Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/00bdb35c-a3a3-39ad-913b-ade828312353.roa
File:                     00bdb35c-a3a3-39ad-913b-ade828312353.roa (raw, json)
Hash identifier:          ODys3gge4GdqmIWnXgG9JysIUwL7fDx+8aQ1+EVYlWg=
Subject key identifier:   A6:0D:BA:2A:56:69:85:16:78:8D:4C:4D:C1:72:C5:9D:F6:97:D5:3E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D0A77994CA04B6B88EDC91E90
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/00bdb35c-a3a3-39ad-913b-ade828312353.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     18779
IP address blocks:        172.121.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:99:4c:a0:4b:6b:88:ed:c9:1e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=636d68db-2984-4094-8160-fb4b821f0d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0d:45:31:97:80:8b:4c:fe:44:23:2f:1f:fb:
                    e4:99:b4:32:d6:19:83:cd:14:95:d2:92:df:ae:36:
                    72:f2:61:fa:8e:63:5d:cc:dd:74:16:1a:84:86:62:
                    12:c5:23:d1:2b:1c:72:53:92:6b:bb:6a:9e:e5:dc:
                    39:65:7d:b2:80:97:d9:9a:f3:fd:01:4b:e7:da:c6:
                    e8:54:ec:7b:c8:3a:96:b7:7b:d6:6c:07:0c:14:2b:
                    53:66:b8:ae:2e:da:17:a9:49:27:3f:44:b0:a2:c4:
                    f1:67:a7:92:05:07:4a:97:c0:89:f7:28:49:8a:77:
                    ca:c8:a9:36:d4:d2:5a:5d:4e:ff:ad:71:bc:63:ac:
                    e4:d0:44:9e:da:eb:80:1f:39:7e:b1:c8:fd:63:81:
                    1b:a7:95:fa:96:f3:83:b0:9a:c7:0f:1e:39:0b:e2:
                    77:08:5a:7c:48:3d:1c:d7:58:2e:dc:ba:74:58:1e:
                    a5:f2:da:21:71:4f:c8:39:6d:6a:0c:9c:05:d9:23:
                    25:c0:03:c3:0b:2c:e8:89:51:0d:d9:b1:1f:5d:01:
                    1c:47:aa:65:c2:e9:79:2b:aa:e9:af:27:86:e7:3d:
                    88:1f:8f:f0:cd:43:b5:63:bf:55:9c:4e:2b:ef:c0:
                    d4:b2:27:d9:f5:fe:f9:2b:9e:83:3c:e5:b6:b2:89:
                    69:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0D:BA:2A:56:69:85:16:78:8D:4C:4D:C1:72:C5:9D:F6:97:D5:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/00bdb35c-a3a3-39ad-913b-ade828312353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:d2:8d:a4:2a:41:e3:3c:0b:55:4a:ea:34:4a:96:73:79:ed:
         34:26:41:fc:88:d7:54:a6:22:e1:39:5d:17:63:ca:08:ce:50:
         5f:76:9e:52:6b:2c:59:da:58:3f:a5:9e:27:16:91:9e:bb:68:
         8d:9c:da:2c:33:31:2e:5d:61:fc:c5:b8:e8:03:3b:db:b9:99:
         90:c7:ae:4d:6e:46:42:d1:05:08:f2:27:6b:51:10:2f:aa:5a:
         fa:f7:7a:38:07:2e:a6:7a:d5:54:4c:86:a0:ed:bc:86:72:d7:
         cb:e2:a3:1a:61:7c:c7:d7:aa:c5:1f:6d:71:ac:fb:d0:2d:e6:
         bf:a8:2e:c3:54:c9:af:ac:be:76:29:7e:f4:6d:90:8a:ec:cb:
         15:76:38:ef:0a:a6:da:0e:26:cd:22:0b:aa:45:78:bb:e5:d0:
         06:9c:61:37:d9:e8:55:de:6f:d4:6a:f9:7c:58:c8:96:53:02:
         d9:df:b7:d8:87:c7:e7:2f:2d:bc:51:6e:c9:0c:f3:e5:d8:86:
         91:90:03:8a:01:48:79:06:8f:67:d4:f6:9a:f2:21:d9:1c:04:
         b0:3c:e3:59:ae:8c:9c:e0:75:ff:76:a4:b1:be:7e:3f:3d:19:
         cc:f2:b3:68:cc:23:cc:77:c5:2e:43:db:3a:b9:04:cd:48:64:
         c5:4b:6b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 12:08:02 2026 by rpki-client