Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8540b0cb-2f0a-3032-900c-aee63684a4c0.roa
File:                     8540b0cb-2f0a-3032-900c-aee63684a4c0.roa (raw, json)
Hash identifier:          bxKMZSTcmqcx46gigYFQrkH8E8VCAO75Ql+lscskRBY=
Subject key identifier:   2B:E5:7F:28:FB:BB:5D:A3:E4:DA:90:75:E8:B4:A4:48:97:46:85:72
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EA79CFB50C915D66A67C39640
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8540b0cb-2f0a-3032-900c-aee63684a4c0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     44559
IP address blocks:        172.120.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:fb:50:c9:15:d6:6a:67:c3:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f36666d4-34c1-4ad8-ab80-7665f726ab9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0b:23:94:ab:33:f2:65:01:72:c6:20:85:84:
                    f8:39:56:34:a5:c6:a8:d8:56:c9:a1:3e:d2:61:45:
                    12:64:8d:b8:ce:bc:26:f7:24:71:70:11:f1:9f:4d:
                    cf:8f:41:91:6e:38:ff:61:4f:40:04:b9:e3:a0:eb:
                    77:e1:eb:44:36:cf:eb:71:d7:ff:96:85:1d:62:0c:
                    81:11:46:44:bd:bc:89:d8:0e:6e:d3:30:23:6b:16:
                    af:bc:ec:ac:42:61:12:4b:7f:d3:fb:0f:6a:17:8b:
                    06:92:5d:f6:62:69:a2:0a:b3:90:5e:53:7f:5b:d4:
                    26:14:47:6e:e2:92:4c:e6:a5:b0:4d:32:0b:c2:ae:
                    0e:7d:b8:03:be:98:bd:b5:fd:2a:f8:3d:af:e0:5a:
                    9b:57:a9:d6:f3:df:2c:5f:11:b7:14:3e:6c:c9:3b:
                    8d:75:e7:16:45:8f:2d:60:c2:56:fe:7d:75:9a:80:
                    00:27:da:af:71:3c:8a:0b:eb:68:5f:79:6f:81:7f:
                    6b:f7:13:07:ee:47:fb:81:88:f8:d0:9f:6d:3b:70:
                    d7:bd:2e:02:9e:00:7c:2d:bc:48:3d:df:ef:11:dc:
                    d4:02:0f:0d:fd:e4:a2:24:f0:1f:38:d6:11:00:da:
                    2c:26:e7:0b:cb:46:0f:66:d7:19:a9:d8:bc:c3:15:
                    9d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E5:7F:28:FB:BB:5D:A3:E4:DA:90:75:E8:B4:A4:48:97:46:85:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8540b0cb-2f0a-3032-900c-aee63684a4c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:87:99:24:7f:92:6f:2c:97:d9:84:9a:68:15:ae:aa:80:7a:
         f4:ed:c7:03:60:a3:7d:b9:98:94:51:11:07:c0:6b:3f:7e:ba:
         19:48:f3:9e:4c:7d:e2:c6:30:17:fa:0d:1c:bd:ab:da:ff:11:
         44:e5:39:84:87:44:6a:33:b2:c7:5d:7f:b2:86:b5:e3:95:92:
         44:8d:93:6c:60:dc:5f:22:5e:70:08:6c:09:ed:db:a3:3a:34:
         ee:fc:6f:45:92:c2:50:30:20:d2:a9:d8:38:b8:f7:f3:35:ee:
         03:32:67:f2:31:db:01:fd:e6:b3:15:9e:69:5c:55:6a:c2:3b:
         63:b3:d1:a5:9e:e1:37:18:98:40:96:cd:30:5e:56:88:d3:b5:
         03:a0:d9:a1:c4:87:dc:34:d3:94:95:12:26:5d:ad:11:e9:63:
         54:6f:f1:9c:c1:38:d0:a8:ce:f0:b6:cf:bb:41:67:83:2d:63:
         03:26:ba:15:a8:6e:0d:8c:27:f6:6c:fc:22:44:53:a9:3f:f5:
         62:5f:11:ac:48:46:0b:86:10:28:c0:0f:d8:bf:a6:e9:fe:b3:
         b6:03:4d:c5:49:c0:f8:83:79:90:71:58:11:c9:e1:8c:49:7e:
         b0:03:93:1b:31:93:4d:9d:13:12:c8:fd:e2:4d:b9:b1:72:22:
         9d:b5:3e:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnPtQyRXWamfDlkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZjM2NjY2ZDQtMzRjMS00YWQ4LWFiODAtNzY2NWY3MjZhYjllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggsjlKsz8mUBcsYghYT4OVY0pcao2FbJoT7S
YUUSZI24zrwm9yRxcBHxn03Pj0GRbjj/YU9ABLnjoOt34etENs/rcdf/loUdYgyB
EUZEvbyJ2A5u0zAjaxavvOysQmESS3/T+w9qF4sGkl32YmmiCrOQXlN/W9QmFEdu
4pJM5qWwTTILwq4OfbgDvpi9tf0q+D2v4FqbV6nW898sXxG3FD5syTuNdecWRY8t
YMJW/n11moAAJ9qvcTyKC+toX3lvgX9r9xMH7kf7gYj40J9tO3DXvS4CngB8LbxI
Pd/vEdzUAg8N/eSiJPAfONYRANosJucLy0YPZtcZqdi8wxWdvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCvlfyj7u12j5NqQdei0pEiXRoVyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvODU0MGIwY2ItMmYwYS0z
MDMyLTkwMGMtYWVlNjM2ODRhNGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADuHmSR/km8sl9mEmmgVrqqAevTtxwNgo325mJRREQfAaz9+uhlI855M
feLGMBf6DRy9q9r/EUTlOYSHRGozssddf7KGteOVkkSNk2xg3F8iXnAIbAnt26M6
NO78b0WSwlAwINKp2Di49/M17gMyZ/Ix2wH95rMVnmlcVWrCO2Oz0aWe4TcYmECW
zTBeVojTtQOg2aHEh9w005SVEiZdrRHpY1Rv8ZzBONCozvC2z7tBZ4MtYwMmuhWo
bg2MJ/Zs/CJEU6k/9WJfEaxIRguGECjAD9i/pun+s7YDTcVJwPiDeZBxWBHJ4YxJ
frADkxsxk02dExLI/eJNubFyIp21Phk=
-----END CERTIFICATE-----
Generated at Wed Jul 29 18:17:33 2026 by rpki-client