Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4a85c8d4-5cc3-38d9-9032-a087a34bda82.roa
File:                     4a85c8d4-5cc3-38d9-9032-a087a34bda82.roa (raw, json)
Hash identifier:          M8N0hXKnXkifrGRDSOv8LMRhq5bZ0su0a8RjJfZLR/U=
Subject key identifier:   D1:A7:42:9F:AB:02:A0:51:7A:82:56:1E:71:14:E5:0D:F4:FB:23:C1
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584DEB16001F7EA24217C397E200
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4a85c8d4-5cc3-38d9-9032-a087a34bda82.roa
Signing time:             Fri 22 May 2026 13:00:31 +0000
ROA not before:           Fri 22 May 2026 13:00:31 +0000
ROA not after:            Thu 20 Aug 2026 13:00:31 +0000
asID:                     18779
IP address blocks:        172.121.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:16:00:1f:7e:a2:42:17:c3:97:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 22 13:00:31 2026 GMT
            Not After : Aug 20 13:00:31 2026 GMT
        Subject: CN=add0d6f1-e582-48c0-a177-a267be7ebf58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7f:d7:97:4c:2f:23:07:5c:d2:0e:2e:4c:a0:
                    cf:68:5b:f3:f4:aa:53:c6:aa:fb:72:12:ad:5b:58:
                    20:38:6e:1b:87:a0:26:87:d4:7f:64:c1:0d:a1:0a:
                    45:b5:0e:68:a5:6c:8c:a4:c7:9c:ad:1a:83:1d:3a:
                    83:6e:bc:d9:ba:1e:30:de:ad:a9:88:97:83:7b:31:
                    12:b2:a5:bc:d0:97:dd:9d:b3:31:2e:e0:ee:52:86:
                    5b:30:cf:a6:b3:6d:1e:b9:ba:e9:ea:8f:66:79:63:
                    1e:e9:1b:94:61:cf:0f:05:fd:76:60:49:c9:37:03:
                    a4:1f:aa:89:4c:66:62:56:44:e7:dd:5c:ae:03:d3:
                    ef:d2:55:fe:32:5c:87:8d:fe:37:34:d7:2b:7c:9a:
                    0e:68:dc:72:51:1c:28:c9:25:04:e6:56:58:7d:0c:
                    e1:74:5f:75:2b:f3:1f:36:9d:6f:ce:38:ac:d7:26:
                    bd:f5:84:1b:b0:3a:96:ed:57:f0:b7:be:16:a6:59:
                    c8:ea:ce:8c:96:eb:64:2f:9a:09:29:8d:f6:f5:e2:
                    bb:68:80:c0:46:fb:a6:6f:1e:6e:07:51:17:8f:4c:
                    9e:78:2e:dc:e9:c5:c0:71:8f:b2:54:c2:f5:08:ac:
                    41:c6:97:d1:dd:80:27:27:46:36:da:ab:30:50:8f:
                    5c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A7:42:9F:AB:02:A0:51:7A:82:56:1E:71:14:E5:0D:F4:FB:23:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4a85c8d4-5cc3-38d9-9032-a087a34bda82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:e0:d7:72:82:5c:1c:08:74:79:7d:3f:6b:86:0c:9b:4a:cc:
         a8:1d:79:ea:ae:d8:b0:bc:78:c2:e0:54:19:27:7a:df:80:14:
         01:28:e4:65:c2:06:48:e6:30:5b:19:ec:13:6f:66:3c:d0:1d:
         ff:1c:51:1d:a5:87:97:a1:cb:5a:b4:e9:48:46:b4:ba:e0:5c:
         40:de:1a:09:69:fa:10:0f:57:46:5d:78:a1:43:a5:3e:b7:0c:
         d2:22:11:9e:00:52:61:a6:d6:44:6f:f9:6c:5b:ee:ff:c4:cf:
         9f:b6:28:46:73:ce:77:3c:a4:73:1b:d7:c1:d5:7c:e1:4c:e7:
         3b:d1:fe:5d:9b:5f:53:47:f0:da:6b:7d:e7:5b:58:8e:eb:d9:
         1e:e2:38:ab:55:72:29:66:90:a2:e0:74:0d:1e:95:58:1f:d8:
         b2:1f:ac:2f:48:ad:2a:f1:8b:aa:37:3c:42:59:a9:14:72:d2:
         f4:32:87:58:8d:ee:cf:d2:01:26:62:39:16:a5:9a:a4:95:23:
         d9:5a:44:2c:28:16:cf:c2:d9:09:7c:3c:ca:22:f5:67:98:b1:
         97:59:07:ba:14:81:6c:fb:e6:f5:94:c2:3b:87:0a:84:7e:e1:
         07:3e:7b:90:4d:f5:b5:d1:fc:46:ba:85:62:1a:5e:fb:f7:d3:
         32:74:9d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:15:16 2026 by rpki-client