Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9bcde60b-3e9f-3e95-b337-cfaf02d3e8b2.roa
File:                     9bcde60b-3e9f-3e95-b337-cfaf02d3e8b2.roa (raw, json)
Hash identifier:          KxT9hEJS35L+iM0hlt9vvZrCoRF7Tr5wW4FDV2vS2bQ=
Subject key identifier:   66:49:F5:E8:19:FC:82:1B:84:86:DD:CD:EF:54:AC:F2:70:D5:DE:70
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D1D044F78F587B62403E9A200
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9bcde60b-3e9f-3e95-b337-cfaf02d3e8b2.roa
Signing time:             Mon 09 Mar 2026 17:28:42 +0000
ROA not before:           Mon 09 Mar 2026 17:28:42 +0000
ROA not after:            Sun 07 Jun 2026 17:28:42 +0000
asID:                     398781
IP address blocks:        172.121.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:04:4f:78:f5:87:b6:24:03:e9:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  9 17:28:42 2026 GMT
            Not After : Jun  7 17:28:42 2026 GMT
        Subject: CN=51d3930a-bf3a-4cd5-8beb-76aab513ccd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6a:5c:1f:4c:1f:f5:e3:33:8f:da:ca:da:4e:
                    3e:28:36:7b:60:4b:01:c1:15:cf:9e:83:a9:91:2a:
                    0b:89:e0:59:e9:f3:87:cb:ab:43:d2:a3:c2:9b:94:
                    9a:99:fc:3c:76:39:a1:03:ef:44:bc:e1:0b:8a:cc:
                    62:69:29:0b:6c:93:53:45:b5:47:9d:c9:df:a6:18:
                    1a:bb:3b:90:d5:ec:60:5c:88:07:06:1b:4f:80:96:
                    df:e9:0f:29:94:5d:e3:87:4b:3f:cd:f7:38:83:30:
                    e4:b4:57:e5:e7:24:96:67:05:59:0e:4b:84:e6:19:
                    16:54:79:6c:a2:1d:74:81:41:4c:02:b2:4a:8d:37:
                    b8:78:1d:f1:af:93:fa:54:82:12:23:90:0c:ea:c0:
                    27:a1:42:24:a4:fb:0b:67:fd:a7:06:1f:0a:f9:92:
                    0e:d8:e5:71:e1:34:50:e7:38:79:23:7e:76:bc:05:
                    2b:37:30:5d:a5:cb:eb:93:c2:b3:d2:f0:79:1e:8c:
                    6b:7f:0f:4b:1e:c1:96:06:db:8b:c6:25:66:e7:f0:
                    d7:4c:3a:97:e9:15:8d:c4:f3:42:b0:77:a2:bd:b9:
                    38:6e:30:00:86:97:87:3f:b5:4b:62:3c:d3:00:b1:
                    ce:cf:d4:fe:7e:ee:d9:4c:a6:f4:a4:4e:73:d2:ae:
                    9f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:49:F5:E8:19:FC:82:1B:84:86:DD:CD:EF:54:AC:F2:70:D5:DE:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9bcde60b-3e9f-3e95-b337-cfaf02d3e8b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:c0:94:92:51:87:07:d7:a1:c7:af:31:09:9a:a6:e3:08:f3:
         22:15:49:1b:25:a0:17:7f:ad:e6:29:3b:d6:4d:d0:c8:12:b4:
         96:6d:9d:de:5a:2a:36:36:24:15:6c:dc:08:aa:38:1b:a2:69:
         f2:f4:56:b6:17:16:c5:2c:fb:96:9b:4e:e4:19:c3:26:76:c8:
         18:bf:83:03:18:26:d5:37:f8:63:89:ec:36:04:9c:e8:2a:17:
         ef:36:d6:19:b9:ca:f4:02:2c:11:f9:5c:4e:e0:a1:3f:ee:55:
         74:2a:e3:16:43:99:51:8a:97:59:b7:f2:a3:2a:1e:4e:ad:96:
         17:2e:5a:0b:03:9a:00:12:4b:7a:4d:76:b8:ea:ee:cc:27:60:
         42:95:d5:c9:6c:42:89:3f:61:4a:11:5f:c2:a3:69:cd:48:43:
         2c:b2:5e:f3:28:e8:1e:fd:87:df:00:b2:fc:50:20:fb:b5:be:
         82:f7:f3:6e:28:0d:6d:5b:89:4d:ed:fa:f1:20:14:d3:8c:04:
         33:d4:f6:d6:10:66:f8:52:8f:9b:85:d5:21:16:63:f9:0b:b5:
         26:1c:ef:de:4a:2e:5c:88:2c:6f:80:49:9e:9e:44:87:4d:0d:
         8b:56:66:86:df:28:73:96:3a:b8:a4:0f:42:b1:46:92:0b:46:
         fa:32:93:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 18:47:03 2026 by rpki-client