Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2a18d7aa-105f-30ee-b52c-7dadc640c2a8.roa
File:                     2a18d7aa-105f-30ee-b52c-7dadc640c2a8.roa (raw, json)
Hash identifier:          m3jJAIXYtu4maPtW1hXlGQ8LRv3jKFo7xY1Mk4o7mGI=
Subject key identifier:   64:B2:4D:58:5C:7B:EC:0B:81:C7:5E:3B:B9:23:F3:3D:22:DE:D4:C7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D59EA60132F4352CAE8D22580
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2a18d7aa-105f-30ee-b52c-7dadc640c2a8.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     397423
IP address blocks:        172.121.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:60:13:2f:43:52:ca:e8:d2:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=dfda9411-52d4-4cee-acf7-30190957f89a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0a:14:c0:20:f0:78:bd:ad:cd:42:f6:0f:e8:
                    60:a8:3d:31:3d:1c:f5:39:48:a3:58:03:8c:fe:5f:
                    7a:23:a7:74:dd:e5:23:68:ed:ae:96:36:4c:88:c3:
                    ba:57:29:3e:e9:93:fc:88:4b:80:18:e9:d3:e7:36:
                    02:7c:b0:a4:9c:22:e7:ad:bc:30:3e:f5:d4:91:eb:
                    34:20:de:55:9b:1c:39:1a:b0:13:55:74:87:1a:34:
                    33:71:a5:d3:f6:5a:86:6f:12:4e:c0:39:69:10:7a:
                    95:6b:fd:31:71:77:57:2e:1b:62:2b:c0:29:83:14:
                    5a:c9:ae:d6:6f:dd:da:7a:54:01:9d:bd:99:0c:63:
                    1f:b5:49:2c:f0:ec:f2:93:10:4b:77:60:5b:b9:59:
                    c3:f1:47:d5:b9:a9:3c:50:90:86:b7:55:c7:69:e5:
                    f3:4c:24:11:8d:9e:f5:4b:85:e1:74:f7:ee:a7:7d:
                    4e:0d:3e:06:22:b2:e9:98:40:fd:17:c1:6b:8b:6f:
                    3a:46:b7:99:25:a1:ae:04:d2:44:ea:be:fe:8e:e7:
                    8b:b6:09:d0:4a:80:dc:5b:0f:2d:31:b3:79:f2:d6:
                    0f:50:c2:ab:28:fe:d0:44:b0:10:b6:74:b6:e7:69:
                    14:64:e5:cd:d6:e7:a5:30:54:2b:50:33:49:a2:27:
                    98:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B2:4D:58:5C:7B:EC:0B:81:C7:5E:3B:B9:23:F3:3D:22:DE:D4:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2a18d7aa-105f-30ee-b52c-7dadc640c2a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:fd:14:57:8a:57:85:66:ea:10:ee:b7:7a:52:ae:98:ba:d2:
         e0:82:1d:8e:4e:ab:f4:c7:a6:98:d0:1c:bd:af:d3:49:ff:68:
         98:2b:f2:19:08:6b:de:52:42:e1:18:59:9d:00:3c:b4:24:8a:
         7d:77:d8:cc:4b:13:65:65:c4:aa:83:ea:94:d1:36:d7:ab:3e:
         c2:a9:79:70:4c:97:38:71:4f:1c:35:a5:c4:1c:91:7f:a4:09:
         44:14:fd:d3:1a:de:b1:d4:1c:bf:c7:1d:9f:63:a3:0b:b0:15:
         f2:b4:2d:88:cf:d5:ad:5c:20:8a:15:47:1b:a1:99:9c:6c:94:
         1c:32:1d:35:68:1c:6f:d0:4b:60:7d:f3:26:29:ee:1a:f6:19:
         29:df:f3:0c:dd:09:f2:22:6f:e6:69:6f:03:6a:d6:01:54:43:
         e9:43:4f:c8:97:34:45:03:a3:dd:3b:cb:3a:e1:cc:a9:45:a1:
         20:47:cc:e5:a2:53:de:8b:79:c7:86:5f:8e:77:41:44:0a:5a:
         3e:e2:ce:17:ad:19:50:40:4b:60:15:cb:7a:c2:2c:54:43:0c:
         10:17:f4:42:88:95:0b:ff:ea:a7:cb:b0:53:0e:6f:64:70:50:
         11:65:1e:ad:7c:ad:be:e4:61:ae:11:09:19:dd:c8:97:3a:e7:
         88:00:19:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:40:05 2026 by rpki-client