Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a01edfe9-f531-3e4b-9806-af1109e168e0.roa
File:                     a01edfe9-f531-3e4b-9806-af1109e168e0.roa (raw, json)
Hash identifier:          Fou4rnfc/FsN5+MWj/gG4xRceYqN7FmezFq9W3SDnCk=
Subject key identifier:   30:91:0E:93:68:05:1B:F2:39:37:4D:46:B4:B8:71:96:0E:A9:50:2C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F4972F7AF485B34ED9FB2CC00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a01edfe9-f531-3e4b-9806-af1109e168e0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     398781
IP address blocks:        172.121.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:f7:af:48:5b:34:ed:9f:b2:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4ae2fbed-2a57-4825-a63c-2996d7584e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:53:04:4e:d5:ec:2c:c9:bb:4c:ff:c4:98:a8:
                    9b:76:f4:00:12:b6:4f:47:4b:1f:f6:7d:75:66:4f:
                    b6:95:f3:4e:82:a9:53:50:f2:70:30:4e:58:93:76:
                    47:cd:90:bd:1f:eb:6e:38:18:84:30:43:87:0c:77:
                    02:0c:98:6f:ba:29:b8:b2:87:6d:ce:68:63:9b:16:
                    ce:fc:e9:9e:81:57:7f:5f:be:2c:50:43:f8:e0:b2:
                    88:de:ea:76:15:90:60:27:bb:19:a9:03:9c:44:ea:
                    87:91:c3:3a:73:81:17:e3:a5:47:28:dc:97:d8:f8:
                    4c:a8:00:90:a8:51:0d:10:36:43:08:eb:67:a6:a2:
                    2f:d9:08:ea:f1:1d:8f:19:6c:2b:c0:f6:c8:0f:85:
                    b7:13:f6:02:69:c6:f9:89:33:31:39:37:08:e5:c9:
                    d1:6e:eb:b5:4f:01:31:50:24:63:f1:a3:bb:09:ba:
                    70:e5:26:11:5b:5c:3d:46:15:bf:df:88:ce:8f:24:
                    25:ed:19:f8:99:d9:88:c5:f0:ba:22:5d:bc:b5:00:
                    94:97:53:d0:60:6e:db:55:3e:db:82:6a:64:c6:4b:
                    0a:1c:b4:22:d6:d4:0c:a1:2b:ca:f6:a9:cd:a5:56:
                    75:4e:ea:7c:9c:0e:a7:12:af:eb:ca:85:dd:31:ab:
                    e6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:91:0E:93:68:05:1B:F2:39:37:4D:46:B4:B8:71:96:0E:A9:50:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a01edfe9-f531-3e4b-9806-af1109e168e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:97:c7:aa:68:01:90:c8:6d:d2:bc:c4:40:8e:c6:70:fa:60:
         e3:6c:51:9c:29:37:58:db:47:c1:cd:d9:ff:42:0b:2f:a9:18:
         1d:3e:32:87:79:fa:f4:22:54:4e:86:ff:08:4c:a4:f7:b8:26:
         27:82:ce:7f:86:ab:0d:e3:04:c7:a5:8c:f6:21:4b:bf:11:d8:
         aa:8d:97:f4:cc:8d:ae:52:d0:34:18:0c:af:d0:c6:1d:c7:ed:
         d3:3e:89:15:fe:ce:a8:72:76:6f:0e:bd:2a:60:1d:f8:c7:66:
         d4:24:5b:b8:05:28:93:61:cf:7a:5a:d6:74:07:cb:d9:fc:b8:
         c7:72:29:0b:a2:00:db:c0:ba:09:68:64:d4:0e:e5:58:f3:c2:
         31:2e:bd:18:24:8d:2b:0a:2c:72:99:4f:09:f7:24:3e:0c:c0:
         79:b6:27:da:18:c5:61:da:ed:ed:ea:c9:99:a1:6b:10:d0:95:
         93:52:df:07:0e:bd:52:cd:5f:02:f4:82:49:67:d4:88:4c:89:
         59:fb:e9:16:b4:44:0b:9f:7a:f1:36:24:f3:e1:8e:8c:d4:94:
         0b:5b:a8:9e:9d:4a:62:8e:a2:0a:de:82:e9:94:31:5c:bb:77:
         c7:cc:7a:58:77:d9:0d:3c:0b:37:60:a6:79:4a:e8:75:f0:56:
         6e:5c:f4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:41:55 2026 by rpki-client