Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bfaed422-9b67-336e-817a-2b9fa1020c75.roa
File:                     bfaed422-9b67-336e-817a-2b9fa1020c75.roa (raw, json)
Hash identifier:          SLhCWg4AAyG1MBkkQybMF6W0A8G77Q0fCtPNk8Ov/3c=
Subject key identifier:   B6:0E:18:B2:45:DF:D3:42:A4:29:C1:50:E5:ED:AA:CA:82:8A:06:E7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EA799CE57838A569BA59B4640
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bfaed422-9b67-336e-817a-2b9fa1020c75.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     398781
IP address blocks:        172.121.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:ce:57:83:8a:56:9b:a5:9b:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c0281f8a-2701-47a2-8b1c-b4cc591ae2f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b2:2d:ae:38:62:b6:9b:6f:1a:53:a5:d4:f2:
                    3a:0e:9d:49:97:79:00:7b:5b:f7:0e:b0:52:bc:00:
                    50:d4:a0:b1:60:30:b6:39:7b:d2:ed:99:25:45:73:
                    cd:fa:d9:82:8f:77:bd:84:50:a5:84:4d:1b:a7:5d:
                    82:4a:fd:d3:fa:95:cc:66:4b:26:6e:13:f7:1e:78:
                    d0:c2:af:1f:ec:6f:d8:be:b8:f5:66:a8:09:6f:bb:
                    b1:70:8d:51:a4:c1:ff:71:69:05:4b:75:93:95:92:
                    1a:87:9d:cc:9c:5d:56:8b:62:10:91:7d:ba:0b:9a:
                    76:be:83:ab:7b:cb:cd:b1:d5:8f:4c:ba:e0:25:06:
                    b0:64:52:13:d6:78:1e:f3:0b:ef:52:2b:1f:70:8d:
                    83:23:22:1f:d1:75:82:16:64:76:1d:26:56:44:5c:
                    40:df:27:83:b4:26:5b:af:84:7d:ca:9d:df:17:31:
                    2d:27:6b:e2:ae:f8:ba:7b:ac:8d:b6:24:8b:cf:fb:
                    9f:a9:91:15:50:d0:8a:ee:5b:3d:68:14:d6:5a:ad:
                    8a:69:cc:fc:eb:a1:ee:c0:6c:b7:a0:e3:0a:bb:d4:
                    4d:12:8b:b5:64:2a:9e:b3:bb:b7:62:9c:23:cf:17:
                    59:b6:88:d3:49:95:4c:5d:05:2f:73:35:f8:e2:c4:
                    df:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0E:18:B2:45:DF:D3:42:A4:29:C1:50:E5:ED:AA:CA:82:8A:06:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bfaed422-9b67-336e-817a-2b9fa1020c75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:e0:cf:dc:07:23:b2:c1:90:ff:d5:71:33:0f:00:b4:b9:43:
         86:ac:f1:ce:43:65:b1:1f:9b:11:9a:47:a0:3b:ce:08:40:7e:
         4a:ce:de:82:49:c8:71:55:10:ea:17:7c:e3:0a:67:9a:ae:92:
         64:60:50:9e:e8:cd:49:df:19:7d:4f:51:7f:92:f2:e6:3e:cf:
         91:63:f9:4a:ec:a1:6f:5a:b6:8f:79:45:91:27:0a:86:0c:11:
         b1:82:dc:88:2e:35:97:01:b8:b7:cb:9e:a8:ba:18:b5:9e:44:
         bf:82:bc:45:6a:e1:5e:ad:d6:a6:9c:86:5d:7e:1a:24:67:ae:
         0c:db:c5:c9:53:84:79:e8:87:c8:51:06:ee:a7:43:3b:ab:27:
         4d:e8:34:74:72:39:85:e7:27:d2:a2:3b:ca:d3:5b:ee:26:9a:
         24:9e:5a:46:73:ce:49:78:ea:ec:d8:ae:a8:ba:33:0c:9e:eb:
         82:39:11:eb:84:7e:91:1b:bd:5c:fe:b2:b8:83:d0:fc:97:3d:
         ad:6b:3a:1b:d3:6d:99:aa:10:83:a1:23:a2:f8:d0:cc:ba:a8:
         de:ea:eb:c9:9e:df:be:0c:46:f0:d1:d8:82:ab:a0:26:bc:64:
         e9:f4:25:49:ed:16:bc:ad:76:9e:d4:eb:66:df:1c:cd:04:0e:
         b4:04:5a:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmc5Xg4pWm6WbRkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YzAyODFmOGEtMjcwMS00N2EyLThiMWMtYjRjYzU5MWFlMmY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrItrjhitptvGlOl1PI6Dp1Jl3kAe1v3DrBS
vABQ1KCxYDC2OXvS7ZklRXPN+tmCj3e9hFClhE0bp12CSv3T+pXMZksmbhP3HnjQ
wq8f7G/Yvrj1ZqgJb7uxcI1RpMH/cWkFS3WTlZIah53MnF1Wi2IQkX26C5p2voOr
e8vNsdWPTLrgJQawZFIT1nge8wvvUisfcI2DIyIf0XWCFmR2HSZWRFxA3yeDtCZb
r4R9yp3fFzEtJ2virvi6e6yNtiSLz/ufqZEVUNCK7ls9aBTWWq2Kacz866HuwGy3
oOMKu9RNEou1ZCqes7u3YpwjzxdZtojTSZVMXQUvczX44sTfvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLYOGLJF39NCpCnBUOXtqsqCigbnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYmZhZWQ0MjItOWI2Ny0z
MzZlLTgxN2EtMmI5ZmExMDIwYzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHlLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIbgz9wHI7LBkP/VcTMPALS5Q4as8c5DZbEfmxGaR6A7zghAfkrO3oJJ
yHFVEOoXfOMKZ5qukmRgUJ7ozUnfGX1PUX+S8uY+z5Fj+UrsoW9ato95RZEnCoYM
EbGC3IguNZcBuLfLnqi6GLWeRL+CvEVq4V6t1qachl1+GiRnrgzbxclThHnoh8hR
Bu6nQzurJ03oNHRyOYXnJ9KiO8rTW+4mmiSeWkZzzkl46uzYrqi6Mwye64I5EeuE
fpEbvVz+sriD0PyXPa1rOhvTbZmqEIOhI6L40My6qN7q68me374MRvDR2IKroCa8
ZOn0JUntFrytdp7U62bfHM0EDrQEWgo=
-----END CERTIFICATE-----
Generated at Wed Jul 29 18:15:59 2026 by rpki-client