Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4ea04e2e-d685-3850-8d43-0be3e4d61b8a.roa
File:                     4ea04e2e-d685-3850-8d43-0be3e4d61b8a.roa (raw, json)
Hash identifier:          iyf115bPVr1Q2EbTS7ixn6SPG8ybwLBWPoAgqaWLCwM=
Subject key identifier:   65:0F:1E:4B:E1:C6:2E:5A:07:56:66:31:92:71:62:E0:7F:99:23:5F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D730A6DB5ADCF1371E442DE80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4ea04e2e-d685-3850-8d43-0be3e4d61b8a.roa
Signing time:             Thu 09 Apr 2026 13:00:30 +0000
ROA not before:           Thu 09 Apr 2026 13:00:30 +0000
ROA not after:            Wed 08 Jul 2026 13:00:30 +0000
asID:                     834
IP address blocks:        172.121.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:73:0a:6d:b5:ad:cf:13:71:e4:42:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr  9 13:00:30 2026 GMT
            Not After : Jul  8 13:00:30 2026 GMT
        Subject: CN=9c679037-08e9-4586-afb1-caef3d425df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f6:35:3c:fe:58:5a:b1:e9:06:80:62:09:d0:
                    4d:b5:d2:a7:0c:8e:e3:be:66:7d:16:0f:49:44:48:
                    e8:61:2b:4b:b8:8e:24:66:d5:7a:99:77:80:69:6c:
                    79:45:ed:18:87:ae:0f:33:3c:28:4b:0f:60:78:12:
                    53:95:bb:40:47:87:a1:f6:07:b5:b4:b1:98:80:1d:
                    4d:ae:e2:cf:f1:5f:fb:fd:d3:3e:1f:ac:bb:a8:49:
                    a1:95:d5:3d:b3:7c:c5:da:4d:f6:a3:07:1d:f0:f8:
                    b7:18:b1:3e:3a:f8:f9:ca:9f:92:7e:a8:7c:ea:d6:
                    27:e5:36:71:00:fe:73:88:3b:f2:eb:0d:56:35:28:
                    bc:92:83:29:c2:38:53:d1:70:d1:ef:eb:ab:5e:e4:
                    31:f5:7d:13:67:76:26:8c:1a:ce:f5:d4:d2:c0:3e:
                    28:98:a0:99:ef:14:14:4d:2d:ac:fb:b6:39:88:02:
                    f2:70:e4:09:30:97:c4:15:41:8a:bb:7a:33:7f:c2:
                    17:da:04:5f:b3:77:6e:02:c8:c3:e1:3e:2b:0a:1e:
                    74:36:fd:49:5b:7b:d3:fb:fa:e6:b9:47:4c:c3:10:
                    40:8d:fc:73:82:be:ee:6d:09:45:ae:ce:15:50:9f:
                    db:dc:57:61:dc:ef:a3:56:56:6c:29:81:11:48:b8:
                    3c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0F:1E:4B:E1:C6:2E:5A:07:56:66:31:92:71:62:E0:7F:99:23:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4ea04e2e-d685-3850-8d43-0be3e4d61b8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:a0:f5:3c:1b:10:c8:39:ed:90:72:14:06:a6:60:ce:49:cc:
         ec:d1:67:79:14:8a:2c:9b:de:99:da:f6:36:a9:83:53:41:88:
         e0:bf:dc:e9:17:82:dc:03:7d:51:58:af:45:fc:5e:ae:c8:2d:
         27:5d:92:74:7e:8c:91:7f:a3:30:96:ad:6b:2d:5c:59:19:7b:
         f0:d2:b9:8b:25:57:e7:d4:87:20:e8:f8:70:26:99:55:ec:ad:
         12:c1:ef:45:48:a4:36:7b:c8:29:9a:50:82:8f:36:57:af:cc:
         16:84:09:20:f5:cf:6c:c3:e7:41:92:f7:66:8f:85:6d:ff:5d:
         87:c6:5c:3e:70:60:68:11:a5:4c:ad:c8:3a:31:9b:ca:0e:f6:
         fe:d3:85:34:c3:7f:29:3f:22:1d:f7:6f:25:45:1c:33:3d:db:
         bd:32:93:71:5b:20:44:2d:7a:6c:dd:d6:b5:25:8e:fa:ca:2b:
         27:95:b9:ed:3f:17:d3:5d:50:21:df:40:d9:af:6b:51:15:68:
         f5:b5:c9:2d:d0:51:45:3a:67:e4:28:69:11:e2:57:a8:30:a7:
         5e:69:cb:14:49:ad:2c:23:73:cf:14:25:67:a7:74:40:dc:15:
         e4:69:ed:2f:44:e7:dc:e3:67:41:18:8a:7f:0f:e1:26:f2:63:
         48:54:66:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1zCm21rc8TceRC3oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDQwOTEzMDAzMFoXDTI2MDcwODEzMDAzMFowLzEtMCsGA1UEAxMk
OWM2NzkwMzctMDhlOS00NTg2LWFmYjEtY2FlZjNkNDI1ZGY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfY1PP5YWrHpBoBiCdBNtdKnDI7jvmZ9Fg9J
REjoYStLuI4kZtV6mXeAaWx5Re0Yh64PMzwoSw9geBJTlbtAR4eh9ge1tLGYgB1N
ruLP8V/7/dM+H6y7qEmhldU9s3zF2k32owcd8Pi3GLE+Ovj5yp+Sfqh86tYn5TZx
AP5ziDvy6w1WNSi8koMpwjhT0XDR7+urXuQx9X0TZ3YmjBrO9dTSwD4omKCZ7xQU
TS2s+7Y5iALycOQJMJfEFUGKu3ozf8IX2gRfs3duAsjD4T4rCh50Nv1JW3vT+/rm
uUdMwxBAjfxzgr7ubQlFrs4VUJ/b3Fdh3O+jVlZsKYERSLg8ywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGUPHkvhxi5aB1ZmMZJxYuB/mSNfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNGVhMDRlMmUtZDY4NS0z
ODUwLThkNDMtMGJlM2U0ZDYxYjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHkgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADGg9TwbEMg57ZByFAamYM5JzOzRZ3kUiiyb3pna9japg1NBiOC/3OkX
gtwDfVFYr0X8Xq7ILSddknR+jJF/ozCWrWstXFkZe/DSuYslV+fUhyDo+HAmmVXs
rRLB70VIpDZ7yCmaUIKPNlevzBaECSD1z2zD50GS92aPhW3/XYfGXD5wYGgRpUyt
yDoxm8oO9v7ThTTDfyk/Ih33byVFHDM9270yk3FbIEQtemzd1rUljvrKKyeVue0/
F9NdUCHfQNmva1EVaPW1yS3QUUU6Z+QoaRHiV6gwp15pyxRJrSwjc88UJWendEDc
FeRp7S9E59zjZ0EYin8P4SbyY0hUZro=
-----END CERTIFICATE-----
Generated at Fri Apr 10 23:15:24 2026 by rpki-client