Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e9d3114a-5b31-3607-8329-ac991f69fd4f.roa
File:                     e9d3114a-5b31-3607-8329-ac991f69fd4f.roa (raw, json)
Hash identifier:          B8Kjg69g558/RMrNnTlLQ/0Mry+qvHhMeeefu1b/8tM=
Subject key identifier:   D2:B8:6F:E9:FF:48:49:84:F3:2C:18:48:C6:C7:DF:7F:CC:38:7E:0F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D7A0527BB6C7F02F0284C9800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e9d3114a-5b31-3607-8329-ac991f69fd4f.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     214238
IP address blocks:        172.120.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:27:bb:6c:7f:02:f0:28:4c:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=eb8d4b47-59f6-4aca-9617-11a811eef9bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d8:06:a6:ff:f7:d7:95:eb:94:89:dc:d7:24:
                    33:b1:88:8e:17:8b:46:be:ed:df:2f:ea:1f:2b:78:
                    59:21:b4:f2:1c:25:42:a9:92:f5:af:e8:19:fd:96:
                    fa:12:22:e6:6d:3a:7f:40:24:40:1a:59:b9:a9:9b:
                    80:bc:0e:fb:d6:34:44:21:bb:54:21:3a:56:7a:35:
                    61:77:3b:84:ec:e3:5e:c5:fb:67:1a:13:94:40:39:
                    aa:54:e7:f2:1c:6a:a4:b9:e7:4e:c7:0b:b4:6f:12:
                    98:67:2c:0a:53:f3:f6:58:1c:a0:d8:24:fc:f4:36:
                    69:49:86:32:18:cd:ba:76:b9:98:ec:f8:39:f3:2e:
                    f5:f0:bb:97:04:3f:d9:46:47:19:51:77:65:95:a3:
                    51:a0:27:eb:e0:0d:97:47:22:dc:4c:ea:6d:db:1b:
                    a2:f6:7b:5e:a8:2d:03:ec:4c:a5:2a:cb:94:3c:7f:
                    b0:40:9a:50:42:12:6d:00:98:44:01:f0:9a:42:a3:
                    da:66:12:52:04:aa:26:af:b5:35:e4:af:61:a8:bb:
                    72:63:0b:f7:25:ea:2a:10:2e:fc:aa:4a:9e:07:3d:
                    5e:bf:32:18:72:98:66:fd:8f:88:c8:59:ca:00:73:
                    d2:ba:3c:01:ab:80:4b:a7:cf:e3:b0:e5:b8:6c:cd:
                    9d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B8:6F:E9:FF:48:49:84:F3:2C:18:48:C6:C7:DF:7F:CC:38:7E:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e9d3114a-5b31-3607-8329-ac991f69fd4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:5c:fc:95:00:ed:db:51:04:b5:32:ea:7e:e6:5e:d7:d6:f6:
         87:47:81:8f:cf:f8:ac:f6:b6:60:32:08:6d:c7:dd:d5:9b:f7:
         38:25:04:f7:d8:5f:d9:53:8b:8b:88:1f:d9:5b:84:44:54:9f:
         d9:fc:59:1a:ad:46:c9:6b:34:f5:fe:86:63:8e:46:d7:fb:71:
         cc:2c:c2:03:09:ce:32:b7:d7:71:1a:93:b7:db:f1:4d:65:0a:
         13:f7:9f:db:a9:a5:14:06:72:31:8b:5f:7e:90:e5:1f:30:d6:
         75:9f:fd:a7:bd:95:fd:a9:f4:2a:a8:3b:f5:31:fb:35:9a:3d:
         7f:bf:e8:66:b3:21:54:01:f9:64:a4:20:72:30:40:62:40:8d:
         7e:3d:7b:69:85:2e:b5:1e:7e:e4:ed:cc:bf:aa:46:5e:31:f1:
         f5:56:8d:ca:2b:81:37:a5:c3:d0:4d:8a:51:64:a0:61:8d:7c:
         c5:4a:16:7c:53:e9:01:b4:11:f6:11:c1:7c:ac:7b:92:aa:b8:
         5a:63:fe:00:76:49:cd:7b:3e:55:5a:01:eb:b4:11:52:22:5a:
         b4:63:c2:04:a9:60:b4:98:78:48:24:f6:ac:d1:3a:c9:18:0d:
         07:ca:85:8d:b8:5e:94:40:ae:12:9a:90:d5:70:5a:4b:ed:d1:
         25:58:1c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:33:15 2026 by rpki-client