Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8d40d3d9-da5d-36f1-b2c3-5ac2c991c627.roa
File:                     8d40d3d9-da5d-36f1-b2c3-5ac2c991c627.roa (raw, json)
Hash identifier:          DMwVJZ1E5+0W0uUm2zixX2NxbKIDXRXVpcSu+zj7NfI=
Subject key identifier:   5D:BC:92:40:74:48:F0:6A:84:22:60:BE:F6:6B:2B:01:81:70:94:37
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584DEF1413C0E59FF4A430D82800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8d40d3d9-da5d-36f1-b2c3-5ac2c991c627.roa
Signing time:             Sat 23 May 2026 23:20:13 +0000
ROA not before:           Sat 23 May 2026 23:20:13 +0000
ROA not after:            Fri 21 Aug 2026 23:20:13 +0000
asID:                     44559
IP address blocks:        172.120.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:14:13:c0:e5:9f:f4:a4:30:d8:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 23 23:20:13 2026 GMT
            Not After : Aug 21 23:20:13 2026 GMT
        Subject: CN=686040de-b674-4b8c-8c00-64451679a31c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ca:4a:13:9a:e2:d4:a3:1b:3e:aa:25:2e:c3:
                    ea:6d:4c:1f:6d:52:57:27:13:e4:6c:8c:c5:ba:c8:
                    90:4a:03:5b:c3:2c:95:50:6c:b7:7f:8d:2d:84:6b:
                    0f:3f:42:54:4d:51:92:7b:33:eb:f7:7e:20:b5:6a:
                    63:ba:62:1c:29:2c:bc:7b:d9:2e:d5:68:ac:74:90:
                    7a:d7:0a:3f:b3:9e:fb:e1:ba:b2:67:a0:0c:a2:49:
                    db:c0:c4:1b:eb:c9:87:0c:bd:85:cb:d7:6a:b8:95:
                    00:fa:14:08:a5:40:a6:b3:62:d1:b4:11:29:a5:06:
                    ea:be:44:98:2d:00:cb:84:f2:ea:c4:72:ad:b1:de:
                    07:f5:07:2b:1a:7d:f3:4a:b2:4a:ea:8e:fb:0d:2d:
                    82:36:69:da:a1:4b:0c:60:52:40:ee:f8:f1:54:6e:
                    fb:08:64:9b:f0:03:59:5b:c8:58:db:e9:a3:33:2e:
                    64:63:50:e5:e4:79:76:97:37:f4:d7:5f:31:11:21:
                    a7:84:9a:45:45:93:75:41:eb:14:d6:18:24:a7:32:
                    52:0b:ed:1e:85:93:ff:65:c4:e1:12:52:25:1e:aa:
                    c4:0f:3b:b6:0f:df:62:7f:83:9a:06:55:43:46:be:
                    be:9f:6b:e2:df:d3:b9:69:95:b0:bb:79:a2:50:ea:
                    3a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BC:92:40:74:48:F0:6A:84:22:60:BE:F6:6B:2B:01:81:70:94:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8d40d3d9-da5d-36f1-b2c3-5ac2c991c627.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:b7:85:21:cd:e8:24:8d:42:34:21:f0:b6:fe:f8:34:9b:fd:
         f6:a8:49:f1:06:5f:8f:13:69:d7:6a:54:82:5c:ab:a0:6e:8b:
         1c:7f:d6:a1:b9:f9:8f:4f:e3:2d:2b:ea:e3:64:a3:45:12:bd:
         b0:ba:75:1b:26:46:70:20:3f:f2:6a:f0:58:13:28:c1:3b:f9:
         02:bc:77:eb:fb:19:54:6a:6d:99:13:5a:42:45:c7:d0:c2:8b:
         f2:58:b4:c6:75:fc:8b:75:9b:93:90:d9:d6:e9:2b:ea:90:3a:
         70:2c:94:36:c0:26:36:93:52:cd:80:6e:51:c3:c9:39:17:2e:
         a9:79:3c:b0:7d:32:2f:cd:19:1c:a5:68:7d:ec:91:3f:1b:dd:
         bf:be:45:86:f4:65:83:4d:b4:c1:5a:02:3a:45:b7:6d:12:1d:
         6e:e7:73:e5:dc:67:55:ed:91:57:f9:00:fd:18:a0:aa:ad:71:
         5b:1c:22:84:10:3a:2e:91:72:72:15:ae:bc:ac:81:e3:ec:8c:
         6d:9b:b2:ad:17:10:4f:4f:c1:6b:a8:80:08:71:7c:3b:a1:e9:
         9d:09:4d:46:ba:17:cc:ac:d1:08:09:58:b3:9b:77:ac:3a:e0:
         ac:61:c9:ed:98:e2:a4:b2:61:49:54:3d:ff:04:b0:cb:0b:54:
         27:6c:57:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 05:31:34 2026 by rpki-client