Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/688f32d4-967b-3f28-9f06-66a30acc82ae.roa
File:                     688f32d4-967b-3f28-9f06-66a30acc82ae.roa (raw, json)
Hash identifier:          enZuQTt1YO+a87fjiHrTIKNiIMGAHMBArqpVpqy5YEE=
Subject key identifier:   48:80:C8:25:D0:C2:BC:AB:D2:16:27:8F:24:B1:C7:12:F5:6A:86:C5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F576826454D83CC93CB99F880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/688f32d4-967b-3f28-9f06-66a30acc82ae.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     44559
IP address blocks:        172.120.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:26:45:4d:83:cc:93:cb:99:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=9f0e14f8-070e-4ba7-b88b-9725efcdbad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:99:2b:06:ce:56:bc:70:8a:d3:83:bb:c8:27:
                    6a:8b:5f:c3:ee:01:bc:ea:c2:4d:eb:e8:e3:d2:2a:
                    a6:43:ab:7a:19:b7:3e:a9:8b:be:f4:97:da:f1:96:
                    f7:63:66:0e:8b:71:a0:b2:4e:af:0e:eb:02:5c:71:
                    1d:f5:f6:6f:3c:b6:e0:41:57:14:1e:6f:5f:e8:11:
                    3e:b6:13:71:3e:b3:bc:be:6e:30:98:b0:b3:ac:16:
                    21:33:f8:22:4d:1c:d2:b2:1a:02:95:4f:08:69:a9:
                    92:26:38:8c:df:66:7b:6c:24:c0:c8:af:5a:e2:79:
                    36:c0:92:b8:6c:2c:d6:85:d7:91:e2:44:03:d6:c3:
                    5c:95:6a:ba:73:f1:3a:ae:11:05:d9:15:69:1c:3a:
                    99:df:23:a8:7c:fe:11:34:4c:9e:6f:3b:c0:5b:7d:
                    e4:bb:7e:d5:a8:02:d3:2e:22:e5:3c:e5:a6:17:67:
                    96:83:61:40:ab:df:24:84:89:4e:9b:9c:6e:f9:ff:
                    52:ca:48:70:50:4e:29:ec:74:41:43:7a:49:7e:cd:
                    3d:0a:c2:17:1e:67:bf:c5:c6:27:45:f6:e3:19:f0:
                    f1:28:d4:a7:51:ab:9d:8e:ad:83:64:52:a9:fd:5c:
                    09:b2:fe:ec:33:78:2a:78:81:9b:07:d8:e8:aa:18:
                    e7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:80:C8:25:D0:C2:BC:AB:D2:16:27:8F:24:B1:C7:12:F5:6A:86:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/688f32d4-967b-3f28-9f06-66a30acc82ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ab:0c:d0:c8:59:1e:a6:c4:5a:c7:21:2a:f6:a4:c4:68:d7:
         3f:a5:d6:22:a9:83:1a:d0:33:3f:c5:0e:59:64:f2:be:6c:ea:
         fa:67:dd:b8:f8:2e:9e:39:b7:af:8e:cd:ad:67:eb:39:9e:b4:
         8b:62:44:d4:d6:6e:28:58:58:04:5d:59:30:94:bc:7b:d9:34:
         34:62:e4:2b:67:fb:13:5a:9e:fc:6a:61:f6:e8:19:9e:7f:f9:
         cf:71:14:ce:b9:f6:f8:d4:91:40:8d:c6:1a:41:7d:2a:26:3a:
         9b:4f:b2:2e:d1:09:6d:df:fc:1d:63:22:ba:73:31:6a:f3:48:
         c0:46:a0:b8:3e:65:fc:ba:47:a0:c0:3d:8b:3e:e4:c5:d2:46:
         5f:1b:2f:1d:48:fd:da:e1:56:67:1c:01:22:f5:2d:47:7f:cf:
         48:09:31:09:84:9f:3a:2b:31:ed:c6:f8:91:94:54:17:03:e7:
         5c:75:da:6a:b7:40:a8:cc:19:b7:3b:d6:3e:9d:d5:82:94:43:
         28:d4:af:fe:ef:6d:fb:bb:e6:fe:d4:57:e9:e2:a3:c5:4e:2a:
         b4:46:8e:76:61:b8:d6:d7:b9:26:ad:79:45:71:49:57:2f:46:
         e8:64:14:52:0f:1c:51:97:3c:71:60:0a:c3:5f:3c:19:1f:88:
         ea:96:cc:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XaCZFTYPMk8uZ+IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk
OWYwZTE0ZjgtMDcwZS00YmE3LWI4OGItOTcyNWVmY2RiYWQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZkrBs5WvHCK04O7yCdqi1/D7gG86sJN6+jj
0iqmQ6t6Gbc+qYu+9Jfa8Zb3Y2YOi3Ggsk6vDusCXHEd9fZvPLbgQVcUHm9f6BE+
thNxPrO8vm4wmLCzrBYhM/giTRzSshoClU8IaamSJjiM32Z7bCTAyK9a4nk2wJK4
bCzWhdeR4kQD1sNclWq6c/E6rhEF2RVpHDqZ3yOofP4RNEyebzvAW33ku37VqALT
LiLlPOWmF2eWg2FAq98khIlOm5xu+f9SykhwUE4p7HRBQ3pJfs09CsIXHme/xcYn
RfbjGfDxKNSnUaudjq2DZFKp/VwJsv7sM3gqeIGbB9joqhjnmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEiAyCXQwryr0hYnjySxxxL1aobFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNjg4ZjMyZDQtOTY3Yi0z
ZjI4LTlmMDYtNjZhMzBhY2M4MmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHiwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHSrDNDIWR6mxFrHISr2pMRo1z+l1iKpgxrQMz/FDllk8r5s6vpn3bj4
Lp45t6+Oza1n6zmetItiRNTWbihYWARdWTCUvHvZNDRi5Ctn+xNanvxqYfboGZ5/
+c9xFM659vjUkUCNxhpBfSomOptPsi7RCW3f/B1jIrpzMWrzSMBGoLg+Zfy6R6DA
PYs+5MXSRl8bLx1I/drhVmccASL1LUd/z0gJMQmEnzorMe3G+JGUVBcD51x12mq3
QKjMGbc71j6d1YKUQyjUr/7vbfu75v7UV+nio8VOKrRGjnZhuNbXuSateUVxSVcv
RuhkFFIPHFGXPHFgCsNfPBkfiOqWzMc=
-----END CERTIFICATE-----
Generated at Sat Oct 10 17:54:18 2026 by rpki-client