Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c1f691ce-19e8-3a77-81e7-ee4437e5551c.roa
File:                     c1f691ce-19e8-3a77-81e7-ee4437e5551c.roa (raw, json)
Hash identifier:          oIayCm/Pz+jQBH3BKWuS+8vL5JHsmxnE7pCl+CqgYt0=
Subject key identifier:   38:47:1D:3D:62:E2:AF:16:CA:67:60:CB:3A:AE:79:34:01:4F:A4:FF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D1D04A554722533F270FAA9D8
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c1f691ce-19e8-3a77-81e7-ee4437e5551c.roa
Signing time:             Mon 09 Mar 2026 17:29:23 +0000
ROA not before:           Mon 09 Mar 2026 17:29:23 +0000
ROA not after:            Sun 07 Jun 2026 17:29:23 +0000
asID:                     398781
IP address blocks:        172.121.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:04:a5:54:72:25:33:f2:70:fa:a9:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  9 17:29:23 2026 GMT
            Not After : Jun  7 17:29:23 2026 GMT
        Subject: CN=3c4aee5d-fcd7-4e2c-8aa5-7d10a370c004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c0:b6:5c:f9:38:dd:84:d6:79:d4:43:af:e9:
                    07:f0:26:57:01:5f:9c:a7:f8:39:c1:d7:4b:53:47:
                    4b:45:92:21:f5:44:30:b6:e4:c5:cd:47:79:a3:52:
                    02:d6:0a:94:d2:f0:c8:78:01:51:a9:4d:f7:d8:c3:
                    6d:84:19:1d:05:2f:77:fd:18:b6:ca:3f:2a:cf:a5:
                    6e:7c:24:7e:5b:68:0d:79:bc:98:1c:02:3f:79:70:
                    b0:c8:88:3e:5c:b5:bc:65:43:50:7e:bb:19:ce:f9:
                    70:fd:9e:9f:ab:42:cb:bf:fa:6a:ba:78:b3:df:7e:
                    fe:f5:8d:ad:1f:81:44:a5:ff:1f:6c:9e:bc:20:71:
                    7e:18:38:8e:40:34:10:bf:5b:55:db:de:60:9d:10:
                    72:5d:e6:3c:dd:49:1d:da:9b:a4:be:de:49:da:6f:
                    d3:da:67:3a:99:3f:b8:cd:aa:d4:2f:24:bb:9b:c2:
                    6f:97:18:b7:47:ba:60:44:35:33:ae:7d:58:1f:88:
                    28:09:51:71:87:ac:e5:e0:b1:1c:7a:55:f2:69:e8:
                    bb:87:74:2a:35:c4:e9:d0:ad:ab:a0:ee:3e:d5:00:
                    3a:47:98:dd:91:8d:51:80:a9:f8:a1:41:1d:c5:9b:
                    48:c8:c8:53:4d:db:9f:84:35:c7:3c:89:3f:3c:e4:
                    b7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:47:1D:3D:62:E2:AF:16:CA:67:60:CB:3A:AE:79:34:01:4F:A4:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c1f691ce-19e8-3a77-81e7-ee4437e5551c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:cb:f3:63:ac:ac:d2:93:29:e6:00:ee:e5:ed:de:92:35:47:
         71:f7:16:eb:c5:b8:15:ae:b9:74:80:f5:d5:18:8a:73:8c:16:
         62:96:30:d6:f1:4d:2b:b8:a1:28:20:5a:6b:82:06:20:52:4e:
         1e:17:ca:02:04:1b:f8:e4:b3:17:9d:a9:ed:d1:e2:e9:e8:79:
         f9:4f:a8:f5:e3:19:cd:36:79:82:02:e7:61:9d:fa:b8:68:71:
         46:6f:65:ff:8b:f1:94:a4:f2:50:66:a3:6a:6c:e8:27:5b:8e:
         aa:76:04:04:e7:9f:12:3b:fe:2c:7a:4a:65:e9:ea:a0:15:1e:
         47:15:9a:62:e0:ec:be:5a:5d:ab:32:42:ca:d9:f8:4f:90:c8:
         53:49:18:4e:84:04:5e:93:72:0c:3d:f5:fb:f3:de:2c:ec:cf:
         1a:a8:d5:00:0c:4a:7c:03:b4:af:7f:9e:a2:f2:d6:46:6f:27:
         c6:76:f9:df:9e:cb:cd:de:e0:c2:46:b0:a7:5b:bb:3d:c3:50:
         2f:67:b7:6a:6c:95:82:63:8b:3a:00:a0:13:ee:74:c1:f3:dc:
         7e:36:23:66:d9:99:3d:68:a4:c9:1d:c2:6b:b9:be:f6:a0:81:
         5c:07:68:09:05:a4:80:57:5c:d5:6f:15:25:63:0b:31:a5:ce:
         69:b4:f3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 18:50:06 2026 by rpki-client