Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/beb42cdd-45f1-3337-acd9-9d284753f0a7.roa
File:                     beb42cdd-45f1-3337-acd9-9d284753f0a7.roa (raw, json)
Hash identifier:          5NhHVTncXW1hRIaJ1hJdjJdOHLiL+O5b7Ja36y/ibZY=
Subject key identifier:   4D:5A:D1:4B:F6:E6:FF:CE:55:BF:AC:24:56:75:2D:72:2A:E9:08:D8
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EA793464BFA00D9BA54896B80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/beb42cdd-45f1-3337-acd9-9d284753f0a7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     18779
IP address blocks:        172.120.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:46:4b:fa:00:d9:ba:54:89:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d6569675-6c8f-4940-9293-be9214cd22b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:85:ae:94:34:8a:f7:5c:fc:50:fc:d2:1f:12:
                    51:49:c1:28:65:56:19:09:d4:25:58:d6:44:7b:10:
                    e5:e8:d3:02:ce:e0:eb:71:b9:d4:44:83:e7:70:e0:
                    17:98:58:0c:6c:1d:ee:3c:57:e0:87:51:f1:4d:d1:
                    1d:26:c5:e5:8f:48:ba:7a:22:99:4a:3d:f6:0a:08:
                    ea:8b:df:64:3a:9c:71:d2:97:d0:92:00:09:0e:2f:
                    95:22:23:cb:57:4f:a9:6d:73:1b:f5:7c:aa:dc:0e:
                    cd:11:f9:e7:c0:60:73:06:9b:1b:c9:a0:3f:ff:cd:
                    6b:e0:35:c3:37:41:c9:9c:9b:5f:ac:3f:4a:42:16:
                    30:23:cc:5c:32:8a:03:a0:08:08:d0:a7:dd:47:39:
                    1e:e4:68:42:e7:0c:a2:30:46:fc:26:b4:d4:5a:11:
                    18:fb:97:65:81:ed:e6:23:7d:32:a6:e3:e7:4b:2c:
                    9f:df:44:af:d7:83:b0:88:e3:cd:c4:ff:35:fa:13:
                    cf:cd:ac:b0:8e:8d:e9:9f:25:74:b8:b0:f5:89:b5:
                    1b:ef:01:6b:7b:7e:2e:39:7c:83:d7:29:27:85:f5:
                    f0:86:89:0c:55:cc:de:c8:0c:69:22:8d:c5:2a:91:
                    e6:18:b5:6a:d2:1f:5c:69:92:7a:81:70:5e:11:fd:
                    1d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5A:D1:4B:F6:E6:FF:CE:55:BF:AC:24:56:75:2D:72:2A:E9:08:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/beb42cdd-45f1-3337-acd9-9d284753f0a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:69:d9:51:5b:82:bb:15:d6:35:78:cb:95:5a:60:2e:d0:23:
         83:95:fa:5a:a9:77:5f:54:08:9d:ba:65:47:e2:73:36:2f:d0:
         4c:68:ca:7e:81:6e:47:f3:ef:93:49:5f:94:a7:c1:ee:66:2c:
         ad:4d:8d:6c:33:9a:6e:3c:57:38:a8:7c:f1:d7:b8:d3:c1:cb:
         c3:2e:24:7b:28:a1:9a:cd:44:46:f3:7f:0e:13:fc:4e:7e:f2:
         f6:8b:e4:32:a5:fa:51:9b:49:9b:6f:24:b3:aa:00:af:fc:d7:
         33:46:06:46:a0:29:86:55:9f:91:ff:ba:86:d0:6d:87:39:63:
         d0:a4:87:5e:d8:4a:08:3d:ff:8f:e2:5c:4f:79:08:8d:69:69:
         a5:c0:6b:7c:72:3a:52:56:db:57:ed:07:4f:ba:18:8d:88:7f:
         8a:13:58:3c:29:36:9f:db:b1:c2:05:6b:58:4f:03:b1:9d:4c:
         26:ad:04:8b:97:58:f6:d1:ff:2b:ce:1c:cb:82:6a:9e:45:8b:
         ef:6e:78:4c:fa:4b:51:21:4b:27:f1:66:a5:65:1a:dd:55:d1:
         69:72:c7:9f:b1:5b:41:5a:8e:f1:88:48:fd:f4:26:90:92:39:
         e2:cd:c6:25:eb:d1:41:8c:d8:50:b5:d1:a6:14:27:f8:df:9b:
         27:80:8d:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nk0ZL+gDZulSJa4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZDY1Njk2NzUtNmM4Zi00OTQwLTkyOTMtYmU5MjE0Y2QyMmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4WulDSK91z8UPzSHxJRScEoZVYZCdQlWNZE
exDl6NMCzuDrcbnURIPncOAXmFgMbB3uPFfgh1HxTdEdJsXlj0i6eiKZSj32Cgjq
i99kOpxx0pfQkgAJDi+VIiPLV0+pbXMb9Xyq3A7NEfnnwGBzBpsbyaA//81r4DXD
N0HJnJtfrD9KQhYwI8xcMooDoAgI0KfdRzke5GhC5wyiMEb8JrTUWhEY+5dlge3m
I30ypuPnSyyf30Sv14OwiOPNxP81+hPPzaywjo3pnyV0uLD1ibUb7wFre34uOXyD
1yknhfXwhokMVczeyAxpIo3FKpHmGLVq0h9caZJ6gXBeEf0dQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE1a0Uv25v/OVb+sJFZ1LXIq6QjYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYmViNDJjZGQtNDVmMS0z
MzM3LWFjZDktOWQyODQ3NTNmMGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGNp2VFbgrsV1jV4y5VaYC7QI4OV+lqpd19UCJ26ZUficzYv0Exoyn6B
bkfz75NJX5Snwe5mLK1NjWwzmm48VziofPHXuNPBy8MuJHsooZrNREbzfw4T/E5+
8vaL5DKl+lGbSZtvJLOqAK/81zNGBkagKYZVn5H/uobQbYc5Y9Ckh17YSgg9/4/i
XE95CI1paaXAa3xyOlJW21ftB0+6GI2If4oTWDwpNp/bscIFa1hPA7GdTCatBIuX
WPbR/yvOHMuCap5Fi+9ueEz6S1EhSyfxZqVlGt1V0Wlyx5+xW0FajvGISP30JpCS
OeLNxiXr0UGM2FC10aYUJ/jfmyeAjVY=
-----END CERTIFICATE-----
Generated at Wed Jul 29 18:18:29 2026 by rpki-client