Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/399cc787-6259-3e29-b201-9173f2995235.roa
File:                     399cc787-6259-3e29-b201-9173f2995235.roa (raw, json)
Hash identifier:          Fn/VIhoc6WZycgAxkdxmYIc4zjlPGgsLqeDkSwBbQ+o=
Subject key identifier:   5C:A2:A9:41:DA:C2:9A:0E:4E:14:11:17:78:04:FE:AE:EF:A5:94:AC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F576812FBDD62A9FDD23E9000
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/399cc787-6259-3e29-b201-9173f2995235.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     44559
IP address blocks:        172.120.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:12:fb:dd:62:a9:fd:d2:3e:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=1a5d55e0-c6da-4b14-8f69-3572caa64190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c8:8e:38:30:c3:35:15:bd:b1:48:1a:2d:54:
                    79:a1:f2:5e:1c:a8:78:35:c3:f6:2e:81:5f:8d:62:
                    d7:4c:d6:c6:95:ad:fd:2c:ae:a6:46:6c:38:f9:8e:
                    40:90:61:95:1d:8c:11:a9:af:98:b2:72:84:45:ed:
                    34:20:0f:22:d0:1b:86:e0:82:20:e6:e8:9e:dc:a3:
                    e4:c7:32:4e:00:90:20:73:cc:f8:fd:e1:90:7d:ff:
                    d1:01:91:1e:2c:d2:bb:08:cd:63:f0:be:a2:08:53:
                    96:9f:31:7f:d4:1e:9f:31:e4:6f:5a:4c:eb:e4:33:
                    f3:d3:c2:9d:f4:e2:f2:8a:53:c8:86:b6:b0:13:7e:
                    91:b2:ae:1c:41:b1:88:c3:92:ea:ff:09:e0:a0:c9:
                    c5:22:eb:0e:3f:b8:3b:be:47:ec:22:7f:80:35:c5:
                    68:6f:ba:cf:33:bc:8c:ce:67:93:b7:bf:71:48:dc:
                    8a:41:e7:f3:bd:00:55:57:60:fe:81:8e:bc:3c:d4:
                    0e:22:9f:c3:a0:b5:db:ea:3c:a2:8c:62:7c:b6:9c:
                    a8:ab:60:a3:a9:71:ea:d8:70:d2:05:34:5a:9d:b5:
                    fe:93:a4:95:93:b3:d8:47:fd:46:68:be:dc:84:1f:
                    5d:29:59:96:ec:cd:b1:36:ea:6c:9f:c1:3d:dc:ed:
                    20:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A2:A9:41:DA:C2:9A:0E:4E:14:11:17:78:04:FE:AE:EF:A5:94:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/399cc787-6259-3e29-b201-9173f2995235.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:a0:57:16:9e:2a:98:a9:6f:26:07:c0:14:23:90:9f:0e:6a:
         de:04:f2:14:39:8d:6b:fc:d8:04:e4:04:48:fd:0c:a2:5a:0f:
         74:bd:1d:80:f2:51:df:bb:45:56:c8:91:b7:82:6f:88:37:2e:
         7b:e8:28:1a:b1:f9:17:18:25:e2:c4:06:f7:4a:17:43:21:dd:
         9d:39:ff:b8:bb:e0:f8:de:6e:e8:06:0a:2d:38:7f:ce:0a:94:
         bb:e8:d5:36:74:b6:22:5a:36:65:6b:ee:94:48:06:37:08:dd:
         7d:28:fc:d2:b5:5b:1c:c7:6b:3d:1f:0c:95:3f:55:09:b7:a2:
         ec:cb:9f:57:b5:df:9c:b7:4b:ae:a1:35:5f:7a:03:99:a3:2a:
         e9:4d:42:a6:74:dd:3b:4a:f4:b0:c2:73:85:d6:b8:4e:c0:3b:
         9e:1f:c3:59:49:10:49:5e:ce:cd:83:9c:78:42:ac:3d:a3:cf:
         0f:bb:8a:82:e8:41:cb:2c:99:b2:ee:e4:9e:23:66:31:1d:a2:
         d4:b0:7a:be:b0:ef:36:9a:b7:10:11:1a:15:de:73:05:57:c6:
         cd:cb:3d:c2:cc:bb:bd:f0:79:96:0a:99:51:6b:8e:34:bd:2d:
         a5:1c:3d:25:b5:76:8c:ac:dc:08:b4:1a:1e:6e:fb:64:28:46:
         70:a8:92:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:05:54 2026 by rpki-client