Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/968b2e92-47f4-38f5-b603-b39e89c718ed.roa
File:                     968b2e92-47f4-38f5-b603-b39e89c718ed.roa (raw, json)
Hash identifier:          1uBekqAZTd+wYLt57Q0IBptJOqm9CR0qKRaeaajWlDE=
Subject key identifier:   D1:AA:4C:30:3A:5A:16:39:52:39:17:EE:2F:E6:26:E0:EB:FD:37:C7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EA799E77FB29CCB7E5C1BD500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/968b2e92-47f4-38f5-b603-b39e89c718ed.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     398781
IP address blocks:        172.121.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:e7:7f:b2:9c:cb:7e:5c:1b:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ebf11029-12a6-428f-911a-fdb38e480640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:20:4e:42:2c:b7:0f:aa:0c:2e:bc:8c:d6:22:
                    71:2c:db:15:2a:4d:3e:53:e3:51:ee:98:bb:31:30:
                    e7:b2:e5:a6:3e:dd:24:2b:fd:17:46:9b:09:f8:01:
                    1a:60:1a:97:3b:75:f0:5f:8b:e8:9b:f3:73:7e:78:
                    6d:8a:99:b8:17:25:73:e3:70:79:22:f7:5c:19:3f:
                    82:8c:aa:04:75:18:ba:97:e3:a1:dc:fa:ca:25:a0:
                    0d:bc:c9:ae:1f:d8:1a:bd:19:d3:c0:d1:b3:80:16:
                    39:bf:84:cf:1f:77:19:47:d9:63:1f:54:55:93:52:
                    55:13:ae:5e:47:74:59:d7:ae:a3:bf:e7:22:3c:e0:
                    70:82:61:37:5e:02:82:78:ce:17:57:72:45:a7:6e:
                    14:8e:55:6a:95:a7:81:d1:de:ea:5a:12:81:ac:0a:
                    d5:4f:72:5c:d1:0d:51:23:d2:b8:61:0e:9c:bb:9a:
                    99:f8:3e:4f:93:a6:15:71:d0:94:cb:34:41:67:f2:
                    3b:57:b0:f9:52:ba:e3:21:04:3e:98:c8:8b:80:a2:
                    91:da:c0:45:72:69:0a:56:37:40:79:3d:98:55:77:
                    7c:f6:b2:ba:3f:9b:c6:6b:23:c1:7d:34:e5:64:8c:
                    8d:5d:52:e6:fe:68:b4:a1:fb:a3:fa:b3:d1:19:0b:
                    9a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AA:4C:30:3A:5A:16:39:52:39:17:EE:2F:E6:26:E0:EB:FD:37:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/968b2e92-47f4-38f5-b603-b39e89c718ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:4d:ba:66:1a:00:ec:8c:ba:8b:bf:74:b5:a7:ee:c5:76:29:
         54:b5:ea:7a:b7:22:1e:b0:f5:6b:fa:30:bd:45:66:f6:11:bc:
         5a:a9:3b:29:6f:73:fd:3a:e0:37:e2:03:36:bf:71:e7:bb:51:
         d4:aa:8d:b1:c0:f0:ba:3b:df:04:27:11:bd:9c:14:87:0a:51:
         78:ab:57:1d:ac:15:b9:c4:fe:24:e4:69:92:0c:a0:57:1e:2e:
         16:8d:e7:0e:05:02:9f:bf:09:1b:0f:e5:cd:90:27:34:cb:e4:
         12:ba:c4:f6:b3:3f:ac:db:09:c1:24:ed:81:ad:29:41:96:76:
         2b:9f:85:9a:22:a1:4c:a5:ac:93:21:4a:1c:4b:70:89:d5:57:
         1b:a7:fe:98:e2:bb:10:f1:c2:27:9f:2c:f5:07:fa:fd:3f:a1:
         bf:0d:36:8d:ed:63:1d:e7:28:e4:cc:09:3d:bf:ea:cb:f6:11:
         7a:66:55:d9:99:0e:d9:a0:84:d1:3a:b6:be:0e:f0:46:04:57:
         37:3f:46:58:9a:8e:81:2c:6e:f6:47:bf:a5:4b:e2:79:85:70:
         2b:10:16:38:a8:36:89:c9:1f:88:10:4d:f8:79:6d:d7:e9:ff:
         8c:cf:b7:13:9c:9f:59:c1:e1:2e:b9:7a:21:42:fd:e3:fb:84:
         9c:21:81:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:15:58 2026 by rpki-client