Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8d25425b-86ab-36ff-ba74-71e093809dda.roa
File:                     8d25425b-86ab-36ff-ba74-71e093809dda.roa (raw, json)
Hash identifier:          TOMaF2y4UCyjrhzmjDaplUd6EiPp6tmCrLFSDb9eSno=
Subject key identifier:   E8:02:AB:BB:77:E3:86:A4:D0:CF:35:75:A6:0A:13:18:22:91:AF:AB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584E4AEF6A00BC645D2E76E89B90
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8d25425b-86ab-36ff-ba74-71e093809dda.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     834
IP address blocks:        172.121.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:6a:00:bc:64:5d:2e:76:e8:9b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=5497bc03-0736-4b67-9789-d7ef57bd5a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ee:ce:c3:9e:29:07:1c:94:f4:fa:dc:94:9f:
                    2c:1c:b0:6f:d6:74:58:06:ad:1e:03:a9:48:01:3c:
                    22:b9:67:e7:e5:d6:21:e1:82:57:c1:40:3d:9d:4e:
                    3b:a2:74:fa:df:c1:f4:7e:62:76:53:60:9a:10:44:
                    e4:bb:b4:3b:81:d4:1d:63:d9:f2:b9:2b:b6:14:15:
                    2a:1d:5b:9f:92:38:0a:b3:4f:77:a3:2a:ec:59:77:
                    46:57:37:76:27:eb:49:fe:ae:25:1f:14:d4:e5:7d:
                    48:e8:3f:73:9e:9c:1b:db:95:8b:43:af:6d:c2:4d:
                    93:eb:f8:6f:e3:cb:71:57:b8:0f:33:40:a4:25:0a:
                    fd:88:30:69:4c:32:3b:0a:73:a4:44:8d:38:5d:18:
                    af:2a:7f:a9:f6:c9:c4:20:5e:46:86:ae:6f:c4:f8:
                    91:58:bf:cd:b2:8c:23:2a:3c:d4:18:7d:88:03:7c:
                    19:29:27:91:68:0b:e4:aa:e2:6e:37:1d:80:b4:92:
                    d6:99:ac:f3:b4:03:d3:d7:e6:9e:6d:fd:36:3f:75:
                    01:56:36:10:03:a4:5d:0f:cc:8d:ab:23:d7:26:7c:
                    58:d9:db:80:69:c8:88:1c:e7:cf:fd:7f:18:b4:92:
                    37:87:8b:6c:4c:d7:2a:51:57:20:0f:33:65:3f:0f:
                    10:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:02:AB:BB:77:E3:86:A4:D0:CF:35:75:A6:0A:13:18:22:91:AF:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8d25425b-86ab-36ff-ba74-71e093809dda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:f7:bc:c2:90:2d:58:59:ee:c5:fd:87:1a:45:1f:48:c4:21:
         dd:68:67:e4:f0:d9:70:36:de:04:57:70:e3:f8:af:ee:8d:f4:
         7c:6c:ce:4b:85:5e:18:09:c9:0f:ee:d2:c3:d6:5c:e8:9f:d0:
         bf:10:95:80:21:6d:05:02:4b:52:1b:67:48:73:82:54:3d:eb:
         5d:48:1f:d1:35:fe:e3:c5:14:5b:3d:af:6e:b8:fc:76:70:a0:
         41:8f:f7:d7:9a:c1:96:b6:68:03:34:cc:ee:d2:36:d2:ad:b8:
         64:d0:3f:40:9e:dd:02:f2:e1:92:c7:bf:85:af:32:e6:56:9e:
         a3:af:37:d8:86:80:9c:d9:a0:04:cf:e5:c2:ed:4d:9a:be:d5:
         93:fc:d9:d4:f2:a2:2f:d6:41:15:34:4c:fd:62:6d:57:fe:be:
         a5:27:f5:83:36:1d:bd:62:c3:5c:62:93:13:df:6b:9c:25:92:
         b5:16:d6:b6:d1:ea:ca:1f:6e:89:f9:84:fb:98:d3:4d:df:34:
         d5:ea:e4:36:a9:8d:13:7f:32:d6:1c:0b:5a:33:c3:33:1f:00:
         83:36:0d:88:9a:ed:9f:1b:08:b0:93:a2:f0:e0:38:56:a5:e1:
         2a:59:43:53:62:c0:63:ad:00:b3:9a:b9:0b:95:f4:d8:dd:26:
         21:bb:36:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 17:25:31 2026 by rpki-client