Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c8137a73-d52d-31f2-ab3f-c58e71dbd8e6.roa
File:                     c8137a73-d52d-31f2-ab3f-c58e71dbd8e6.roa (raw, json)
Hash identifier:          DXlFHJDeZFoTWCfVR+jtBpKvG1Mo6NinPc/Lgf5DAjQ=
Subject key identifier:   FF:8B:56:65:FC:06:8F:38:0A:61:F2:04:3B:03:87:77:B9:48:3A:E6
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584CB121C80F92EAF9DB70B59E40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c8137a73-d52d-31f2-ab3f-c58e71dbd8e6.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     55201
IP address blocks:        172.121.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:c8:0f:92:ea:f9:db:70:b5:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=9d34845f-cbb7-4f61-a2b5-0b6360861405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bf:e0:1b:58:ce:71:04:da:fd:1b:3f:32:46:
                    1d:c6:59:82:65:2a:e4:c1:3d:fa:39:a5:8e:6c:5a:
                    f8:f9:01:43:14:9b:5f:cd:c9:fc:11:85:73:71:ef:
                    55:03:2f:6d:ab:d4:88:d4:e0:1f:ea:48:a4:fe:bc:
                    2c:fe:ca:63:2b:c4:a2:e6:1b:c7:ac:c2:a4:b5:86:
                    7d:ff:0e:14:6b:5f:06:bd:1b:68:e5:19:42:00:d3:
                    fd:c8:db:40:59:51:e4:be:38:a0:be:3b:2b:ee:09:
                    d2:f9:0a:2b:75:ba:4c:ca:b2:f7:8a:bf:6d:b8:aa:
                    45:92:e9:69:44:ef:9f:60:57:41:6b:a1:fa:d2:70:
                    2d:13:bd:94:2c:ad:54:e7:a5:12:ce:4f:fd:bf:6c:
                    f2:3e:0e:0b:04:96:33:a4:0f:1f:14:5b:e1:6a:19:
                    89:c0:2d:67:5d:f3:00:b5:4d:bb:64:38:b7:a8:cc:
                    b3:32:f7:3e:d6:32:cb:2d:42:0f:84:d0:21:93:ba:
                    77:03:8a:9f:03:a5:a5:bc:06:b8:56:4c:6c:83:f2:
                    b1:72:6e:f5:94:f4:48:61:6f:cb:0b:d4:a1:88:f4:
                    ed:46:c4:7c:b6:b0:f3:07:65:5e:4c:68:ba:7a:5f:
                    2a:1d:bc:2b:dd:b7:dc:dc:b5:eb:33:e8:fe:b8:f1:
                    c2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:8B:56:65:FC:06:8F:38:0A:61:F2:04:3B:03:87:77:B9:48:3A:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c8137a73-d52d-31f2-ab3f-c58e71dbd8e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:2a:ce:a5:2c:a2:37:89:f4:8c:4f:c1:3c:c7:98:f1:fc:9b:
         69:3c:c4:42:11:09:f5:d7:3e:36:b0:cb:3c:30:92:11:7b:26:
         4e:f2:94:e4:74:ee:1f:18:23:ba:d4:bc:b9:cc:ea:6e:02:fb:
         38:a6:55:9e:51:13:b9:b5:62:49:ec:65:cf:db:44:eb:a1:0e:
         0a:a9:7d:f4:99:9b:ae:e5:b7:36:aa:59:a0:fb:ef:9c:15:20:
         b9:ba:7e:09:b4:c8:05:e0:eb:e0:2b:1d:e0:5a:49:40:c5:f5:
         05:42:41:b3:61:ce:cd:5e:ed:60:72:50:1c:20:98:26:ef:93:
         02:bd:cc:5d:4e:3d:43:77:c7:8d:ef:48:35:a6:1a:37:1e:ab:
         53:e7:82:a4:b6:f6:1f:da:39:94:23:42:ba:8a:97:2c:d7:ef:
         b7:e2:46:10:5e:ef:d3:2c:6d:9a:cd:4c:ca:16:c8:35:60:8a:
         27:9c:6a:4a:3e:05:54:13:69:7e:ad:34:a1:6e:89:13:88:00:
         05:5d:4b:5d:24:8c:e8:46:1c:6a:62:ca:da:c6:4c:e7:07:66:
         7c:3c:0e:8e:28:7b:6a:dc:3d:cf:d0:ca:76:a4:45:01:ca:ea:
         9b:35:73:0d:20:67:24:be:a9:53:66:19:0f:95:a1:e6:0e:d7:
         c8:cf:7c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:16:31 2026 by rpki-client