Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/858eee6e-c3d5-3517-89d5-482584a8c689.roa
File:                     858eee6e-c3d5-3517-89d5-482584a8c689.roa (raw, json)
Hash identifier:          uChb+wLxbSD0HlL6buAe0njgf5zHFqV2vqVhyawEE44=
Subject key identifier:   FD:54:21:B8:2B:6F:11:6B:9F:A8:FF:97:1F:34:A5:33:06:D4:D1:A1
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584E640F5A019BD4120DEE1500B0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/858eee6e-c3d5-3517-89d5-482584a8c689.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     834
IP address blocks:        172.120.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:5a:01:9b:d4:12:0d:ee:15:00:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=95d03fb1-d413-4f8f-a608-5890dc8440e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bd:2f:c7:10:04:52:83:30:93:a0:bf:2c:60:
                    97:cc:e7:5c:e1:6d:03:5c:5d:4a:72:1e:e9:6b:3f:
                    10:72:44:88:5a:6c:28:32:88:6e:27:45:c7:20:1c:
                    9e:c6:f2:69:aa:27:7c:8c:24:0f:94:8a:00:c4:59:
                    eb:b4:1f:33:1b:08:73:0d:23:c4:05:9a:07:4f:00:
                    d1:45:f6:73:f9:ed:87:85:b5:be:84:b3:db:e3:db:
                    28:81:ad:19:c6:87:34:19:03:17:7e:b6:dd:58:06:
                    9a:de:d5:68:10:36:6d:a3:41:4c:44:ec:22:0c:08:
                    49:a6:c7:9a:b5:f2:7c:ab:2c:e3:a4:b7:74:3d:17:
                    54:59:6d:ee:dc:6f:ba:78:00:4e:6b:9d:d3:d9:ce:
                    30:3e:9f:ff:a7:04:bd:6c:4e:fb:34:ac:cc:19:7e:
                    09:75:9c:68:2f:60:e4:32:74:4c:b7:8f:5f:f2:2c:
                    94:2b:7c:f2:de:b5:3e:54:e6:aa:e8:fc:54:d4:5d:
                    c0:fe:60:2e:b4:9e:7c:c1:b5:ef:45:a4:e2:4e:18:
                    1f:10:6a:51:33:af:ef:8b:17:52:83:b0:15:9c:29:
                    7f:b2:51:f7:35:a8:bb:65:e5:b0:40:2f:47:b7:2c:
                    e5:8d:f6:a9:2d:eb:69:db:7e:5a:dd:fd:76:7a:7e:
                    90:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:54:21:B8:2B:6F:11:6B:9F:A8:FF:97:1F:34:A5:33:06:D4:D1:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/858eee6e-c3d5-3517-89d5-482584a8c689.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:51:f3:b5:80:99:ad:9e:d6:45:aa:57:7f:9b:89:c8:1d:5c:
         69:77:ad:15:6c:f0:c4:1a:ff:ad:af:fc:d0:47:cd:d7:3b:3c:
         37:b3:52:77:31:08:af:e8:9f:7e:d9:e9:ab:39:98:37:b5:e3:
         9f:1f:a0:ce:ff:46:de:0e:5e:61:30:5e:b5:0e:d4:51:d8:b6:
         11:f6:6d:e1:08:e7:c1:a5:9c:39:82:a4:61:8e:94:9c:fe:0c:
         eb:0d:98:a7:96:12:3c:6e:11:16:29:72:58:93:51:fc:5c:4c:
         7e:5d:4e:46:63:b8:01:b6:96:77:70:90:5e:90:e3:c0:dc:25:
         bd:75:d9:96:1c:8b:0f:92:e6:4f:ff:61:02:9b:f4:8e:a8:5e:
         68:d5:ea:4b:ab:cb:12:6c:ac:09:88:e8:2d:df:d0:be:67:29:
         a9:95:c3:1b:48:98:ec:61:fe:ae:a7:b0:48:5f:10:11:4a:31:
         79:87:e2:ea:b8:48:c5:93:e3:39:cb:50:aa:bc:c3:c8:13:7f:
         84:67:23:e4:3a:84:ac:9f:ad:e6:29:56:74:cb:53:e3:7a:62:
         a4:e1:f4:2c:2d:8e:8d:b6:8b:48:56:cc:4f:fb:8d:f5:15:3d:
         e5:a2:f3:3e:ca:bf:eb:17:53:21:19:95:fc:0e:2e:d6:07:7d:
         8d:9d:63:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5kD1oBm9QSDe4VALAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk
OTVkMDNmYjEtZDQxMy00ZjhmLWE2MDgtNTg5MGRjODQ0MGU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL0vxxAEUoMwk6C/LGCXzOdc4W0DXF1Kch7p
az8QckSIWmwoMohuJ0XHIByexvJpqid8jCQPlIoAxFnrtB8zGwhzDSPEBZoHTwDR
RfZz+e2HhbW+hLPb49soga0Zxoc0GQMXfrbdWAaa3tVoEDZto0FMROwiDAhJpsea
tfJ8qyzjpLd0PRdUWW3u3G+6eABOa53T2c4wPp//pwS9bE77NKzMGX4JdZxoL2Dk
MnRMt49f8iyUK3zy3rU+VOaq6PxU1F3A/mAutJ58wbXvRaTiThgfEGpRM6/vixdS
g7AVnCl/slH3Nai7ZeWwQC9HtyzljfapLetp235a3f12en6QjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP1UIbgrbxFrn6j/lx80pTMG1NGhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvODU4ZWVlNmUtYzNkNS0z
NTE3LTg5ZDUtNDgyNTg0YThjNjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHiMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFxR87WAma2e1kWqV3+bicgdXGl3rRVs8MQa/62v/NBHzdc7PDezUncx
CK/on37Z6as5mDe1458foM7/Rt4OXmEwXrUO1FHYthH2beEI58GlnDmCpGGOlJz+
DOsNmKeWEjxuERYpcliTUfxcTH5dTkZjuAG2lndwkF6Q48DcJb112ZYciw+S5k//
YQKb9I6oXmjV6kuryxJsrAmI6C3f0L5nKamVwxtImOxh/q6nsEhfEBFKMXmH4uq4
SMWT4znLUKq8w8gTf4RnI+Q6hKyfreYpVnTLU+N6YqTh9Cwtjo22i0hWzE/7jfUV
PeWi8z7Kv+sXUyEZlfwOLtYHfY2dY0o=
-----END CERTIFICATE-----
Generated at Fri Jul 10 17:25:54 2026 by rpki-client