Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c8268ded-0b13-3c8a-8af3-40ee5207ef66.roa
File:                     c8268ded-0b13-3c8a-8af3-40ee5207ef66.roa (raw, json)
Hash identifier:          +/wm+dKAqtiSInR4uYn11L5J8qVJbiZGLR3v0QQWOg4=
Subject key identifier:   50:2A:4D:95:61:E6:BC:8E:F9:82:E6:4B:37:14:5C:DC:E9:FC:56:C3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EB57C641F451B30521CA9CB80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c8268ded-0b13-3c8a-8af3-40ee5207ef66.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     44559
IP address blocks:        172.120.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:64:1f:45:1b:30:52:1c:a9:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=3645d357-2391-415f-9908-71df1f587e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8c:c8:34:ec:ee:77:65:9e:6c:db:28:1e:98:
                    13:55:12:e2:d0:92:24:fc:d5:2e:ac:3b:6a:74:9a:
                    dc:3a:4b:74:60:ec:f1:35:e5:06:1e:d9:99:5b:9b:
                    68:73:95:1c:32:68:96:23:00:88:be:53:87:e4:88:
                    53:0b:3a:33:09:22:8c:24:dc:4e:7d:d1:b4:cf:74:
                    e6:90:f8:c4:58:08:57:42:c3:c3:d9:1e:3b:88:76:
                    f4:57:f8:26:da:86:48:70:5f:37:ae:5b:88:f0:97:
                    76:83:d3:03:5d:62:7c:89:25:c6:63:a0:7f:86:ed:
                    c9:f3:1b:be:c2:f0:66:0d:5d:b1:2b:ca:3f:8b:d1:
                    e6:eb:55:46:39:a9:4d:33:0b:af:e6:52:34:e8:d2:
                    b5:63:86:68:dd:b8:93:97:90:55:4c:7c:3e:a8:7f:
                    83:b7:f3:7a:0d:0d:c0:e2:df:e9:60:2b:11:ba:e2:
                    35:db:94:94:7b:f9:79:28:af:9b:18:27:3d:35:fd:
                    58:50:b4:ba:d4:f6:2a:60:29:08:05:87:ff:ae:ff:
                    1f:36:c0:fd:a2:55:85:4c:f3:7c:26:e9:ae:0f:1c:
                    3c:17:cc:96:b4:af:7c:4c:5d:2e:0b:b7:84:06:76:
                    34:2c:ac:36:45:6f:50:1f:f0:21:a7:40:db:bc:ba:
                    bc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2A:4D:95:61:E6:BC:8E:F9:82:E6:4B:37:14:5C:DC:E9:FC:56:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c8268ded-0b13-3c8a-8af3-40ee5207ef66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:31:2c:04:b1:7a:4a:9b:a1:44:3b:15:0a:37:80:85:65:69:
         38:6b:63:ae:9c:26:f0:ba:48:6e:cb:93:52:28:4d:cb:50:95:
         c2:61:50:51:89:72:71:af:e8:ad:31:82:9a:25:4c:6f:24:c0:
         ab:bf:aa:d7:15:d5:f7:72:36:f2:24:75:d7:d2:01:83:b3:e9:
         6b:e9:a6:16:c0:b3:3e:f3:76:e5:33:f7:2b:50:74:27:88:89:
         e7:94:46:23:a2:05:c0:0e:c3:5a:2b:41:83:78:80:63:ad:40:
         8d:fd:41:d3:02:b6:41:d7:87:42:1e:a0:67:2f:ae:96:25:10:
         f0:10:10:d8:89:7e:34:af:0f:7b:8b:d3:7f:86:7c:83:50:1f:
         b1:73:d3:01:6d:88:4d:8b:3b:08:ec:0a:74:da:86:44:0f:7c:
         fa:3b:f9:dd:bc:5f:57:33:ce:c0:a2:8c:87:8b:3f:eb:cb:96:
         95:b7:6d:1b:4f:7c:66:9c:f8:06:df:5d:f8:26:e7:03:2d:b4:
         f1:1a:a8:3f:cc:77:cb:c9:f6:af:c0:2b:1b:cd:7c:92:29:13:
         18:26:84:49:36:d1:21:06:38:71:04:1d:a6:55:74:26:d2:99:
         c3:ea:52:e2:8e:c0:d8:70:45:d0:12:1c:09:af:1f:43:c0:94:
         75:1e:03:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:14:40 2026 by rpki-client