Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/808b5eb8-ffbb-34aa-a995-2febeadd220a.roa
File:                     808b5eb8-ffbb-34aa-a995-2febeadd220a.roa (raw, json)
Hash identifier:          wQKakRwTh/WD8/vh7a6TRoukvEuYKLFhExupbd/69KY=
Subject key identifier:   3B:55:BA:8F:74:F3:C4:3C:96:5E:D8:8A:E5:20:29:04:AD:D6:22:04
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EA7937807B86A22D31D22CA48
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/808b5eb8-ffbb-34aa-a995-2febeadd220a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     18779
IP address blocks:        172.121.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:78:07:b8:6a:22:d3:1d:22:ca:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=33f5e84e-e3da-45ad-a411-e2eb483a79dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5c:23:9b:93:64:54:a2:95:00:7b:f0:7c:6e:
                    00:f5:65:79:30:76:3f:cd:bf:c5:cd:18:06:1a:55:
                    61:84:a7:1f:fd:53:d2:46:d6:97:0e:f7:7d:51:5c:
                    a7:43:f9:fd:09:3d:23:f4:17:33:3d:92:b8:cf:9e:
                    bd:6f:ae:3d:22:63:52:27:60:4a:de:d2:b6:99:4e:
                    3f:18:c7:c7:c6:b7:dd:d4:a1:35:60:92:09:d1:f9:
                    a4:17:d4:4c:18:f9:11:26:33:ee:20:2a:b3:87:c8:
                    d3:dc:f4:3c:0c:16:90:61:96:86:7c:56:f4:00:93:
                    00:db:32:44:36:d7:7d:66:6c:81:e1:fa:4f:c4:d7:
                    84:aa:71:66:0d:22:d7:78:b7:a7:1c:32:bd:b2:9c:
                    d8:ea:ed:30:d5:9c:6e:1b:97:80:f0:ae:cb:a4:a1:
                    8b:6a:95:eb:5d:b8:26:56:74:40:cf:fa:91:70:5e:
                    de:72:72:3c:a9:05:cc:1c:6c:e9:18:64:64:0e:74:
                    66:2e:ea:dd:e4:d7:45:69:05:e6:ad:7e:fa:54:58:
                    26:cd:5d:f5:57:b5:b1:57:4c:6f:b2:7d:ad:a6:40:
                    ef:79:1d:50:c1:1a:2e:6a:88:c3:09:35:e4:a1:d8:
                    c1:5d:00:e0:9b:d5:cb:e3:90:4d:4f:bd:ea:fd:91:
                    a9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:55:BA:8F:74:F3:C4:3C:96:5E:D8:8A:E5:20:29:04:AD:D6:22:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/808b5eb8-ffbb-34aa-a995-2febeadd220a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:96:96:40:d4:98:dc:23:80:9f:4c:ff:49:49:22:82:04:b4:
         11:fd:08:47:6a:dc:7b:21:cb:c8:af:5f:f6:b7:8f:66:f6:63:
         ef:e3:ec:23:c5:ea:91:ad:ff:5e:36:b6:13:69:2f:10:4d:89:
         ef:c1:b9:51:10:69:d9:55:8e:fb:f0:20:c1:3d:95:1d:1f:b6:
         cc:39:a7:7b:6f:39:37:25:23:65:eb:5d:c9:8f:01:2f:7a:f9:
         51:2a:a8:00:6d:bb:37:83:53:7e:c3:e3:a9:cf:56:9e:41:ef:
         dc:12:d7:72:85:41:67:6c:2b:f3:8f:39:31:0f:54:44:09:69:
         2e:ea:58:af:b6:41:e7:12:57:60:f5:e1:c3:04:e6:05:e1:35:
         dc:ce:61:41:c1:96:1b:99:44:30:9c:e1:73:c7:18:a6:8b:3b:
         a2:0a:02:6b:7a:67:ee:f1:da:da:13:ae:a8:89:f4:99:91:95:
         b1:a9:9d:15:1e:59:3c:62:24:d3:cb:90:3c:cc:7e:af:bd:f5:
         9e:28:6f:b7:18:5b:5b:c0:8c:bc:ca:a1:be:9d:7b:54:b5:18:
         9d:7f:2e:d3:16:ea:c3:f1:bc:db:28:c5:4b:76:76:92:4f:64:
         9f:fd:45:aa:ac:46:91:27:a2:35:c6:75:7c:1b:26:8c:cf:ed:
         72:60:dc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 22:44:13 2026 by rpki-client