Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/85e0f13d-ea09-3adc-987c-65b0f31f6dab.roa
File:                     85e0f13d-ea09-3adc-987c-65b0f31f6dab.roa (raw, json)
Hash identifier:          KHsjqALQITA60ogmmCO3c5JG/DoLc/yDjd0AP3YX59s=
Subject key identifier:   24:88:A1:62:C9:50:AB:5F:01:3C:84:4F:C3:BB:01:8E:77:33:6F:70
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584E13352278C05C9B04E8DAB300
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/85e0f13d-ea09-3adc-987c-65b0f31f6dab.roa
Signing time:             Fri 05 Jun 2026 21:55:56 +0000
ROA not before:           Fri 05 Jun 2026 21:55:56 +0000
ROA not after:            Thu 03 Sep 2026 21:55:56 +0000
asID:                     44559
IP address blocks:        172.120.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:35:22:78:c0:5c:9b:04:e8:da:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun  5 21:55:56 2026 GMT
            Not After : Sep  3 21:55:56 2026 GMT
        Subject: CN=aef11cbd-0b4a-46fb-ad18-c76384c11820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6a:5b:87:c2:de:7b:99:0f:f1:52:3b:7e:68:
                    17:0e:71:cf:29:f0:01:10:4e:69:98:b9:9b:c0:d7:
                    a2:08:69:87:45:e9:38:cd:a6:4e:e5:67:24:e9:6f:
                    02:7a:ce:2c:0d:b0:97:61:0f:17:32:ba:92:03:5f:
                    d2:e1:f8:d5:26:f1:e4:41:c0:70:fd:40:23:ff:73:
                    a1:d6:21:42:f3:26:ef:c6:bb:31:d1:b7:87:a1:c1:
                    4b:1c:dc:40:4a:de:7d:04:1a:a8:a9:3b:52:4f:65:
                    30:03:b1:ce:ff:ea:3b:42:e3:99:0e:d7:44:9e:3c:
                    28:54:9c:30:01:84:1d:51:51:57:70:e1:56:1f:ed:
                    25:58:fe:d6:c9:59:5b:07:2c:8f:3d:96:84:fc:2f:
                    61:c6:d7:18:04:32:9d:eb:5e:d6:07:04:b4:9e:4a:
                    71:78:60:2e:cd:4a:25:5a:2a:ab:3b:56:d1:87:9a:
                    cd:38:8a:e8:0e:e4:7c:da:77:f0:41:58:14:e2:c1:
                    b0:35:0d:c5:30:34:21:75:3b:63:9c:de:5e:c4:3b:
                    ef:7e:09:6a:bb:fd:2e:5c:a5:39:2c:37:af:b9:80:
                    2a:9f:94:2a:ad:8b:9c:bb:2f:31:af:a1:ec:f0:34:
                    ff:db:49:51:f8:97:ba:db:04:c4:69:f7:1e:14:8f:
                    63:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:88:A1:62:C9:50:AB:5F:01:3C:84:4F:C3:BB:01:8E:77:33:6F:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/85e0f13d-ea09-3adc-987c-65b0f31f6dab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:9d:eb:af:4f:70:a3:15:7e:1c:61:49:be:3d:45:79:9d:93:
         96:76:55:8e:eb:80:1b:9a:6e:d7:57:3f:5e:1b:0e:7a:ba:21:
         7c:c1:22:d3:5a:e0:83:2c:46:ba:ec:35:87:15:cc:36:f9:e7:
         a4:d8:ff:fd:c4:72:b4:f2:c2:09:0d:00:58:89:92:3c:af:97:
         a4:5e:52:3b:7b:bb:4d:72:eb:7d:2e:cd:21:ea:d9:46:95:d9:
         ec:bf:f2:c1:cd:48:43:f5:5b:a8:34:c6:41:a6:85:e7:24:cb:
         76:d6:79:05:c5:88:3a:67:9a:ca:e9:aa:14:ae:d8:a4:6b:cd:
         f5:1b:73:b7:5c:4a:d6:c2:50:f4:cb:bc:b9:66:fc:7c:58:c9:
         22:39:80:e6:ae:93:c2:b5:c8:f5:50:58:8c:4d:17:ba:f1:d7:
         73:cd:93:75:4b:37:79:17:b0:e0:45:cc:5e:29:ac:a7:42:05:
         d2:f1:22:4e:e4:7b:4a:a4:6a:63:1e:5b:1e:53:a2:0f:74:b9:
         ce:e6:14:f5:48:db:86:a2:d4:af:4f:8d:65:e7:ff:1a:bd:84:
         5b:ef:a3:0b:d2:7b:1c:b8:07:46:5b:4c:87:94:24:18:11:9d:
         13:0a:9c:8d:cd:91:06:e6:8d:cf:be:ce:0c:0b:c7:0d:7d:c2:
         cf:ea:2f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:33:46 2026 by rpki-client