Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7da066a6-cb1f-309e-b4d0-c93cb93d3bdc.roa
File:                     7da066a6-cb1f-309e-b4d0-c93cb93d3bdc.roa (raw, json)
Hash identifier:          ORSvM3RYWOgIbEEjWBLItV3Ond8SRoIJle5bsZgLO6E=
Subject key identifier:   2A:70:72:9B:B5:D3:76:A5:B2:AE:EF:5B:6B:E9:1A:CD:5E:0C:51:FE
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EA7923C023ACB239BD0A5A300
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7da066a6-cb1f-309e-b4d0-c93cb93d3bdc.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     9009
IP address blocks:        172.120.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:3c:02:3a:cb:23:9b:d0:a5:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=19f0df2d-4547-4c74-83b9-429c8f8e871b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e2:6b:20:2d:d0:ad:5d:c8:b4:e0:60:fe:34:
                    cb:0c:08:d1:09:db:c7:0f:7f:8c:c5:a9:c6:f9:4c:
                    33:52:1a:4b:b5:d0:3f:4e:fa:17:88:d4:eb:fa:cb:
                    b2:5b:46:a1:99:29:65:80:ee:92:5b:93:ef:11:b7:
                    74:9f:6c:e2:79:db:9e:60:4b:9d:eb:dd:45:28:e9:
                    ef:34:1e:4b:7c:b2:59:d8:77:2b:7c:56:08:ba:82:
                    d0:cb:76:cc:85:7a:5d:ce:76:89:8f:82:f5:0e:fd:
                    64:88:04:93:ea:34:a2:8e:b7:75:65:f4:30:53:7f:
                    0e:b0:73:8e:e7:85:ad:91:d8:50:b7:6f:ce:5c:2c:
                    be:e7:fd:e4:aa:ae:b0:30:46:86:62:6d:99:68:7a:
                    03:e5:42:3d:5f:64:b1:e0:9d:9f:8d:55:e1:42:82:
                    c7:8b:b8:87:d4:c8:a9:38:70:e9:13:f3:cc:82:9f:
                    b3:eb:f3:e1:7e:30:c2:b8:d6:b7:09:93:bc:fc:42:
                    e1:da:4f:dd:af:aa:37:65:66:ae:bc:e0:72:d2:83:
                    e4:73:0f:50:cd:fd:af:6a:77:40:21:c0:eb:3d:ff:
                    60:67:5b:cf:92:60:b4:7f:75:91:24:22:e6:dd:e5:
                    3f:79:11:3d:1b:a4:19:43:60:40:03:e1:da:dd:e7:
                    97:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:70:72:9B:B5:D3:76:A5:B2:AE:EF:5B:6B:E9:1A:CD:5E:0C:51:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7da066a6-cb1f-309e-b4d0-c93cb93d3bdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:06:d3:ae:aa:66:02:8d:8c:e7:10:b6:b9:52:c9:aa:cd:bf:
         9a:03:21:6f:2a:7d:02:c4:7f:fd:5d:1a:35:58:a7:2f:d6:a3:
         0e:92:c0:04:55:43:f6:67:ca:f7:7e:33:55:e1:8b:75:56:cb:
         e3:66:53:6b:a0:97:bc:dd:eb:0d:0f:74:2b:d2:98:e7:bc:78:
         9e:db:27:06:cc:64:d6:74:81:4d:3a:e8:83:72:c8:2d:37:ca:
         ac:02:93:fa:76:87:89:76:06:e7:75:aa:c4:8f:59:96:88:15:
         1e:7b:e5:d1:88:2c:b6:22:e0:1f:11:9e:f0:4a:bd:7c:0b:e6:
         6a:e8:54:b8:c4:96:a1:17:c6:c9:4a:8e:f3:5b:be:0b:03:19:
         1e:d0:ff:65:b5:02:a3:82:df:c1:cc:f2:a9:4f:2a:a0:24:d7:
         d7:ea:64:eb:6f:00:e0:27:0d:05:a8:95:b0:5a:9d:c2:68:3c:
         aa:5c:85:86:a8:01:fd:d2:8f:3d:a0:84:83:79:04:b0:41:04:
         76:6c:29:09:0a:46:82:b0:28:84:74:ca:53:1c:e1:cf:98:72:
         d0:2f:a0:ef:12:50:b0:0b:5c:31:c1:71:8c:98:97:26:1c:93:
         bc:43:5e:ec:67:e8:48:b2:f2:2b:69:95:85:50:d6:9a:c4:24:
         4d:d3:cb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:14:51 2026 by rpki-client