Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/34c02dcf-96a7-3053-bc5d-bafcc1a6a0e2.roa
File:                     34c02dcf-96a7-3053-bc5d-bafcc1a6a0e2.roa (raw, json)
Hash identifier:          ZgUamlsoKEpprZPxrzFx1naY0Z8wYsEz7r/uR6OnsK4=
Subject key identifier:   E2:F5:E5:5A:98:DA:A2:8B:DD:1A:10:86:4B:28:02:6C:80:4E:D5:E3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F3E4803DE6C6410DBE24CB500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/34c02dcf-96a7-3053-bc5d-bafcc1a6a0e2.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     35554
IP address blocks:        172.121.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:48:03:de:6c:64:10:db:e2:4c:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=aafc6635-c972-489a-b3f9-1effd68edc24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5b:c4:79:0d:35:d7:5e:6d:1d:87:5a:8e:ff:
                    90:b1:97:ce:18:e7:9a:85:39:5e:a7:99:dc:67:6b:
                    a6:b2:7f:3a:b2:6c:47:54:e1:4d:f1:dc:e7:35:f2:
                    bb:28:b1:b8:00:35:cf:ce:40:98:cd:4a:15:50:e3:
                    b6:e3:de:54:10:f1:de:2c:81:18:2d:d3:00:97:c9:
                    7e:4b:3b:4c:80:b8:6b:ef:02:0d:cb:db:5e:35:f9:
                    a9:41:b6:a7:56:df:79:92:4a:2f:b5:91:c9:8a:55:
                    6e:89:77:1b:9b:4e:12:0e:33:18:7c:f0:e6:dc:be:
                    52:2c:10:86:47:9d:64:33:73:14:19:02:45:87:f8:
                    6f:4f:f5:e3:6e:aa:dd:73:68:f9:11:a4:8e:2a:df:
                    d9:9c:40:9e:e9:dd:e3:72:88:d5:18:d2:35:c1:05:
                    55:73:78:77:b5:57:8c:14:c4:a8:0a:4c:d0:e3:b2:
                    1c:25:09:ca:7c:6a:1b:a7:a0:fd:93:f8:33:60:4f:
                    b4:85:94:f1:38:ef:98:db:6c:77:7f:c4:db:aa:17:
                    98:05:90:20:cd:65:62:ea:e1:7d:d8:42:c1:88:fc:
                    7b:d5:46:1d:7c:3c:1a:e8:78:0d:25:7f:b9:14:f9:
                    18:ae:c9:da:b7:b5:7e:2c:8d:24:3f:f7:af:c0:90:
                    bb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F5:E5:5A:98:DA:A2:8B:DD:1A:10:86:4B:28:02:6C:80:4E:D5:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/34c02dcf-96a7-3053-bc5d-bafcc1a6a0e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:f6:85:fd:8c:6b:68:17:d2:15:ae:52:35:c9:9a:c2:69:13:
         ab:c7:13:9f:37:e7:d4:e5:02:da:06:54:65:8c:54:89:32:11:
         84:50:3b:a7:4d:1d:37:8f:06:ee:1f:f4:30:bf:0d:35:c0:44:
         85:a5:60:71:e2:a2:53:68:ef:9a:53:f6:ce:a8:dd:16:49:81:
         25:e6:3b:c0:0b:4e:36:23:5c:a9:9a:4e:c6:17:ae:b7:3c:95:
         17:84:df:71:0b:7f:2f:cd:fb:e4:8c:2f:83:f1:67:4b:48:42:
         d9:76:85:82:67:f7:9c:2c:13:53:10:30:14:fc:05:44:1b:65:
         0d:0c:00:ad:a8:35:47:d3:d8:72:b2:4f:12:3a:27:bb:e5:bd:
         9d:82:f5:ec:2a:24:37:e6:25:a8:9a:0c:3e:f4:90:b0:82:ff:
         ca:f4:19:db:a6:65:37:a4:86:03:51:95:32:3a:0f:87:3c:f2:
         bd:14:88:78:00:71:c6:1f:4c:8e:6d:d6:7c:38:da:00:2e:2e:
         c7:6c:16:dc:9f:48:13:cb:80:e9:2d:79:11:4c:d4:88:08:39:
         b8:e5:26:98:d1:a5:f4:40:29:6c:f6:8d:56:dd:3d:53:bb:18:
         ca:a0:d9:b1:04:3b:0f:83:e0:14:ab:53:a4:7e:64:3c:a4:2c:
         ab:42:14:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:28:41 2026 by rpki-client