Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ac769227-e328-3ef7-a7d7-099e129a190c.roa
File:                     ac769227-e328-3ef7-a7d7-099e129a190c.roa (raw, json)
Hash identifier:          kdiNimtYLLeAQMwKHIi3zfVnN5LtXd6O3xXHek73aUI=
Subject key identifier:   F1:24:D2:D5:C2:5E:F9:48:11:21:C7:FA:B6:A2:81:F8:C5:F1:46:C5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EB6E1AE93A9FEEBC6E819F980
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ac769227-e328-3ef7-a7d7-099e129a190c.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     212238
IP address blocks:        172.121.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:ae:93:a9:fe:eb:c6:e8:19:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=6985dff3-1a1a-4ce4-853f-bd2e2e0eb25a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bc:28:f9:5f:f9:da:3b:5e:91:a6:8f:9a:62:
                    3c:ea:db:ba:e3:2f:ef:d2:dc:8f:ed:3d:08:31:55:
                    cd:71:21:ad:ff:8c:b5:1d:11:b4:e3:43:39:b0:22:
                    9c:b6:7b:55:85:08:0c:16:5d:bb:80:0e:e5:8b:53:
                    a1:fc:6d:a6:75:8b:9a:70:6f:1a:2c:4b:7c:4d:dc:
                    66:97:a1:7b:23:b4:fb:47:36:03:11:75:aa:01:53:
                    f0:7c:69:db:e8:3f:2e:62:04:51:37:22:a2:68:d0:
                    71:bc:36:af:a3:30:ab:93:7d:58:01:0c:49:36:92:
                    c9:e8:2a:b3:25:f5:61:8d:40:c5:05:a6:a6:c1:7d:
                    cf:c5:8b:3d:c8:fd:1b:4c:e6:1d:e7:4c:4d:cf:c8:
                    c6:f7:f7:0b:1e:78:b2:6c:c4:ab:69:63:42:5c:27:
                    5b:13:62:bb:24:4a:5e:d3:d9:f7:66:f2:49:b5:fb:
                    93:d0:61:d1:46:a0:22:5c:99:40:27:98:3f:94:97:
                    74:77:03:09:60:80:23:31:09:bc:28:c0:91:ab:42:
                    63:56:55:79:1b:60:5e:8d:b4:c9:22:f2:ca:de:92:
                    6c:0a:6e:2d:a0:6c:45:e3:2e:29:06:d4:06:0f:88:
                    24:b8:68:73:e7:ec:6c:fb:64:22:e3:aa:50:3b:f6:
                    ef:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:24:D2:D5:C2:5E:F9:48:11:21:C7:FA:B6:A2:81:F8:C5:F1:46:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ac769227-e328-3ef7-a7d7-099e129a190c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:d2:54:56:87:7a:59:c2:17:35:ed:5b:e1:6d:cc:e9:53:87:
         88:e7:35:7a:ed:33:59:89:d9:59:86:34:7b:77:ab:06:d7:71:
         43:aa:5d:87:a5:39:22:53:d1:e4:b9:dd:11:78:8f:c2:43:38:
         b5:5f:4a:ef:8e:2d:fc:1a:c3:3e:d9:ae:25:3b:08:2d:98:45:
         22:bd:74:0b:f7:3b:6b:cb:02:5c:7b:e2:0e:37:71:39:0d:12:
         21:2e:fa:83:ae:6e:0b:35:f1:3f:96:4c:93:9c:17:8d:96:98:
         7c:8c:29:1d:25:17:d5:81:32:81:df:70:07:11:af:3b:3a:58:
         31:01:b9:39:85:0c:9f:6c:5f:e3:43:b7:c3:7f:91:60:0d:03:
         2a:b1:2e:0f:57:7b:89:b9:fa:92:92:cb:df:2f:e4:ed:57:45:
         5e:36:00:01:c1:a2:d8:75:c8:80:75:44:69:40:d5:5b:88:0c:
         d5:db:85:c3:03:89:9f:2e:07:7e:54:21:7c:38:65:81:d9:55:
         a0:c1:95:15:17:dd:3e:d7:f7:69:7a:75:a5:83:a8:b2:7e:5d:
         b5:28:b4:26:6d:fb:39:89:6e:0c:96:1f:5f:cd:fc:4a:cb:38:
         31:2c:a4:23:32:d3:ae:58:d9:e3:24:29:9f:c4:b1:81:ca:7e:
         46:a9:d0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 07:45:38 2026 by rpki-client