Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/658cc9c5-39bc-370d-81cd-718d6b671117.roa
File:                     658cc9c5-39bc-370d-81cd-718d6b671117.roa (raw, json)
Hash identifier:          /QJG9MYM3gmYnqAnSNk6GYvgi8brM+Wya5v+eIeC1O8=
Subject key identifier:   DB:B2:55:AD:04:57:CD:F8:72:AF:80:0D:03:1D:E7:52:1E:3C:5F:BF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EB6E1B2B5D213DBCCB28F8E60
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/658cc9c5-39bc-370d-81cd-718d6b671117.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     212238
IP address blocks:        172.120.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:b2:b5:d2:13:db:cc:b2:8f:8e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=3d579dff-34f1-4496-8f59-0fb32ccf3dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5a:61:f5:e0:e8:5a:ad:0f:1f:9a:68:44:33:
                    67:11:1a:b0:9e:5d:f8:32:b3:00:3e:54:69:aa:3b:
                    20:48:a4:69:7f:e1:53:57:26:de:bf:f1:e6:d5:3f:
                    4b:16:2e:c0:c4:0e:6e:3c:9f:5e:c4:dc:ca:e2:e0:
                    ee:0c:e0:5b:3e:ab:45:89:73:f0:65:81:a4:ea:15:
                    0e:f6:52:2b:cf:31:7e:34:d0:cf:d5:20:34:cc:49:
                    1a:81:fd:e5:fd:88:53:ab:b3:de:e7:2f:0e:b2:56:
                    1b:19:7b:59:10:98:7e:cd:e3:47:7c:ce:ce:cd:41:
                    c4:25:db:b5:e9:67:28:9d:d9:f8:38:f6:c0:94:00:
                    88:44:d9:8e:e6:ff:0d:a7:c7:f1:c8:e2:62:3d:06:
                    ac:92:b8:7a:fd:1f:d8:89:2a:eb:29:e1:62:ac:4a:
                    a2:95:c1:0f:14:97:be:3c:e7:8d:56:00:1f:01:61:
                    49:05:d5:0d:98:a7:d6:ca:33:d0:8e:97:91:f8:c9:
                    85:10:07:01:b8:aa:01:38:19:3c:b0:1e:e7:09:8e:
                    01:46:ab:e8:8b:84:11:1a:3d:37:23:11:17:63:ad:
                    ae:87:14:39:01:9e:6f:bb:19:98:06:66:18:5f:af:
                    ca:af:1f:99:89:5e:b0:0f:96:c6:12:6d:e6:ca:4d:
                    2b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B2:55:AD:04:57:CD:F8:72:AF:80:0D:03:1D:E7:52:1E:3C:5F:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/658cc9c5-39bc-370d-81cd-718d6b671117.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:99:14:ce:1b:2b:21:96:3a:56:b6:75:aa:ff:f4:52:ce:9f:
         7d:5f:da:f1:b4:02:01:e8:04:ef:d8:e1:3e:6d:06:24:ab:2f:
         e6:c4:be:46:38:d2:55:74:da:6c:16:64:a2:6e:ec:b9:b5:79:
         a0:04:52:ec:c8:28:7a:4f:6e:59:b3:95:15:e1:4a:37:49:73:
         d5:86:f6:f9:e8:2f:6a:87:92:eb:33:7e:7d:7c:51:77:db:6b:
         d3:77:c7:fb:a2:ee:68:b5:f9:54:0f:74:62:0f:cc:ce:92:cd:
         1e:c6:d6:f3:2c:62:5e:d3:2c:83:1b:b2:89:3c:b3:23:45:ba:
         36:68:78:2e:cc:29:8d:de:3b:f4:03:00:bf:a4:f1:25:81:5e:
         8f:9e:f0:b1:16:a7:8d:11:83:e1:8c:d7:0c:ec:b3:f1:23:45:
         96:ed:11:a3:f0:25:26:23:86:82:2e:6a:c6:52:22:5d:f0:aa:
         e7:2b:1e:92:e5:5d:72:d5:0d:91:79:0c:c8:54:f0:3d:06:b3:
         90:0b:db:50:55:8d:19:e7:60:fb:8b:f2:d4:e5:89:d2:4b:d2:
         14:27:5a:1e:4e:f8:25:4e:e8:ba:9d:ee:4f:d1:64:e6:9a:95:
         e3:84:d7:58:65:e3:55:fa:da:59:48:2a:f2:dc:e3:53:09:38:
         d6:44:5f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 07:47:50 2026 by rpki-client