Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fad1bf4a-3062-350a-830d-ca1bb0e9c9da.roa
File:                     fad1bf4a-3062-350a-830d-ca1bb0e9c9da.roa (raw, json)
Hash identifier:          yYrB2G98x/xDrIvX0zhTVxPgWUjDEGvAOsuA37mYD9Y=
Subject key identifier:   73:93:03:9D:F8:AB:CB:B7:01:85:08:93:D3:59:71:42:6F:AF:D5:1A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584DEB15FA4ED8DC6519905660B0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fad1bf4a-3062-350a-830d-ca1bb0e9c9da.roa
Signing time:             Fri 22 May 2026 13:00:31 +0000
ROA not before:           Fri 22 May 2026 13:00:31 +0000
ROA not after:            Thu 20 Aug 2026 13:00:31 +0000
asID:                     18779
IP address blocks:        172.121.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:15:fa:4e:d8:dc:65:19:90:56:60:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 22 13:00:31 2026 GMT
            Not After : Aug 20 13:00:31 2026 GMT
        Subject: CN=c1ecaff7-4c90-41dd-9b49-1164e52afe77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ea:31:c2:53:9c:35:e9:75:65:8f:b0:88:72:
                    20:b1:65:6c:3e:46:4c:36:db:de:1b:d1:dc:77:7f:
                    69:69:ec:d3:16:a8:f9:bc:d0:ce:be:19:d9:4a:5a:
                    1f:f6:54:d7:fb:99:9a:54:27:56:ab:29:6c:74:1e:
                    6f:f7:49:3c:65:65:50:c2:de:4e:9e:28:ed:7a:f4:
                    6c:b1:57:70:8e:22:e1:f7:00:fb:b2:d2:c4:8b:8d:
                    ad:22:f8:eb:e2:cf:32:6c:b0:ed:93:8f:b2:18:15:
                    f4:e1:72:2c:9d:c0:8a:97:7c:fa:0a:b1:c9:e3:59:
                    33:34:39:d9:67:93:73:1c:ab:49:81:c0:99:09:76:
                    ce:d7:8b:e8:79:e1:a7:45:44:12:11:38:b5:2d:22:
                    e8:4d:d7:d7:f3:b6:d0:38:ef:d7:32:7c:98:6d:92:
                    de:66:b8:a8:fd:b0:58:f5:ab:83:b4:46:ea:13:ed:
                    c4:2e:51:03:99:15:8a:e9:3f:2b:27:04:d8:17:0d:
                    dd:b4:f7:86:0d:c0:11:bb:e1:52:52:a5:3e:72:50:
                    da:b0:d3:d4:41:7a:e1:05:7a:68:ee:b4:23:74:dd:
                    b8:0b:a6:be:ea:68:2f:68:9b:c0:78:ff:61:41:d3:
                    b3:0b:ca:a7:6d:2c:e8:cb:16:9c:90:a8:ee:08:9e:
                    b4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:93:03:9D:F8:AB:CB:B7:01:85:08:93:D3:59:71:42:6F:AF:D5:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fad1bf4a-3062-350a-830d-ca1bb0e9c9da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:4a:a5:19:1a:0a:d1:c9:53:d5:56:d2:8d:1e:ac:25:80:ef:
         88:8d:50:0d:b1:c6:ae:5e:dc:61:a7:fd:b2:f0:04:59:11:51:
         2a:75:8d:21:7b:16:72:b2:c3:43:06:b4:24:c2:3d:f7:04:94:
         d6:df:89:e8:47:3a:1e:d5:9f:35:3e:67:7d:ca:58:f5:78:b7:
         41:1c:33:4a:6d:62:24:07:47:ba:43:7d:03:68:6f:24:a8:64:
         9f:09:8d:79:c5:33:0b:cb:02:8f:42:1b:60:2f:17:cf:5a:8a:
         19:06:da:cb:96:df:d5:5e:40:7b:df:d3:14:00:ee:05:a2:4d:
         31:e3:07:1b:a2:31:56:cc:0d:1c:de:21:a9:c5:f4:bc:05:a7:
         6d:6c:9b:2d:28:c0:ef:b4:f6:fb:58:2e:7f:f0:1d:66:78:3f:
         d2:a3:52:53:7d:9a:eb:73:a0:2c:bf:4c:fa:bc:07:0c:eb:84:
         9f:15:d8:98:97:8a:d8:65:c7:3a:31:44:0d:81:f1:a8:ff:4f:
         26:95:07:22:01:f7:2f:ed:7b:36:1b:8a:2a:5f:60:db:0e:ed:
         24:8f:5e:c7:dc:ba:bf:28:0f:21:9c:b9:8c:f3:04:85:f5:31:
         5c:a7:f2:cf:3a:90:b7:57:d5:20:f7:d5:41:8a:1f:df:e1:d9:
         40:aa:78:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:08:45 2026 by rpki-client