Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/beeba0c9-9dca-3e1a-8d79-4645d90ec95d.roa
File:                     beeba0c9-9dca-3e1a-8d79-4645d90ec95d.roa (raw, json)
Hash identifier:          flImx7yCDeTypHGCIDQreNB1SXTX9Z2Hc1GtHo8/51g=
Subject key identifier:   52:E0:DB:FA:ED:40:5C:95:86:71:DD:DD:E4:B9:AD:94:D3:39:83:32
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EA7923BB1FBBD050FDF9A1F80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/beeba0c9-9dca-3e1a-8d79-4645d90ec95d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     9009
IP address blocks:        172.120.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:3b:b1:fb:bd:05:0f:df:9a:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f26108e1-5921-48dc-9890-4c4e879cc47c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:73:3f:48:c1:f5:69:c0:fd:6e:6a:30:44:b4:
                    86:14:e8:c6:93:34:ef:ef:70:5e:fe:b5:2f:68:19:
                    13:2b:1d:1a:47:da:c6:50:41:f8:25:40:7a:72:b4:
                    23:2c:58:61:1f:7b:07:82:6c:05:77:5c:69:60:ba:
                    06:74:f3:90:53:7b:97:b0:ce:54:03:e8:bc:12:4a:
                    0c:94:f0:42:40:f8:95:76:60:33:b2:85:5e:b8:cb:
                    1a:21:1b:57:ef:aa:d2:88:4f:a1:51:67:fe:2f:91:
                    77:90:76:1a:e7:94:9c:70:4d:1a:1b:38:4e:b4:42:
                    6e:0a:59:a9:48:c5:17:e5:93:56:bb:82:4e:2b:60:
                    f3:fe:4c:ad:c7:4b:7d:40:e8:c2:bf:38:1f:c2:8a:
                    c4:d5:b4:4f:19:f8:3e:8d:87:49:fc:4d:e9:3c:ba:
                    86:58:6d:e8:e5:07:1e:71:14:00:f7:00:6c:3a:30:
                    73:6e:e2:5d:c5:fd:06:02:7c:07:30:8d:22:1a:67:
                    79:a2:76:86:0b:18:f8:31:f3:8f:d3:d8:20:16:5a:
                    30:4f:39:06:5e:4d:15:37:7d:17:a4:e4:35:1f:42:
                    16:d9:3d:0a:ca:5f:e7:2c:69:33:7a:1c:0d:97:81:
                    34:b8:9c:17:42:b4:86:dd:74:14:b8:a2:c4:bb:5b:
                    ac:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E0:DB:FA:ED:40:5C:95:86:71:DD:DD:E4:B9:AD:94:D3:39:83:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/beeba0c9-9dca-3e1a-8d79-4645d90ec95d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:d1:34:ab:76:53:55:03:5e:ad:9e:31:a8:da:0e:36:be:ea:
         7c:fe:03:73:d0:46:dc:a8:38:1b:c1:9b:00:54:1e:67:8b:22:
         db:e2:6f:53:cc:17:ec:ef:b3:57:dc:fd:7d:1b:fc:cf:18:fb:
         61:56:cd:bb:4d:f4:be:ba:bd:40:1a:0d:a7:d9:6c:2d:5f:85:
         c3:7b:d1:39:81:07:e8:a2:47:86:36:49:57:53:5b:06:60:da:
         b7:44:ef:57:b5:f6:87:f2:03:22:ec:56:41:0b:30:73:1c:ae:
         ba:41:36:34:67:c6:d4:ec:76:31:f1:5f:1c:ad:53:ce:4b:60:
         5f:a1:ea:ea:ae:85:23:a4:90:ef:73:ed:c4:56:c4:79:13:14:
         ca:98:62:b2:32:e2:e8:ee:80:63:11:02:3d:78:65:25:2e:b7:
         8c:e7:52:c5:fb:af:8d:90:f1:68:7d:42:c7:2c:31:77:23:b7:
         51:cb:6b:7d:1d:cb:50:e9:eb:5f:5e:54:e0:f9:0e:5f:62:55:
         ad:87:80:89:be:48:e1:a7:54:e0:e1:52:0c:cc:bb:63:40:31:
         24:bd:bc:17:f2:f8:8d:e7:50:ea:e0:85:c4:a8:3f:ee:f2:ff:
         d1:17:f2:62:be:97:f0:35:67:0e:f0:16:10:c6:d1:df:9a:a3:
         7b:4b:6f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:11:35 2026 by rpki-client