Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5192079f-12ce-31a7-81a2-74f178528cee.roa
File:                     5192079f-12ce-31a7-81a2-74f178528cee.roa (raw, json)
Hash identifier:          /h1WvcB0hawtu+RV7nvsmlAAHgoMLe47PrXKRTHjtqo=
Subject key identifier:   D1:3B:2D:C1:D8:1C:C7:4D:6D:96:89:CE:ED:4A:5B:4A:F3:87:C1:DE
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EB6E1AE9F9BE53CAF97C43880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5192079f-12ce-31a7-81a2-74f178528cee.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     212238
IP address blocks:        172.121.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:ae:9f:9b:e5:3c:af:97:c4:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=c0f9f1ed-06e9-445a-95d3-4eba925bf8f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e4:c6:de:f3:90:e0:bc:d8:51:23:f0:15:ee:
                    a0:ca:66:b1:e2:5a:9f:79:17:cc:65:ae:b7:a5:64:
                    bd:6f:4b:2d:4a:6a:8e:27:3b:50:e4:b3:07:24:89:
                    40:4e:8c:52:df:43:99:57:e9:e5:27:7e:d2:32:89:
                    36:73:30:d6:eb:4a:4f:0d:d6:27:5d:1a:73:4e:8e:
                    b0:7e:7c:97:8c:dc:cb:4f:cc:f1:69:7d:c2:fd:f1:
                    4b:4d:ab:10:c3:a0:34:44:66:2f:12:50:3c:48:77:
                    77:24:5b:6b:18:02:d9:4f:b2:ff:ef:91:7d:a7:da:
                    96:46:2d:90:c1:77:b5:3f:ae:35:06:de:d9:c8:11:
                    f3:bd:f7:ee:a2:11:af:2a:f7:18:23:c7:e9:59:77:
                    f9:d7:df:6b:e7:d5:4b:28:18:79:5b:ea:42:a6:e0:
                    1f:6d:fe:66:f1:bc:33:f5:1f:05:1b:a7:4f:43:e0:
                    08:09:45:44:c6:c5:5b:6c:f8:5c:b0:86:92:70:16:
                    35:47:b6:cb:1a:7c:c3:39:5b:5e:22:ee:64:91:f0:
                    0e:ca:21:20:17:66:25:12:0c:cc:25:5d:97:58:0d:
                    76:11:77:84:27:43:30:90:a9:ec:9e:38:07:82:e6:
                    b3:b8:db:c8:9c:4d:52:6d:95:f6:d8:c9:bb:d1:f5:
                    9e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:3B:2D:C1:D8:1C:C7:4D:6D:96:89:CE:ED:4A:5B:4A:F3:87:C1:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5192079f-12ce-31a7-81a2-74f178528cee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:d6:50:dd:d9:f1:89:df:8f:45:28:b2:31:c1:c8:1b:09:65:
         72:86:88:4c:ee:b2:65:38:c0:07:c1:12:ee:48:20:8c:21:0c:
         21:f0:a7:2e:cb:56:ff:14:45:60:ab:ab:c2:5d:4e:0e:60:cb:
         e5:d0:0b:db:71:ef:40:a9:1a:14:17:3c:9f:7f:0f:c4:56:1f:
         60:85:ef:2b:43:dc:19:24:50:94:25:65:d5:50:74:26:03:43:
         ed:e8:b0:7f:1e:59:cb:3b:06:88:1f:07:ad:19:bb:1e:6b:b4:
         78:f2:8f:dc:e9:58:54:54:64:f9:df:49:21:73:dc:c7:72:fc:
         41:ea:6d:d8:4a:d9:c0:48:06:83:2f:52:d0:1d:db:7d:86:c3:
         1a:f3:e0:52:37:b5:0b:f3:06:88:41:0f:f4:4a:49:ed:02:2c:
         7a:22:bc:8f:eb:38:5e:b3:af:da:a5:0d:2b:f1:96:a1:7d:4f:
         8f:aa:e2:78:07:28:78:df:3d:95:e1:2f:94:97:a3:58:75:5f:
         a4:aa:5d:62:39:6b:2b:68:75:51:6d:0b:09:50:b4:5a:78:28:
         74:5e:dd:86:f8:61:15:53:f7:51:e6:ed:36:21:5c:df:58:bc:
         78:ad:fc:c3:4a:e2:6d:ca:b5:ef:b9:a9:84:a9:83:15:78:6d:
         32:03:16:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 07:46:51 2026 by rpki-client