Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ec4e58ae-4d4e-33cc-bd9a-8d6adef9fcd7.roa
File:                     ec4e58ae-4d4e-33cc-bd9a-8d6adef9fcd7.roa (raw, json)
Hash identifier:          Q6iW23SGHcK7rT7Vf9NuGAUkM1t8+b+tsA5tZ9EaHoo=
Subject key identifier:   96:AB:06:70:F7:77:BD:FB:20:7D:67:E0:E7:B2:6C:31:25:C0:34:25
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584EA7874CC8650A1F3125F11900
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ec4e58ae-4d4e-33cc-bd9a-8d6adef9fcd7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     62610
IP address blocks:        128.1.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:4c:c8:65:0a:1f:31:25:f1:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=327f0e1d-62a9-4e59-80aa-4dfbe3504ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f2:e4:6d:a6:09:44:06:cc:b8:21:04:7c:d4:
                    50:ee:7b:97:ee:91:72:64:2c:cc:44:56:21:39:85:
                    fa:01:e3:76:27:f2:28:dc:6f:db:34:f1:3e:35:70:
                    8f:08:e1:82:47:9d:ed:d4:07:72:f8:3f:f1:61:68:
                    08:be:10:53:1a:f2:ee:ec:ef:87:d8:5a:be:cd:6d:
                    9f:66:f1:08:22:04:3e:7e:d4:d8:27:ea:61:c5:2f:
                    8f:86:71:ab:e2:6f:47:b7:32:06:06:6a:d8:a0:66:
                    c9:4d:d5:35:bc:51:58:a3:45:82:2b:15:01:39:16:
                    aa:06:2a:bf:0a:5d:04:c3:01:26:96:e3:74:fb:10:
                    ea:cc:46:07:e9:94:7d:d9:5e:59:f1:b2:fe:60:61:
                    7d:73:35:59:b6:cf:2d:16:0f:8f:36:69:05:15:52:
                    84:fd:a5:99:c2:07:26:5d:87:65:05:b5:d2:4f:d7:
                    e5:fc:bc:27:fe:10:5a:5e:4f:78:ac:c1:1e:81:58:
                    26:ed:bc:dd:ce:db:39:50:af:78:2e:1a:8f:69:30:
                    b6:1a:bd:7d:0b:c1:33:a1:69:50:dc:79:1a:26:e1:
                    6c:a9:ff:9d:36:df:db:f6:d2:49:2f:45:3d:7a:fe:
                    1a:4b:66:5c:74:ba:24:b3:21:37:57:75:71:11:60:
                    3f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AB:06:70:F7:77:BD:FB:20:7D:67:E0:E7:B2:6C:31:25:C0:34:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ec4e58ae-4d4e-33cc-bd9a-8d6adef9fcd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:76:9d:6d:e6:a2:91:2f:6c:2a:27:c7:14:94:1d:e8:eb:53:
         14:2a:53:f1:9f:f2:9f:a2:f7:23:1f:8c:94:53:00:e2:ce:10:
         a2:97:0f:86:52:a2:18:3e:d0:3e:32:33:f3:15:c9:38:a9:09:
         5b:0c:ed:87:93:a0:07:9c:84:03:9f:2b:80:00:e4:ff:5d:25:
         f8:38:cc:22:df:55:3c:60:f3:3c:4f:56:54:fb:36:cd:05:0f:
         d6:be:fb:ca:c2:c1:df:ad:32:5a:b7:f7:35:ff:a7:27:7e:67:
         42:af:aa:c2:44:b5:17:bb:7d:99:89:2f:d3:56:92:49:3a:cd:
         5e:50:61:8a:d8:ba:8a:ac:77:bd:bc:9a:f9:25:6c:68:5d:32:
         48:c4:a5:5e:65:07:c6:81:23:33:92:c9:cc:a0:71:cb:57:1b:
         1e:1b:c1:c1:9c:86:7d:4e:e4:f5:60:b3:92:ad:9b:1c:1e:98:
         bb:54:8e:f5:ba:20:25:68:5f:44:06:19:cf:05:d3:a1:96:19:
         a7:07:29:4a:96:06:15:95:6c:fa:10:2f:e4:47:b5:fe:c2:a6:
         de:d4:9b:77:9f:af:76:fb:4e:7a:2c:27:77:9f:d9:f9:3b:ea:
         b0:a4:49:4f:11:b0:5b:6c:17:48:26:3a:7a:eb:a4:da:bc:25:
         84:45:86:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:18:07 2026 by rpki-client