Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dca60748-80e3-37d1-b272-b2de6426363d.roa
File:                     dca60748-80e3-37d1-b272-b2de6426363d.roa (raw, json)
Hash identifier:          0P4+RZr1rYPB2yjMJyqWOwKUNPYNenQP58zJbyrR1hI=
Subject key identifier:   83:FF:89:15:DE:BF:75:0F:EA:42:CB:BC:02:BA:0C:37:06:05:4E:77
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D7A054E4C287789EE63F09600
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dca60748-80e3-37d1-b272-b2de6426363d.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     214238
IP address blocks:        172.121.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:4e:4c:28:77:89:ee:63:f0:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=23f53a05-fa58-448b-a935-aa18c9a2a817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8d:5e:57:f1:c2:ec:4b:b0:71:d9:1b:cc:f5:
                    a4:e5:96:30:ba:da:4d:c8:c3:5f:15:9f:8b:02:5c:
                    c3:69:cb:49:f9:36:6a:27:a2:1d:ea:f7:f6:02:95:
                    66:8c:0d:e7:1a:43:c6:5b:e5:0e:20:cc:ab:37:21:
                    33:5c:04:0f:9a:40:bb:75:09:0a:21:6b:5c:38:51:
                    12:11:6d:73:d2:4a:32:fb:0a:4c:1c:d2:5d:c2:d7:
                    65:64:1a:d0:47:73:86:eb:9a:12:2f:d4:79:22:0f:
                    58:c4:36:26:b4:bf:9d:7d:64:c5:bd:74:d5:c8:d2:
                    34:1f:5b:a8:f7:bf:1e:fd:af:6b:ee:6b:1f:d0:a3:
                    bb:6a:e8:f7:1c:20:33:3d:b3:fe:24:6e:30:10:2e:
                    aa:0e:34:c1:2e:eb:05:f7:b2:a0:e5:7c:f4:e3:56:
                    98:2e:0d:ef:7a:fc:c8:56:60:26:1e:46:ec:38:25:
                    60:7c:af:6b:29:a3:9b:e9:9f:d9:fb:e3:af:93:e6:
                    56:6f:df:b9:85:b2:80:74:2c:23:81:2e:f6:90:99:
                    f9:93:e9:90:ad:de:37:2e:df:74:aa:64:47:89:d2:
                    6d:22:37:6c:32:1f:8a:cc:d7:8f:eb:2d:59:72:35:
                    80:8c:ba:e7:05:dd:66:be:2c:83:61:b7:1c:ec:3e:
                    27:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FF:89:15:DE:BF:75:0F:EA:42:CB:BC:02:BA:0C:37:06:05:4E:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dca60748-80e3-37d1-b272-b2de6426363d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:70:e2:fc:57:72:54:40:fc:7e:3b:c2:79:fa:3e:f3:04:53:
         c3:51:8b:fd:eb:07:3a:59:17:bd:b6:41:f5:83:02:a5:22:12:
         aa:bc:97:b0:3c:ac:7c:5a:d7:d8:41:ab:8e:14:c6:18:fc:61:
         1c:87:e6:a3:53:d3:2f:47:19:8c:39:5d:ed:53:c7:01:e2:dc:
         e0:e5:df:02:cc:a6:35:0b:0c:59:34:26:b7:48:e4:bc:f9:b1:
         20:10:b6:24:f0:68:59:3c:d9:5a:ea:ea:cb:e0:fc:c6:e5:e1:
         13:22:91:f0:4a:4a:5e:5a:40:fb:a3:a2:71:e2:ac:cc:a1:4e:
         00:69:b8:29:f7:3e:94:8d:34:50:58:aa:bf:8b:58:4b:fd:09:
         01:25:f1:5d:c0:7a:29:fc:e9:48:67:08:61:86:ae:e2:38:b4:
         7c:79:8b:dc:09:fe:11:27:2d:2f:af:2a:96:12:44:4d:6f:80:
         fb:ca:78:2e:64:b1:8f:1c:ac:ce:f4:e2:00:57:e9:ca:d0:e0:
         3e:af:6d:6e:57:77:3e:c0:b0:0a:a5:84:e5:ef:2e:1a:b4:14:
         b9:19:43:12:a2:ee:25:36:4f:8a:de:23:e8:83:89:02:8a:e6:
         a1:6c:6a:bf:1e:1a:d7:3d:c0:ec:1b:63:96:fa:be:a8:23:1f:
         27:49:e9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:45:38 2026 by rpki-client