Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/776f6baf-4ae7-3224-9f10-84c407d9876b.roa
File:                     776f6baf-4ae7-3224-9f10-84c407d9876b.roa (raw, json)
Hash identifier:          Th4OvA38KOye4a/zblEIjcmpAVbt+WS1C+qmb7K5SM8=
Subject key identifier:   BA:FF:91:B7:86:1E:87:5A:CD:CA:B0:3F:0F:62:54:30:5F:C1:88:DB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D1D0466D4E8AE4F5373552F80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/776f6baf-4ae7-3224-9f10-84c407d9876b.roa
Signing time:             Mon 09 Mar 2026 17:28:53 +0000
ROA not before:           Mon 09 Mar 2026 17:28:53 +0000
ROA not after:            Sun 07 Jun 2026 17:28:53 +0000
asID:                     398781
IP address blocks:        172.121.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:04:66:d4:e8:ae:4f:53:73:55:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  9 17:28:53 2026 GMT
            Not After : Jun  7 17:28:53 2026 GMT
        Subject: CN=8ae9fadd-c3ab-4ba0-bf22-d84f77f1b25e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7d:6f:16:28:35:d1:9c:12:83:db:1e:b3:1b:
                    d8:52:4e:ca:bf:6c:13:0b:ed:27:a2:ae:96:3d:c8:
                    29:08:03:f2:3e:e7:27:b9:23:4e:4c:45:d4:1e:f5:
                    e2:c9:98:91:e3:8f:61:26:6c:99:06:90:c5:b9:51:
                    e5:02:f4:5b:72:45:38:b4:2a:6f:73:53:4e:91:d6:
                    7f:78:d6:af:b8:17:6c:9b:01:86:28:1a:dd:33:88:
                    2d:6c:80:03:80:9f:58:1e:7b:99:f6:84:15:f8:8a:
                    04:58:4c:0a:9d:e2:ff:ab:13:e8:ce:99:eb:12:85:
                    41:17:a6:57:a4:d8:aa:3e:44:b0:46:87:80:e4:b9:
                    f7:c0:c1:1a:1a:c2:e8:98:f8:30:12:b6:21:20:ab:
                    0b:2f:9d:78:03:b9:23:b3:c8:50:f4:61:b5:15:f6:
                    39:78:d6:a6:fa:be:52:dd:87:ed:1d:04:ad:22:fb:
                    00:f4:c2:8e:31:63:ca:9b:82:1c:57:98:b6:0b:6c:
                    40:cd:e3:f4:7e:8d:8c:c3:e5:54:19:ec:b8:96:79:
                    48:bb:cb:b7:99:f0:79:bb:c6:b5:9c:13:cd:22:e7:
                    3f:11:8a:73:57:1c:d0:6a:ef:44:63:f9:3c:7b:7d:
                    27:dd:14:b3:d0:16:e0:8f:82:f3:26:47:72:57:94:
                    c6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FF:91:B7:86:1E:87:5A:CD:CA:B0:3F:0F:62:54:30:5F:C1:88:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/776f6baf-4ae7-3224-9f10-84c407d9876b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:93:3d:50:4f:90:02:38:7d:34:5f:8d:ca:16:93:80:69:7b:
         4c:ff:ff:48:39:f2:30:10:aa:36:65:0b:bc:a8:60:f3:2a:9d:
         08:97:af:2a:b3:29:f7:aa:c0:27:3f:41:8e:26:90:e3:03:34:
         03:7a:82:e1:45:4b:51:61:d7:1f:9a:94:b4:73:16:ad:5b:f5:
         4a:3f:92:28:34:c1:6e:5b:58:06:e3:af:7c:d3:51:a0:4b:8b:
         24:f2:35:31:63:a6:ea:d5:9a:8d:83:1c:a7:2e:5c:90:86:ac:
         5f:73:3b:6d:04:0e:80:17:66:66:5e:6c:16:35:ca:77:13:83:
         b0:b8:86:f0:73:c8:44:c1:26:fa:d7:1e:dd:77:cc:82:08:39:
         9a:e1:8e:bb:fd:e3:12:ed:f4:b5:b2:3f:68:9e:ea:84:32:fd:
         fd:80:4b:89:98:f1:a6:0b:e9:bd:07:28:8a:9f:32:8f:fb:54:
         9b:3b:4a:e3:1c:cc:f5:26:10:1f:2d:d8:0e:99:80:88:ff:ae:
         aa:b1:02:ed:cb:cf:e9:b0:d9:28:5d:5d:88:6b:c6:fd:c3:9e:
         31:98:9c:97:d7:1b:38:39:e2:20:4e:c6:8c:06:1b:b0:a8:df:
         dc:6f:e7:53:a9:46:c3:83:72:e4:af:4b:89:72:41:0a:ff:36:
         8d:a3:af:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 18:51:27 2026 by rpki-client