Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/304d3c43-f481-39f8-896f-543b144dcf35.roa
File:                     304d3c43-f481-39f8-896f-543b144dcf35.roa (raw, json)
Hash identifier:          TQyPng1psRs7EnYG+lazxUbnRMD38Fh2WR7fsLrql/E=
Subject key identifier:   92:5F:67:02:89:BC:96:C8:50:7C:14:CA:B1:39:72:5C:E1:AF:EC:1A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584E8DEF9ADEE8B46A55648B45F0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/304d3c43-f481-39f8-896f-543b144dcf35.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     5065
IP address blocks:        172.120.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:9a:de:e8:b4:6a:55:64:8b:45:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=a7ecfb43-932c-4d2c-a9db-b263e5ab82b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:77:88:2e:c9:78:34:6d:42:fb:2d:88:e9:bc:
                    7e:7c:a0:ec:72:af:4b:11:a9:94:eb:aa:36:1b:fa:
                    2f:35:1e:92:ec:0c:aa:c4:b9:7a:44:90:5e:0c:68:
                    1c:69:c2:40:fc:fd:41:f8:c5:d1:52:af:aa:72:77:
                    75:01:d0:70:00:2b:9b:67:2d:ac:ab:9d:50:f5:c3:
                    b7:65:5b:28:c6:5c:76:2d:38:58:20:bc:7c:91:61:
                    2b:f3:cc:3a:e5:7e:ea:fe:15:10:78:11:2e:b0:70:
                    11:4f:3b:f9:f4:17:3e:d2:75:80:c0:cd:b3:62:fd:
                    0a:54:8a:dc:52:75:b5:77:dc:32:6d:4b:7f:7b:2f:
                    cf:17:30:04:a2:4b:0d:41:af:38:ba:fc:2d:1e:82:
                    7b:d2:0f:26:c6:b1:86:4d:f0:d5:65:17:4b:5c:26:
                    ab:3f:09:c6:2d:7f:ec:f0:e0:7b:5b:1a:0e:ff:76:
                    61:96:60:75:bf:98:d5:41:7b:4b:3c:f3:24:87:95:
                    bf:bb:f3:78:a5:67:d4:fa:6c:1d:a2:de:cf:31:30:
                    c0:92:e9:15:2a:ae:3c:34:02:83:13:4e:e1:0c:a4:
                    d3:b8:74:c2:64:38:43:a7:46:8e:6b:68:5c:8d:51:
                    6f:f6:0c:57:38:f0:8f:53:d1:cf:38:b4:62:53:7e:
                    54:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5F:67:02:89:BC:96:C8:50:7C:14:CA:B1:39:72:5C:E1:AF:EC:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/304d3c43-f481-39f8-896f-543b144dcf35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:1c:d3:4f:e8:66:fa:3a:c3:28:f5:c2:bb:02:dd:18:7a:d6:
         c5:c8:b5:a9:42:06:f9:44:88:d8:86:9e:11:11:f6:ee:1c:db:
         28:c8:c7:0d:db:1b:1d:a0:a5:87:22:2d:13:b5:f7:36:be:4d:
         b4:82:12:0b:9c:0f:c2:10:d8:73:f1:28:b2:25:e3:d1:64:59:
         dd:94:de:92:f6:d0:72:90:31:ba:35:e9:74:37:54:47:a0:17:
         e7:74:a3:de:cf:99:03:ac:09:07:ec:cc:52:75:31:19:b1:94:
         6b:38:a4:26:22:56:3e:5e:46:c2:49:9c:39:d4:7a:34:24:d6:
         d7:b0:80:20:fc:a8:7e:31:8e:56:b3:2a:57:b2:c4:c6:c9:15:
         61:af:04:1e:1f:29:a6:5e:fd:89:ac:03:32:ab:01:20:61:38:
         2a:2b:0b:ec:22:79:2d:de:18:83:92:04:6c:7c:7a:89:4b:c1:
         0a:a7:8a:74:23:c1:3a:8e:16:c0:8f:24:4a:e4:7b:ea:43:b9:
         27:88:51:9a:00:a0:10:f4:a5:fb:7a:15:75:af:5d:c9:29:b9:
         20:8e:ef:21:7a:ef:1a:89:66:15:29:c6:a1:05:dc:2d:4c:5f:
         39:ca:89:94:04:8c:e3:e0:b4:75:6a:68:25:6c:80:45:a9:1f:
         71:cc:db:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 13:32:58 2026 by rpki-client