Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/647054b9-78ea-3619-a0b4-74c569cf324e.roa
File:                     647054b9-78ea-3619-a0b4-74c569cf324e.roa (raw, json)
Hash identifier:          X3lk8cOElLZyzotv6qXb26U/hvusn1fSmZzSZczkMwY=
Subject key identifier:   D2:82:80:BE:06:48:26:73:CD:0D:60:0A:5F:F7:DD:86:9A:04:9D:54
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584E0006246E333F3DB0D3C0EF00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/647054b9-78ea-3619-a0b4-74c569cf324e.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     3257
IP address blocks:        172.121.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:24:6e:33:3f:3d:b0:d3:c0:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=dea3ee61-e4ab-46c2-b518-6074939ba690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:04:53:c3:ed:2d:cc:79:bb:a9:25:53:e0:1f:
                    b4:be:7b:79:8b:10:22:0e:f5:09:23:12:44:4a:32:
                    6e:b4:52:de:7f:4f:d9:8c:9b:06:c7:c3:b9:c1:68:
                    8b:c1:86:d4:e8:bf:cc:ac:7d:a8:39:86:12:31:8a:
                    9d:a5:ae:6b:f7:68:f3:4a:a6:4f:c7:a7:11:9f:cd:
                    35:77:0b:82:05:27:12:7e:14:50:f8:17:a9:d2:7f:
                    cd:91:23:d9:9c:86:ca:ca:c7:63:e4:43:9f:06:28:
                    66:48:64:c2:84:58:6e:a6:ec:c9:d8:d6:83:7c:63:
                    c2:56:db:a8:7f:64:96:b1:c7:f7:08:86:cd:a9:d8:
                    dc:6e:7d:94:54:e4:a4:51:f0:0d:23:7f:bd:75:b3:
                    44:8c:df:bc:41:c2:77:d6:04:1f:1a:98:77:49:75:
                    e7:3b:55:08:dd:f6:5f:ee:48:54:ff:47:34:30:95:
                    e1:65:5c:41:25:d0:77:f6:9b:89:9d:de:1b:38:1e:
                    e2:30:67:a3:31:58:a7:04:94:4f:8f:9d:a8:68:c3:
                    46:56:b6:d5:3a:72:af:e2:8a:c7:67:17:ac:cf:d5:
                    28:9a:56:bf:b6:65:02:a8:e5:54:53:90:90:ae:94:
                    cf:7b:9a:93:4c:eb:61:5d:ca:d7:e0:ae:41:f1:99:
                    b8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:82:80:BE:06:48:26:73:CD:0D:60:0A:5F:F7:DD:86:9A:04:9D:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/647054b9-78ea-3619-a0b4-74c569cf324e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:6d:85:be:c1:1e:e3:e8:93:d9:29:09:fd:ea:03:ad:b8:61:
         a1:7d:13:cc:e1:fc:e7:ea:c1:60:62:af:ba:a9:ef:d3:67:ca:
         76:a8:5a:9f:7a:ae:6a:49:c3:c3:2e:12:07:25:c5:2e:4a:6c:
         d1:f4:db:86:19:e7:d1:a3:53:38:96:3e:13:e0:ac:98:68:47:
         c3:1c:0b:41:08:da:2a:59:06:9d:73:20:b9:33:b1:40:7e:e9:
         f4:b6:40:8c:c9:ea:fa:08:88:ab:4b:93:af:08:a0:13:4a:3f:
         fa:6b:03:21:74:67:91:34:4d:f3:22:3b:c0:4e:6a:3d:18:be:
         f0:ed:5c:57:60:46:55:75:bb:6a:d2:fd:fd:c7:7f:d8:03:42:
         7f:45:77:69:b6:78:85:c4:fa:63:21:0e:3e:39:94:ff:34:a6:
         02:f7:fb:24:d6:a4:07:d2:ca:18:4f:20:2c:43:50:a5:0a:e0:
         94:7c:a6:88:d0:ff:a8:9a:ba:49:64:d4:db:dc:cb:6f:23:3a:
         02:83:ba:dc:86:d6:0e:33:ca:47:1a:b5:7d:45:8c:9e:21:b1:
         68:7a:d8:63:0e:9a:4d:84:ec:40:c7:02:2c:92:8f:f7:76:e9:
         31:d8:16:fc:4f:0c:37:16:47:03:dc:ca:9e:50:4d:6a:22:ad:
         17:87:d1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:10:54 2026 by rpki-client