Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9affacef-2561-3b57-9a38-f10aa962891d.roa
File:                     9affacef-2561-3b57-9a38-f10aa962891d.roa (raw, json)
Hash identifier:          OYpN3UpcaltuWSpabb5uwhfm2I3BWVBYsIRai4A/Fek=
Subject key identifier:   27:F5:63:52:4B:32:C7:AB:09:35:F1:72:87:3B:CE:A4:55:B0:B1:1C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584DEF3FCE9080F50B1F85220280
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9affacef-2561-3b57-9a38-f10aa962891d.roa
Signing time:             Sun 24 May 2026 00:48:20 +0000
ROA not before:           Sun 24 May 2026 00:48:20 +0000
ROA not after:            Sat 22 Aug 2026 00:48:20 +0000
asID:                     44559
IP address blocks:        172.120.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:3f:ce:90:80:f5:0b:1f:85:22:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 24 00:48:20 2026 GMT
            Not After : Aug 22 00:48:20 2026 GMT
        Subject: CN=d788f0b0-d016-4dbd-bf44-01f3a4079832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:03:6c:ec:7e:e0:97:bb:25:d6:25:e2:4f:3b:
                    fc:ef:b3:bc:dc:d1:21:63:00:a8:03:8a:8a:76:67:
                    d9:2d:21:ca:c5:1d:b4:7a:71:97:cc:f7:5b:6b:35:
                    24:95:27:33:84:b9:5e:6e:15:4a:b1:90:6f:b5:6f:
                    28:44:c9:4b:ad:03:78:d8:55:50:9d:67:4d:22:57:
                    3f:b0:da:89:14:f3:9f:87:f3:95:62:17:e6:60:5b:
                    c3:3a:dd:d4:d3:b3:94:a7:44:46:8a:ae:0d:0d:5e:
                    4e:75:10:cb:41:a7:e8:db:89:90:b0:f8:9d:39:26:
                    7f:dc:47:01:1f:83:e6:7a:27:1a:45:5d:22:7a:5d:
                    c3:24:4f:cb:0f:57:92:7d:7d:79:f6:c6:e3:27:fe:
                    2f:7a:ff:d7:8d:44:ed:bc:a3:3b:46:26:a5:cd:1b:
                    91:ef:ee:15:af:2d:30:22:c9:f7:93:37:34:c1:30:
                    c9:ad:3c:73:6c:0f:b1:ce:a8:ce:22:97:fe:21:52:
                    3b:15:33:65:76:a8:45:b7:02:03:44:fc:22:19:0f:
                    d9:19:c8:32:0d:ac:d3:bc:eb:bd:05:d7:8f:a3:39:
                    44:66:b5:ec:d2:2e:aa:7b:44:b7:a2:7c:a6:4b:dd:
                    45:8d:4d:00:a7:1c:92:2f:68:e8:18:95:be:5e:b1:
                    14:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F5:63:52:4B:32:C7:AB:09:35:F1:72:87:3B:CE:A4:55:B0:B1:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9affacef-2561-3b57-9a38-f10aa962891d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:a5:7e:26:c5:cf:aa:6e:c8:ea:12:cb:a2:fe:ad:a7:fb:22:
         52:3d:bf:ad:0e:39:83:d2:8a:ba:6c:4d:55:52:38:ba:ec:19:
         12:47:d8:64:74:ce:41:31:f1:65:12:0f:0b:b9:ec:0f:50:64:
         9d:ce:74:84:80:ec:75:dc:87:63:0f:81:8d:20:a1:39:10:53:
         08:f5:b2:97:bb:a5:e6:e1:08:82:67:da:fe:eb:6d:d0:34:6a:
         dd:dc:c2:27:a4:f0:31:a9:7f:d8:23:9d:c9:1d:23:f9:c4:40:
         d3:6d:3d:6e:9d:cd:cd:d4:72:64:21:fe:d1:22:50:d4:a4:2a:
         b6:72:5f:f9:4a:fa:79:34:d8:0f:b2:1f:b9:19:34:41:eb:d3:
         35:ce:4f:6f:2a:9d:0d:d1:38:f5:49:44:94:c2:69:45:0c:71:
         34:c5:d0:8b:99:64:36:bc:2d:34:2f:4a:4c:b9:db:a4:31:fa:
         3c:7b:c8:dc:58:04:d9:3a:0e:9a:d0:68:49:e2:0a:f3:bd:f7:
         42:7c:e8:99:05:f5:7f:20:f2:ee:82:da:a2:3f:d1:9b:d0:5c:
         a8:da:97:95:2e:60:b6:87:68:20:bb:9d:5f:be:97:f8:69:11:
         41:bb:c3:78:b2:6a:40:d7:5d:f4:c0:84:ad:60:ef:f4:60:9b:
         53:22:28:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3vP86QgPULH4UiAoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDUyNDAwNDgyMFoXDTI2MDgyMjAwNDgyMFowLzEtMCsGA1UEAxMk
ZDc4OGYwYjAtZDAxNi00ZGJkLWJmNDQtMDFmM2E0MDc5ODMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwNs7H7gl7sl1iXiTzv877O83NEhYwCoA4qK
dmfZLSHKxR20enGXzPdbazUklSczhLlebhVKsZBvtW8oRMlLrQN42FVQnWdNIlc/
sNqJFPOfh/OVYhfmYFvDOt3U07OUp0RGiq4NDV5OdRDLQafo24mQsPidOSZ/3EcB
H4PmeicaRV0iel3DJE/LD1eSfX159sbjJ/4vev/XjUTtvKM7RialzRuR7+4Vry0w
Isn3kzc0wTDJrTxzbA+xzqjOIpf+IVI7FTNldqhFtwIDRPwiGQ/ZGcgyDazTvOu9
BdePozlEZrXs0i6qe0S3onymS91FjU0ApxySL2joGJW+XrEUjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCf1Y1JLMserCTXxcoc7zqRVsLEcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOWFmZmFjZWYtMjU2MS0z
YjU3LTlhMzgtZjEwYWE5NjI4OTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHh1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADSlfibFz6puyOoSy6L+raf7IlI9v60OOYPSirpsTVVSOLrsGRJH2GR0
zkEx8WUSDwu57A9QZJ3OdISA7HXch2MPgY0goTkQUwj1spe7pebhCIJn2v7rbdA0
at3cwiek8DGpf9gjnckdI/nEQNNtPW6dzc3UcmQh/tEiUNSkKrZyX/lK+nk02A+y
H7kZNEHr0zXOT28qnQ3ROPVJRJTCaUUMcTTF0IuZZDa8LTQvSky526Qx+jx7yNxY
BNk6DprQaEniCvO990J86JkF9X8g8u6C2qI/0ZvQXKjal5UuYLaHaCC7nV++l/hp
EUG7w3iyakDXXfTAhK1g7/Rgm1MiKAI=
-----END CERTIFICATE-----
Generated at Tue May 26 05:32:20 2026 by rpki-client