Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c4c5115f-9f6d-3366-8f7a-245b88ae5c6e.roa
File:                     c4c5115f-9f6d-3366-8f7a-245b88ae5c6e.roa (raw, json)
Hash identifier:          mMIcprdW3DNfbmjE3vxr1NbqCSIUZi+P8LSsF/4+U1U=
Subject key identifier:   76:F6:BA:2A:56:09:2F:60:FF:7C:91:52:C0:C5:05:0A:03:57:A1:45
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EB6E1B2A9EA8B2CF73089A040
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c4c5115f-9f6d-3366-8f7a-245b88ae5c6e.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     212238
IP address blocks:        172.120.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:b2:a9:ea:8b:2c:f7:30:89:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=b0daf827-0bc1-4e1e-b5e8-cb62df990ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9c:8e:43:3a:7c:d4:3f:9a:25:72:c6:11:e5:
                    23:fa:ef:79:fb:48:2e:74:71:88:5e:62:64:3e:79:
                    7a:04:a1:03:c0:41:20:c0:02:74:c5:83:fb:2e:89:
                    42:27:c0:09:fa:94:18:0c:ed:09:fd:1b:90:49:66:
                    e0:68:e2:ac:12:ee:a4:58:da:73:14:54:de:a0:0f:
                    b8:c7:60:5d:3f:8f:34:9f:bb:ca:4c:62:be:c3:b7:
                    64:82:a1:05:22:92:38:3a:c3:36:9b:13:5c:ca:e0:
                    3b:d7:a2:39:03:44:ec:47:8b:23:b4:68:43:85:93:
                    ea:21:8d:a7:3a:a0:ba:4e:33:b9:6a:2c:27:7e:06:
                    45:ef:28:c8:bb:31:8e:6c:03:04:31:78:7f:c5:5f:
                    bc:4b:cd:e8:b2:f5:68:b2:34:79:59:a5:2a:35:27:
                    a5:67:4a:e7:22:79:d7:10:b0:87:ce:df:d5:3d:02:
                    a2:52:64:5a:13:c7:81:dc:2b:bc:9c:43:75:f5:26:
                    de:e5:c3:e6:88:18:ae:5c:eb:74:52:ae:a0:67:cc:
                    91:c7:3d:cb:f8:0a:29:af:81:86:75:e2:dc:c9:c6:
                    a2:6d:d0:1e:c3:45:eb:ae:b8:3a:3d:3a:43:57:5a:
                    a2:87:b7:89:f4:d1:f3:f4:2f:26:66:69:52:c0:1f:
                    e7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F6:BA:2A:56:09:2F:60:FF:7C:91:52:C0:C5:05:0A:03:57:A1:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c4c5115f-9f6d-3366-8f7a-245b88ae5c6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:4f:eb:96:77:8b:69:9e:dd:ce:d0:56:c5:04:0e:9c:91:5b:
         a2:ce:fc:23:10:16:51:00:c1:96:60:4e:1d:95:7f:3f:df:52:
         da:7e:df:f6:db:7d:44:14:27:f0:4c:bd:9d:22:7c:a0:67:ae:
         e1:ff:b0:bb:37:f0:6f:7a:30:4f:74:a3:60:76:8a:42:de:41:
         79:0e:5f:94:8f:78:5b:05:3a:44:a4:e7:de:8b:37:2c:19:9d:
         b2:a1:dd:35:a5:d8:fe:c4:5d:57:56:9d:8a:c6:8d:c6:02:07:
         d0:2a:1b:f3:56:94:d7:ab:bf:3e:03:55:4b:43:f9:93:66:ee:
         85:ef:f8:c0:93:36:5b:bc:91:97:98:2f:9e:31:09:93:ca:77:
         10:49:19:71:ae:0a:db:e7:f5:99:f4:e3:78:21:3f:c0:52:c1:
         90:68:78:3f:e5:0b:f2:df:a1:f6:c0:0e:c7:19:41:ce:6b:cf:
         6f:f1:3e:34:2c:b8:a5:3f:c8:1e:66:ed:3e:95:3d:97:bd:d9:
         05:32:ee:a9:23:0f:38:58:bf:19:60:5e:79:ad:30:17:62:c3:
         e6:05:20:4d:52:46:ac:22:ef:50:5d:50:86:d3:4d:24:38:d6:
         1d:60:c8:30:03:b8:7e:7d:84:a2:db:57:b9:74:c0:38:d2:c2:
         a2:45:56:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 10:42:24 2026 by rpki-client