Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/17c5457f-031c-3532-8304-8ac6fdb3d5c3.roa
File:                     17c5457f-031c-3532-8304-8ac6fdb3d5c3.roa (raw, json)
Hash identifier:          d7j8aAubvbBhjtVsafFNlpOBJCrF/TZZG9ocl79A9w0=
Subject key identifier:   83:59:50:9D:DB:EB:EC:DE:3A:6F:4F:6C:50:73:57:28:87:6F:77:77
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584DFD3B1FC6237191EE8E508F20
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/17c5457f-031c-3532-8304-8ac6fdb3d5c3.roa
Signing time:             Fri 29 May 2026 01:00:10 +0000
ROA not before:           Fri 29 May 2026 01:00:10 +0000
ROA not after:            Thu 27 Aug 2026 01:00:10 +0000
asID:                     398781
IP address blocks:        172.120.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fd:3b:1f:c6:23:71:91:ee:8e:50:8f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 29 01:00:10 2026 GMT
            Not After : Aug 27 01:00:10 2026 GMT
        Subject: CN=f2c7ea04-0d66-473f-bacd-f0b5559b565f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f8:b9:7c:91:b2:78:32:94:57:fd:a8:89:5b:
                    e8:2b:10:58:02:1c:6f:25:ed:9f:af:01:65:09:8e:
                    29:79:17:27:bd:30:08:36:b6:69:0e:2b:77:d8:5d:
                    bb:fe:95:fb:6b:c3:dd:7c:cb:18:50:88:20:28:8d:
                    9f:99:31:10:ea:85:ae:46:00:41:7c:76:84:72:42:
                    02:48:4b:90:61:ba:f9:d6:d1:56:8d:50:e5:25:ca:
                    5e:aa:ba:8b:87:b3:2a:4c:16:2d:74:75:2d:b4:c2:
                    2b:a9:f0:69:20:69:ab:51:99:11:96:c3:66:ac:28:
                    01:fa:ee:1b:4f:65:48:49:0d:50:b7:b7:a7:70:3d:
                    33:0a:d1:f2:ae:bb:b2:4b:18:8b:5a:22:92:d9:07:
                    83:51:07:5f:8c:9a:f3:b6:3a:3a:06:cc:c1:ba:06:
                    10:35:24:1c:6f:74:d0:51:6b:90:61:c5:09:ac:27:
                    f6:ee:f8:0f:6c:f7:8e:04:4a:5b:dd:df:06:f8:83:
                    d5:2f:eb:33:59:43:f8:00:15:c6:82:9c:3f:e5:f0:
                    1c:fe:ff:60:85:a9:eb:5d:d8:81:f2:20:03:82:00:
                    f7:b6:05:97:19:4e:75:51:80:f8:8a:76:98:a0:94:
                    ab:74:cf:1b:71:6e:8a:16:26:69:75:4d:51:cf:81:
                    90:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:59:50:9D:DB:EB:EC:DE:3A:6F:4F:6C:50:73:57:28:87:6F:77:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/17c5457f-031c-3532-8304-8ac6fdb3d5c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:87:45:a9:3d:43:d7:11:59:ca:5b:ab:42:bc:b4:fe:37:d1:
         4c:8d:fa:0b:b1:7f:5d:16:d9:70:db:b1:60:21:9a:25:af:65:
         32:18:fd:16:29:0f:9d:14:46:be:6a:63:d8:b6:ca:81:b8:b3:
         d9:60:07:1a:b0:49:85:61:62:50:84:44:32:ff:6c:d7:cf:f5:
         d0:18:fd:43:3f:a7:42:41:96:89:c7:75:f5:21:23:b1:cb:3d:
         c7:f2:82:64:a5:d1:cd:55:7e:00:b2:25:26:19:4d:57:6b:d0:
         0b:47:91:13:3d:d7:a3:61:ea:3a:8c:76:c3:e5:87:5c:72:f3:
         13:e1:7f:b6:9c:ee:24:dd:9d:13:45:21:b1:98:af:06:a2:98:
         78:5f:74:7d:45:aa:73:0c:17:94:c8:b0:fc:30:02:26:6c:bc:
         8c:77:69:d1:ce:81:fa:1f:73:ec:11:dd:9d:ab:5a:78:fe:7b:
         d9:2a:ca:5d:d8:5b:0b:89:f7:cd:53:79:3d:5e:92:d4:f9:d5:
         18:11:91:87:33:f5:6e:f1:7e:1e:d4:90:e3:53:76:62:b6:5d:
         a6:38:db:bb:d6:4d:f3:04:98:d2:eb:32:bd:a4:ea:f8:2a:e5:
         b5:0a:75:d0:92:27:af:84:42:f9:b9:27:eb:d7:c3:0a:1f:13:
         3b:3d:d2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:56:34 2026 by rpki-client