Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6d90ee8e-a9a2-3936-b8c1-2c290237f19a.roa
File:                     6d90ee8e-a9a2-3936-b8c1-2c290237f19a.roa (raw, json)
Hash identifier:          SaiVZlwgCUeSupsyDfvTho+s2cC0xdhn6CN8dUSAnWs=
Subject key identifier:   C5:A9:99:16:31:9B:F7:68:F8:A4:F7:78:9D:D9:E1:9D:6E:0D:82:C0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F14679158555D509ED912D680
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6d90ee8e-a9a2-3936-b8c1-2c290237f19a.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     7018
IP address blocks:        172.120.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:91:58:55:5d:50:9e:d9:12:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=0afc4415-97f8-4d72-b710-a6b1d3a893d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1a:e4:1f:02:bb:24:f3:76:01:80:13:5e:d1:
                    3e:de:b7:07:98:03:91:58:43:7e:a6:7f:a6:f0:ba:
                    35:53:f8:1b:3e:96:41:fc:19:57:d3:00:36:74:01:
                    5e:5f:47:6a:2c:26:c8:ef:ea:a6:2f:d3:0b:a9:f7:
                    e7:09:5d:cd:56:d1:7c:24:7b:9d:b0:e1:9c:87:2f:
                    3d:bc:7f:b5:a4:13:4b:60:e8:a5:e7:9c:cf:63:16:
                    28:69:95:90:d0:7b:00:73:e3:03:32:34:4e:c2:d1:
                    b2:ff:7d:9e:1e:8b:d3:a5:ea:1e:aa:00:3e:21:45:
                    d4:d7:a9:a1:d6:e3:5e:08:dc:15:23:af:1e:7a:d2:
                    49:4d:06:44:e5:0a:33:d5:e0:39:d0:87:14:0d:ed:
                    06:74:4f:db:76:f9:8f:ff:a6:c8:3c:67:5b:f1:7a:
                    43:b5:cf:bd:c5:6b:cd:78:8a:49:ad:ad:97:c9:cc:
                    d4:7d:9e:33:ff:fb:33:c9:d8:29:3b:91:9e:87:8c:
                    23:f8:68:be:ad:26:e7:96:04:a4:09:39:35:59:e8:
                    22:bc:ed:d1:1f:af:2d:9b:7f:7d:4f:2d:23:9d:df:
                    c3:ee:07:86:93:b8:a0:8a:ba:c3:26:6c:40:78:c6:
                    5d:77:36:13:51:c9:a3:03:74:16:8d:d5:f9:50:df:
                    4b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A9:99:16:31:9B:F7:68:F8:A4:F7:78:9D:D9:E1:9D:6E:0D:82:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6d90ee8e-a9a2-3936-b8c1-2c290237f19a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:cc:60:98:16:46:c2:73:be:50:4e:65:d5:12:ad:b0:a2:bb:
         8f:a1:4c:72:d8:24:2c:88:7f:6e:be:95:bf:ae:69:9c:6e:b3:
         95:bf:eb:00:7d:4f:60:cc:96:93:b8:12:40:b8:3c:13:5d:56:
         6d:4e:2a:21:27:20:74:ba:a3:35:fb:dd:d5:b1:16:10:56:df:
         80:7a:77:64:d1:67:f3:5d:d5:d4:97:af:36:2c:34:15:59:44:
         fd:51:2d:52:ce:df:fc:34:21:75:8d:4b:dc:c9:01:3a:67:82:
         2c:d8:7f:61:75:78:8e:4f:c0:7b:9c:0f:c3:5c:7a:6c:7a:97:
         1a:1b:32:3b:c8:1e:84:45:d8:9a:4e:58:6e:d7:98:00:77:3d:
         2e:e3:7d:e6:18:c6:d5:90:ca:bc:73:2c:64:63:86:88:8f:46:
         43:a4:0f:a3:97:cd:32:09:48:17:a8:14:b2:74:d9:8e:4b:03:
         a2:b3:c3:57:d4:82:30:d0:23:ce:c9:a8:77:58:15:75:2b:37:
         9c:1e:49:94:e9:15:91:b3:29:07:54:9d:42:89:2f:54:2d:21:
         1f:b4:7c:bd:02:9c:c6:bb:2d:6b:40:8d:ba:e3:6b:97:9d:0a:
         f4:5f:07:66:2f:19:f4:bc:6f:da:ea:72:9e:a1:ad:c8:9d:d3:
         00:1d:1b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:52:37 2026 by rpki-client