Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8589af8d-c2ff-3edc-ae48-87eac3dcba47.roa
File:                     8589af8d-c2ff-3edc-ae48-87eac3dcba47.roa (raw, json)
Hash identifier:          0ezB4IzasHz2YBcEaiJ09IHV4ckdWix7LXRjmJc5X5E=
Subject key identifier:   1A:44:59:2E:E5:7A:2A:BC:37:9D:8F:3B:6D:30:80:8E:D1:52:A0:BC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584E1333B7A044C353215FA35D80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8589af8d-c2ff-3edc-ae48-87eac3dcba47.roa
Signing time:             Fri 05 Jun 2026 21:53:04 +0000
ROA not before:           Fri 05 Jun 2026 21:53:04 +0000
ROA not after:            Thu 03 Sep 2026 21:53:04 +0000
asID:                     214238
IP address blocks:        172.120.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:33:b7:a0:44:c3:53:21:5f:a3:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun  5 21:53:04 2026 GMT
            Not After : Sep  3 21:53:04 2026 GMT
        Subject: CN=a21097d6-9dc8-4239-bddb-a60033d2a8a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:32:0e:a7:8a:91:24:59:50:bb:11:e2:9f:2b:
                    0a:40:e7:d1:c6:27:61:98:08:55:81:5c:9c:4c:e3:
                    73:6a:6a:86:ee:6a:8f:c4:f2:90:8a:c6:50:1e:2a:
                    e8:c1:03:c7:3b:27:af:43:1e:8b:9e:8c:4e:6c:a6:
                    be:32:c7:5b:5d:ae:c6:d8:4a:49:fc:57:01:95:43:
                    52:7c:d6:38:63:e5:81:dc:c0:fa:ae:51:3f:60:f8:
                    ab:92:98:67:1e:3c:21:bc:e4:97:b2:b2:f0:73:fd:
                    8e:8e:39:8d:60:b8:31:ea:41:56:1b:bb:87:8e:73:
                    e0:06:23:63:39:32:88:50:be:fc:10:ec:3d:d5:c9:
                    9a:22:e8:c9:ab:e6:64:ac:26:d9:2a:72:7e:53:20:
                    22:34:6c:40:86:01:4e:06:53:4d:fa:94:5f:59:7e:
                    f1:78:cb:c9:f4:76:53:1f:75:4e:f0:f6:24:37:39:
                    bf:02:3b:41:e0:e6:05:7d:c0:b3:3f:3c:7f:e1:af:
                    08:3a:43:1b:54:44:e7:9c:1f:46:0c:05:f4:8e:f7:
                    59:f3:bc:62:6d:c7:3b:08:3e:23:3f:3d:ef:7c:fe:
                    5a:ac:39:ca:9a:db:99:af:50:70:68:cc:bb:68:16:
                    cf:14:9c:4e:66:0f:19:f5:13:de:5c:f5:3d:b6:3a:
                    0f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:44:59:2E:E5:7A:2A:BC:37:9D:8F:3B:6D:30:80:8E:D1:52:A0:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8589af8d-c2ff-3edc-ae48-87eac3dcba47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:18:11:b2:79:7e:7d:24:cb:a3:15:ad:52:e2:c1:4d:69:3e:
         83:2a:cc:29:09:91:0d:9d:c4:af:32:24:92:e0:9d:11:1b:67:
         84:64:66:f2:94:2f:19:f0:7b:50:8d:bd:7f:9b:f2:1f:61:2f:
         c4:c5:b8:18:f4:d0:21:5e:c3:11:9c:ba:b4:ef:d7:c0:a6:0e:
         06:4d:ea:36:c2:8a:a9:38:3f:17:18:c7:b4:8c:6e:23:9d:c1:
         1f:69:81:16:d5:40:ad:c8:f7:7e:5e:c6:f8:ac:f5:d1:27:a0:
         72:4e:b4:50:2a:b6:9e:53:f0:89:30:24:07:70:f9:c2:c8:6a:
         32:22:19:6c:6c:7d:68:e2:11:e7:16:38:64:86:9e:d1:4e:d9:
         6d:83:87:c1:0c:25:cc:cb:ae:a1:65:d2:cb:b7:c0:ca:30:d0:
         ff:c7:f6:dd:f0:71:c4:34:65:9e:28:09:df:66:ee:00:5a:17:
         d3:8d:31:f1:57:1e:b2:d3:ec:23:ca:91:22:06:03:b4:e8:07:
         98:04:e3:61:67:28:21:7d:59:80:79:bc:1d:fa:d6:99:29:69:
         fd:19:c9:d8:00:6c:c3:94:d8:1d:e3:51:6c:0d:c5:f1:55:62:
         af:24:f0:50:5d:02:5b:cd:74:87:26:ed:4d:45:e0:0f:1d:de:
         69:80:e3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:49:38 2026 by rpki-client