Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e792237e-fa1e-3182-a165-8725ba7bd812.roa
File:                     e792237e-fa1e-3182-a165-8725ba7bd812.roa (raw, json)
Hash identifier:          UfSyos1jkP/nLJG/SCAwxGgJ3jb1CkU3W4BgU+6HFC8=
Subject key identifier:   EE:D6:16:4B:69:4F:7D:4D:19:D5:55:FD:1C:6C:38:7D:E2:BC:E6:B2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EA799DBA5013218D4DF9D7B00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e792237e-fa1e-3182-a165-8725ba7bd812.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     398781
IP address blocks:        172.121.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:db:a5:01:32:18:d4:df:9d:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ab3246f1-cfff-4323-a074-0dcc8be39581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9d:28:ca:d7:70:37:1c:fd:95:7e:f5:17:2c:
                    c8:ed:4a:26:cf:f5:2e:a1:6c:f3:d4:55:29:f6:d8:
                    e6:f0:b9:dc:92:e8:b6:0d:33:bf:a3:fe:d4:7e:38:
                    9b:74:9c:f4:dd:3c:e5:bf:5e:d7:e7:0a:38:85:36:
                    c2:63:82:8e:24:9e:04:97:62:2a:5b:64:8f:29:de:
                    70:c1:ad:90:c5:92:67:48:ac:68:c1:57:40:77:1d:
                    09:b9:94:d0:60:b8:1c:a7:02:73:7e:a5:ac:85:51:
                    63:4a:ec:0c:80:d7:a1:81:82:bd:b7:ab:61:35:ac:
                    75:41:9f:5a:f0:96:09:04:76:e2:68:92:fc:7f:b1:
                    e3:e0:31:74:84:0b:51:35:57:04:0e:70:dd:7f:b0:
                    b3:00:03:e3:3e:32:a2:fc:b5:aa:6a:e1:fd:f6:08:
                    f9:c0:22:9a:ae:30:cb:f5:d8:c9:32:44:ca:43:0f:
                    bb:db:06:70:14:30:b7:b2:b6:02:90:05:49:8d:0d:
                    d3:c7:96:3d:3b:d5:d1:b3:40:2d:d3:d2:b1:17:2e:
                    7f:f1:11:6d:a9:09:30:cb:7a:99:a3:70:c2:b4:9a:
                    0d:fa:bd:f7:7f:7d:c5:43:b1:ac:77:9d:87:3d:23:
                    36:9f:4b:85:5b:fb:51:3b:55:df:3d:0a:e9:a5:14:
                    38:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D6:16:4B:69:4F:7D:4D:19:D5:55:FD:1C:6C:38:7D:E2:BC:E6:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e792237e-fa1e-3182-a165-8725ba7bd812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:58:3d:4e:ee:60:bc:78:55:f0:be:02:66:47:48:66:64:af:
         d8:d5:d3:60:93:42:cc:d2:98:8c:f0:97:c1:28:43:5f:66:4e:
         6b:01:e9:06:28:5c:b1:2d:a9:5a:1c:17:6a:cc:ac:3e:45:5e:
         78:0b:49:ad:55:8a:74:ff:83:3a:ad:6d:36:61:49:bb:88:3d:
         0c:aa:49:fd:70:75:f9:c2:8e:bb:23:da:d9:24:44:9f:9f:72:
         11:44:ad:c5:5a:41:69:8b:39:f0:bc:f6:74:6f:ea:e4:ac:0a:
         34:21:c8:e3:ee:2f:14:3b:70:8a:58:33:e0:35:c9:d9:ab:83:
         e3:2f:c4:c5:c9:29:49:50:ce:61:4e:8f:47:4a:9e:35:1c:30:
         85:e6:de:b0:3e:9f:10:73:86:0a:f1:4a:68:9b:82:8f:29:2b:
         7a:ed:0e:d5:15:b4:99:07:a0:0a:d4:42:7b:fa:44:03:bb:6a:
         e2:b7:af:70:b0:f1:c7:dc:d7:52:3b:91:a4:ba:6c:42:73:76:
         ff:48:0a:a8:e3:4e:47:64:69:49:e5:75:0f:5e:50:5d:f1:f0:
         bd:ba:18:68:12:97:15:ea:05:26:66:21:a9:bf:f3:c8:14:32:
         64:dd:30:cc:e8:4b:03:59:a0:d8:0c:71:1b:0d:4f:21:cf:13:
         48:cc:dd:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmdulATIY1N+dewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YWIzMjQ2ZjEtY2ZmZi00MzIzLWEwNzQtMGRjYzhiZTM5NTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ0oytdwNxz9lX71FyzI7Uomz/UuoWzz1FUp
9tjm8Lnckui2DTO/o/7UfjibdJz03Tzlv17X5wo4hTbCY4KOJJ4El2IqW2SPKd5w
wa2QxZJnSKxowVdAdx0JuZTQYLgcpwJzfqWshVFjSuwMgNehgYK9t6thNax1QZ9a
8JYJBHbiaJL8f7Hj4DF0hAtRNVcEDnDdf7CzAAPjPjKi/LWqauH99gj5wCKarjDL
9djJMkTKQw+72wZwFDC3srYCkAVJjQ3Tx5Y9O9XRs0At09KxFy5/8RFtqQkwy3qZ
o3DCtJoN+r33f33FQ7Gsd52HPSM2n0uFW/tRO1XfPQrppRQ4ZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO7WFktpT31NGdVV/RxsOH3ivOayMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZTc5MjIzN2UtZmExZS0z
MTgyLWExNjUtODcyNWJhN2JkODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHmtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIJYPU7uYLx4VfC+AmZHSGZkr9jV02CTQszSmIzwl8EoQ19mTmsB6QYo
XLEtqVocF2rMrD5FXngLSa1VinT/gzqtbTZhSbuIPQyqSf1wdfnCjrsj2tkkRJ+f
chFErcVaQWmLOfC89nRv6uSsCjQhyOPuLxQ7cIpYM+A1ydmrg+MvxMXJKUlQzmFO
j0dKnjUcMIXm3rA+nxBzhgrxSmibgo8pK3rtDtUVtJkHoArUQnv6RAO7auK3r3Cw
8cfc11I7kaS6bEJzdv9ICqjjTkdkaUnldQ9eUF3x8L26GGgSlxXqBSZmIam/88gU
MmTdMMzoSwNZoNgMcRsNTyHPE0jM3fQ=
-----END CERTIFICATE-----
Generated at Wed Jul 29 18:17:07 2026 by rpki-client