Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/27cd0011-dacc-350f-b73b-2054f8361b34.roa
File:                     27cd0011-dacc-350f-b73b-2054f8361b34.roa (raw, json)
Hash identifier:          LmGMozTAiKdtq9hDc49IaW0MJ+DB+O0N6wouF+8HDiw=
Subject key identifier:   E7:B1:2C:C7:02:87:99:D9:37:D9:3D:18:97:FE:3A:A9:5E:29:32:FA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584DE908AE84CB71F7F07A99D420
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/27cd0011-dacc-350f-b73b-2054f8361b34.roa
Signing time:             Thu 21 May 2026 19:22:25 +0000
ROA not before:           Thu 21 May 2026 19:22:25 +0000
ROA not after:            Wed 19 Aug 2026 19:22:25 +0000
asID:                     9009
IP address blocks:        172.121.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:08:ae:84:cb:71:f7:f0:7a:99:d4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 21 19:22:25 2026 GMT
            Not After : Aug 19 19:22:25 2026 GMT
        Subject: CN=d3d86b43-37ac-4daf-bc0b-9aaee24dff51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:14:10:47:97:21:1e:23:ad:96:8a:ba:29:68:
                    33:af:1f:1c:55:2f:11:d5:95:cd:b6:54:58:90:4f:
                    23:32:2c:12:46:eb:98:c5:38:c4:60:7d:74:92:df:
                    83:29:0b:9a:08:92:9b:23:2b:95:f1:e1:c6:fa:83:
                    5f:e3:ff:c2:d5:88:e8:89:bd:54:92:10:1a:a2:cf:
                    86:cb:80:65:ef:88:3d:5c:2a:28:d5:df:9f:56:c7:
                    53:9d:40:23:87:b8:94:8b:31:5c:4f:85:44:81:40:
                    d7:1a:14:af:26:5a:a1:7f:5e:07:30:33:ce:4e:10:
                    81:54:95:2b:88:39:c1:e3:2e:95:18:58:42:ca:54:
                    e1:71:ee:91:2f:76:50:09:0b:9c:26:01:ca:6c:d6:
                    d6:71:39:77:55:35:60:40:11:ca:0b:fd:e5:0e:51:
                    ad:ea:03:01:07:c6:25:04:54:d1:13:b1:61:e9:63:
                    ef:7a:92:38:8a:ba:5a:7b:f3:fc:21:3e:26:b8:e5:
                    f1:5f:8e:ac:0c:d9:ca:56:0e:56:4a:2f:38:80:48:
                    b3:a7:2b:48:10:57:4b:34:f1:d0:20:ea:bb:ed:57:
                    9e:fc:39:70:de:a2:1c:5f:ac:ef:bb:4b:18:9a:fd:
                    33:05:c2:3b:ed:da:88:04:d3:9b:fa:3e:47:1b:2c:
                    b9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B1:2C:C7:02:87:99:D9:37:D9:3D:18:97:FE:3A:A9:5E:29:32:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/27cd0011-dacc-350f-b73b-2054f8361b34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:81:42:a4:75:35:a2:81:ca:a0:fb:77:1d:e9:c4:8c:ab:71:
         5c:58:7b:24:2f:98:7d:5d:6e:21:61:95:34:73:76:68:37:9c:
         ce:ad:4a:7c:43:e7:51:33:ee:e3:ee:37:72:f6:25:53:da:38:
         e4:50:dd:b2:c0:18:17:24:e6:d2:c7:94:f0:77:d8:0f:a3:5c:
         ea:65:79:e7:b3:7c:cb:bd:15:08:cc:30:53:2e:12:af:2c:94:
         a3:b8:e4:6e:60:ce:27:97:90:93:d2:93:29:ef:b0:b3:f0:08:
         9f:78:cb:0f:2c:c2:18:b4:66:29:f7:5f:9d:23:2c:70:c4:53:
         77:b9:c4:7d:96:d2:09:3c:cd:14:2c:d6:13:a9:c9:2e:bd:e1:
         4f:dc:99:ab:e1:47:4d:9f:0e:4a:8d:a2:96:5f:e4:19:cd:90:
         ab:0b:96:f1:eb:4b:6a:63:d8:2a:aa:29:0d:a6:c4:03:1a:e6:
         4c:9c:32:74:2d:6d:ac:e1:8e:9b:ea:c5:77:ba:4b:ec:46:60:
         e4:3d:d5:e9:bd:d4:f9:0d:04:11:79:eb:fc:5c:e1:c0:0f:59:
         5c:20:7d:39:a4:ca:8d:11:21:e1:92:eb:49:f4:63:e7:ec:09:
         8f:83:8c:b0:4f:c1:97:d0:9e:ca:86:3c:88:c5:ea:ae:8c:7b:
         e3:23:48:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 05:32:22 2026 by rpki-client