-89b9-3432-b887-9997f3730a52.roa
File:                     09ca74f3-89b9-3432-b887-9997f3730a52.roa (raw, json)
Hash identifier:          Hpsu6Bqwk6h2+O6KVU7ecCiUCQsWADZ8IZ/RzYQ62S8=
Subject key identifier:   A5:18:8B:9E:61:C1:BC:70:DA:E6:AE:ED:5A:87:4F:6F:F9:7F:CB:F7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584DFD3B250B725693B35ED1F800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09ca74f3-89b9-3432-b887-9997f3730a52.roa
Signing time:             Fri 29 May 2026 01:00:10 +0000
ROA not before:           Fri 29 May 2026 01:00:10 +0000
ROA not after:            Thu 27 Aug 2026 01:00:10 +0000
asID:                     398781
IP address blocks:        172.120.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fd:3b:25:0b:72:56:93:b3:5e:d1:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 29 01:00:10 2026 GMT
            Not After : Aug 27 01:00:10 2026 GMT
        Subject: CN=7c8f4238-3987-463a-af85-f8a5a432a99d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c5:7f:39:0a:68:56:ed:a6:11:55:a6:3c:11:
                    51:65:32:b6:96:10:69:7e:83:41:2d:cf:8f:26:fa:
                    2c:70:fe:3d:13:c4:38:3f:21:4f:e9:af:4d:93:59:
                    6f:a5:c1:d4:50:5f:c6:b4:63:2e:f3:e1:bb:95:08:
                    87:ec:66:e8:1a:fc:b6:e0:3b:e9:ab:37:37:49:40:
                    80:04:5b:52:29:72:87:72:f6:31:96:a4:97:42:81:
                    8b:7c:55:e8:ac:0c:94:f6:2c:a8:09:fd:8f:9e:3c:
                    1d:55:1d:93:80:2c:c3:22:a7:95:35:ac:5c:97:a6:
                    e2:7c:6c:df:9d:24:bf:49:eb:dd:62:99:73:3e:f9:
                    85:bd:21:14:53:9f:35:12:f6:e8:27:8b:7e:9e:2d:
                    aa:ff:31:e5:fc:a1:b6:4f:e3:a7:dd:a7:c5:f2:a3:
                    53:c1:f0:22:18:04:bb:69:4f:64:22:c1:c2:04:0f:
                    35:d1:87:83:9c:0d:a3:74:74:7e:b7:df:da:80:da:
                    52:dc:ec:0a:9e:1c:77:e4:1a:ec:27:70:1b:22:cc:
                    d6:67:b3:d5:44:9c:25:0a:da:e1:a3:ce:14:57:5c:
                    2d:d3:e7:d6:48:7e:19:d1:7a:98:d7:48:7e:8a:4d:
                    29:ba:cc:5f:35:1b:39:13:29:73:55:c7:04:85:ce:
                    84:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:18:8B:9E:61:C1:BC:70:DA:E6:AE:ED:5A:87:4F:6F:F9:7F:CB:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09ca74f3-89b9-3432-b887-9997f3730a52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:26:06:00:5d:4c:4d:30:6b:15:b8:2c:b8:9a:d7:5e:e8:5e:
         cf:65:53:2f:40:ad:04:14:61:f4:01:d5:cb:c0:39:dd:37:e0:
         e8:83:c6:36:53:95:45:2f:d1:2a:95:08:3f:bd:25:0a:55:21:
         4e:90:35:20:d9:90:1d:1f:08:22:f5:55:9f:22:2a:0e:a3:eb:
         a9:a2:88:74:17:19:3e:36:cb:bd:9e:c1:0d:80:f9:bc:fd:90:
         8e:48:3d:89:19:d4:d9:24:92:91:b2:b4:65:60:34:4a:f6:c7:
         8d:fc:a9:99:b8:29:71:54:ad:37:48:86:36:03:a4:5d:cb:ae:
         d2:e4:94:a0:ec:ca:29:5e:33:09:b7:54:b0:26:9c:40:34:c1:
         0d:52:9f:1b:f5:65:4a:ac:c3:1a:f2:6a:22:06:df:0d:98:92:
         6c:34:db:54:ea:52:67:91:d3:fa:7a:9f:54:f7:45:83:85:04:
         76:0a:f9:e3:03:34:6b:1a:78:c4:40:ee:87:d2:67:88:5c:46:
         37:a8:34:9c:88:bd:85:b1:95:8c:56:5d:c7:50:0b:8f:c1:90:
         5d:06:72:09:c0:03:50:66:71:cc:0f:3e:31:44:da:e8:59:a0:
         32:52:95:25:1a:03:93:7b:94:49:18:52:83:e6:81:04:39:4f:
         87:8c:ac:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE39OyULclaTs17R+AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDUyOTAxMDAxMFoXDTI2MDgyNzAxMDAxMFowLzEtMCsGA1UEAxMk
N2M4ZjQyMzgtMzk4Ny00NjNhLWFmODUtZjhhNWE0MzJhOTlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcV/OQpoVu2mEVWmPBFRZTK2lhBpfoNBLc+P
JvoscP49E8Q4PyFP6a9Nk1lvpcHUUF/GtGMu8+G7lQiH7GboGvy24Dvpqzc3SUCA
BFtSKXKHcvYxlqSXQoGLfFXorAyU9iyoCf2PnjwdVR2TgCzDIqeVNaxcl6bifGzf
nSS/SevdYplzPvmFvSEUU581EvboJ4t+ni2q/zHl/KG2T+On3afF8qNTwfAiGAS7
aU9kIsHCBA810YeDnA2jdHR+t9/agNpS3OwKnhx35BrsJ3AbIszWZ7PVRJwlCtrh
o84UV1wt0+fWSH4Z0XqY10h+ik0pusxfNRs5EylzVccEhc6EvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKUYi55hwbxw2uau7VqHT2/5f8v3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMDljYTc0ZjMtODliOS0z
NDMyLWI4ODctOTk5N2YzNzMwYTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHiFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGYmBgBdTE0waxW4LLia117oXs9lUy9ArQQUYfQB1cvAOd034OiDxjZT
lUUv0SqVCD+9JQpVIU6QNSDZkB0fCCL1VZ8iKg6j66miiHQXGT42y72ewQ2A+bz9
kI5IPYkZ1NkkkpGytGVgNEr2x438qZm4KXFUrTdIhjYDpF3LrtLklKDsyileMwm3
VLAmnEA0wQ1Snxv1ZUqswxryaiIG3w2Ykmw021TqUmeR0/p6n1T3RYOFBHYK+eMD
NGsaeMRA7ofSZ4hcRjeoNJyIvYWxlYxWXcdQC4/BkF0GcgnAA1BmccwPPjFE2uhZ
oDJSlSUaA5N7lEkYUoPmgQQ5T4eMrLU=
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:39:57 2026 by rpki-client