Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42a72836-be1f-3a1b-9fbc-b3cc175122f5.roa
File:                     42a72836-be1f-3a1b-9fbc-b3cc175122f5.roa (raw, json)
Hash identifier:          9/wVGPa+6EGSR+n/wQRI5QO4H3GhJzkQhsIzWvMrjTw=
Subject key identifier:   8E:AB:1B:95:CB:1C:29:C9:EF:F7:F8:C6:DA:00:4A:A4:6E:4C:52:86
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584E296F174E09F194E432049A80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42a72836-be1f-3a1b-9fbc-b3cc175122f5.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     55201
IP address blocks:        172.121.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:17:4e:09:f1:94:e4:32:04:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=5727f205-ad0d-4507-8808-d707a683479e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:22:c8:e6:8e:2b:b6:01:71:ac:f1:ba:3e:9a:
                    75:39:2f:37:99:08:ed:61:61:4f:e3:97:f6:1e:2b:
                    1d:b2:fa:f9:26:ee:76:b5:21:6e:b2:77:1e:de:5f:
                    18:7a:27:f9:22:bf:a1:22:d8:29:fa:db:98:37:a7:
                    9b:4f:04:15:d3:e4:d6:91:c4:91:6f:2c:b6:81:09:
                    f2:c7:45:9c:5e:76:41:e1:e2:2f:9b:87:3f:e2:73:
                    f3:a9:67:c0:02:e6:40:0d:ae:c3:9a:ff:95:b9:44:
                    34:0d:99:01:6e:ac:2e:53:f8:de:59:93:a8:42:9c:
                    2d:b6:1e:3d:11:36:c9:3c:fe:83:59:e0:4c:2e:37:
                    24:b4:0a:16:ed:5a:77:24:f7:3d:51:b6:68:20:59:
                    18:98:85:5f:5b:aa:cc:36:1a:6c:a3:9f:11:7d:c4:
                    e4:67:dd:60:18:12:e8:9c:9d:22:68:79:8a:ca:33:
                    24:c6:8e:70:6a:f2:7f:02:1f:71:55:9c:fe:8e:10:
                    dd:88:0b:ea:13:7d:7d:ed:7c:a4:26:86:27:ff:d4:
                    37:94:7c:eb:f5:20:24:e7:12:9a:31:ca:95:d4:96:
                    23:bf:3f:58:29:e5:4d:32:53:22:78:b2:d7:f8:4a:
                    ea:eb:9c:15:bb:0e:00:26:fc:70:7b:64:17:cb:9f:
                    ba:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AB:1B:95:CB:1C:29:C9:EF:F7:F8:C6:DA:00:4A:A4:6E:4C:52:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42a72836-be1f-3a1b-9fbc-b3cc175122f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:b4:dd:e1:bd:47:65:c2:af:fc:31:0f:51:9a:3b:08:fc:ae:
         1a:5a:3f:c0:46:c0:8c:25:f8:91:f9:88:06:8e:db:dc:3e:c2:
         89:67:14:89:d1:e9:89:d8:43:d7:53:49:23:7e:bb:7b:46:da:
         d3:36:af:b3:37:3e:fa:e2:39:ea:81:36:e8:fa:81:7c:27:4a:
         52:db:1e:da:6f:39:26:a9:aa:71:6f:f0:27:c9:0a:5e:34:cd:
         f6:27:b7:bb:ea:08:42:51:52:7b:79:18:ee:22:df:16:66:73:
         2a:72:cb:a4:4e:20:4c:b4:8a:19:b9:c4:35:7a:2e:2f:dc:e4:
         93:2d:1d:84:7a:b3:fa:ae:64:9f:e5:23:21:ce:73:a2:44:73:
         63:02:72:a9:21:7a:d1:96:aa:1c:d9:be:8f:80:4e:17:da:86:
         9d:9a:ef:df:33:6e:1c:0b:74:da:bc:c8:25:e0:ad:3a:d8:3f:
         24:15:29:21:de:9b:2a:ee:4b:2c:96:88:45:67:33:bd:5b:b2:
         da:e8:f0:aa:e5:09:5d:5a:16:08:bb:69:d2:f3:6a:d0:6f:1d:
         2b:be:7b:00:1d:ac:ea:c7:0a:40:d3:74:4e:3b:03:d2:32:8a:
         a7:06:4b:4b:0c:5c:88:7a:ab:c5:c1:03:3d:0d:d3:a3:0d:9d:
         61:69:2d:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4pbxdOCfGU5DIEmoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDYxMzIxMDAxMloXDTI2MDkxMTIxMDAxMlowLzEtMCsGA1UEAxMk
NTcyN2YyMDUtYWQwZC00NTA3LTg4MDgtZDcwN2E2ODM0NzllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSLI5o4rtgFxrPG6Ppp1OS83mQjtYWFP45f2
Hisdsvr5Ju52tSFusnce3l8Yeif5Ir+hItgp+tuYN6ebTwQV0+TWkcSRbyy2gQny
x0WcXnZB4eIvm4c/4nPzqWfAAuZADa7Dmv+VuUQ0DZkBbqwuU/jeWZOoQpwtth49
ETbJPP6DWeBMLjcktAoW7Vp3JPc9UbZoIFkYmIVfW6rMNhpso58RfcTkZ91gGBLo
nJ0iaHmKyjMkxo5wavJ/Ah9xVZz+jhDdiAvqE3197XykJoYn/9Q3lHzr9SAk5xKa
McqV1JYjvz9YKeVNMlMieLLX+Erq65wVuw4AJvxwe2QXy5+6gQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI6rG5XLHCnJ7/f4xtoASqRuTFKGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDJhNzI4MzYtYmUxZi0z
YTFiLTlmYmMtYjNjYzE3NTEyMmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHlGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD203eG9R2XCr/wxD1GaOwj8rhpaP8BGwIwl+JH5iAaO29w+wolnFInR
6YnYQ9dTSSN+u3tG2tM2r7M3PvriOeqBNuj6gXwnSlLbHtpvOSapqnFv8CfJCl40
zfYnt7vqCEJRUnt5GO4i3xZmcypyy6ROIEy0ihm5xDV6Li/c5JMtHYR6s/quZJ/l
IyHOc6JEc2MCcqkhetGWqhzZvo+AThfahp2a798zbhwLdNq8yCXgrTrYPyQVKSHe
myruSyyWiEVnM71bstro8KrlCV1aFgi7adLzatBvHSu+ewAdrOrHCkDTdE47A9Iy
iqcGS0sMXIh6q8XBAz0N06MNnWFpLYA=
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:16:17 2026 by rpki-client