Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d67acbeb-dc64-3324-8fca-3adb5b6387fa.roa
File:                     d67acbeb-dc64-3324-8fca-3adb5b6387fa.roa (raw, json)
Hash identifier:          z8zSHs5hXixvtaMw7cDnGA4MJi4rPZUjifIqvw7XUvk=
Subject key identifier:   5A:95:21:D3:50:7D:C1:E9:EB:31:92:12:C9:15:44:CD:E3:91:75:76
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F58CD5DBCADCEFDD2CA682A60
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d67acbeb-dc64-3324-8fca-3adb5b6387fa.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     138233
IP address blocks:        172.121.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:5d:bc:ad:ce:fd:d2:ca:68:2a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=25432670-9ac9-462d-b9c2-b264afbba96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bc:d6:c1:79:41:af:0b:35:08:6b:fd:90:47:
                    9f:cc:02:b0:31:25:54:dd:61:0d:e7:8c:2d:39:34:
                    60:5f:82:e4:a4:49:38:15:e0:af:5a:6b:00:15:8f:
                    ff:54:a5:a4:10:f1:09:2f:9b:b1:56:c3:f9:e0:84:
                    3d:05:ac:4c:e6:0f:80:26:7d:28:64:9f:98:9e:ba:
                    18:05:19:41:76:df:87:99:c1:5e:e1:e9:da:0a:3d:
                    d2:7e:7f:94:dd:4d:02:30:24:3f:68:83:c2:7b:fb:
                    4f:be:3c:4c:40:b5:01:1b:13:32:ed:e5:23:39:6a:
                    f6:57:71:a9:1d:9d:28:ae:ae:d1:9d:98:ce:a6:27:
                    d7:84:54:19:66:3f:18:01:70:ec:91:f9:b2:b3:b5:
                    87:fe:86:e8:82:46:5e:0f:17:81:c6:92:0f:e3:a3:
                    05:21:62:e7:5c:d7:8a:3c:9d:0e:65:2a:7b:65:d3:
                    a7:ba:fb:20:22:ec:66:b9:d0:51:23:48:1b:26:4b:
                    9a:83:16:aa:e6:fb:c7:6b:e2:2f:f8:b0:62:ec:73:
                    b8:7d:c1:5e:7c:71:97:da:9b:01:b4:26:c6:67:6b:
                    3e:bb:46:7f:ce:3c:81:20:82:81:bc:b8:76:29:9b:
                    80:4f:36:08:55:bb:70:12:40:85:59:70:41:a7:42:
                    13:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:95:21:D3:50:7D:C1:E9:EB:31:92:12:C9:15:44:CD:E3:91:75:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d67acbeb-dc64-3324-8fca-3adb5b6387fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:ef:4d:ed:b7:da:12:07:f9:1f:31:41:75:96:c3:bd:e5:e1:
         b0:fd:bf:cb:df:59:c8:80:4b:88:b4:26:56:75:f9:dd:06:70:
         69:3e:ff:6a:32:8c:ad:8b:2b:7d:3a:72:ad:58:44:a7:d3:28:
         99:79:7b:3d:4d:4a:91:9c:b4:19:22:91:38:1f:9d:ed:65:86:
         01:61:71:17:14:42:7e:dc:c0:82:91:7e:91:e0:f9:79:80:f4:
         39:7d:86:b9:13:f1:9f:21:a7:de:11:a0:6d:0a:78:79:25:65:
         0a:b6:02:13:02:13:62:f7:14:df:68:0c:a7:5b:8d:a0:76:7a:
         77:c1:19:52:cd:19:ba:77:a3:b4:c9:fc:4a:07:5a:e2:6e:4e:
         d6:78:a5:b3:37:5e:43:5d:75:1a:69:66:fb:80:58:1a:18:db:
         af:c1:71:32:19:5e:85:12:62:2c:4f:f9:21:16:a6:1a:7a:57:
         00:b0:00:bf:2a:ad:be:45:c5:c6:1e:23:ad:75:66:bd:80:ab:
         fc:17:8b:54:39:0a:50:cb:37:f3:8b:9b:92:fa:9f:ba:a8:fc:
         01:be:5f:b5:2b:c2:fd:8f:05:3f:de:fe:e6:6e:d1:fb:e8:67:
         14:57:3f:cd:cd:62:68:31:9e:19:20:ad:32:e0:a7:16:76:25:
         88:74:c5:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzV28rc790spoKmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk
MjU0MzI2NzAtOWFjOS00NjJkLWI5YzItYjI2NGFmYmJhOTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LzWwXlBrws1CGv9kEefzAKwMSVU3WEN54wt
OTRgX4LkpEk4FeCvWmsAFY//VKWkEPEJL5uxVsP54IQ9BaxM5g+AJn0oZJ+YnroY
BRlBdt+HmcFe4enaCj3Sfn+U3U0CMCQ/aIPCe/tPvjxMQLUBGxMy7eUjOWr2V3Gp
HZ0orq7RnZjOpifXhFQZZj8YAXDskfmys7WH/obogkZeDxeBxpIP46MFIWLnXNeK
PJ0OZSp7ZdOnuvsgIuxmudBRI0gbJkuagxaq5vvHa+Iv+LBi7HO4fcFefHGX2psB
tCbGZ2s+u0Z/zjyBIIKBvLh2KZuATzYIVbtwEkCFWXBBp0IT5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFqVIdNQfcHp6zGSEskVRM3jkXV2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZDY3YWNiZWItZGM2NC0z
MzI0LThmY2EtM2FkYjViNjM4N2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHn7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFnvTe232hIH+R8xQXWWw73l4bD9v8vfWciAS4i0JlZ1+d0GcGk+/2oy
jK2LK306cq1YRKfTKJl5ez1NSpGctBkikTgfne1lhgFhcRcUQn7cwIKRfpHg+XmA
9Dl9hrkT8Z8hp94RoG0KeHklZQq2AhMCE2L3FN9oDKdbjaB2enfBGVLNGbp3o7TJ
/EoHWuJuTtZ4pbM3XkNddRppZvuAWBoY26/BcTIZXoUSYixP+SEWphp6VwCwAL8q
rb5FxcYeI611Zr2Aq/wXi1Q5ClDLN/OLm5L6n7qo/AG+X7Urwv2PBT/e/uZu0fvo
ZxRXP83NYmgxnhkgrTLgpxZ2JYh0xfU=
-----END CERTIFICATE-----
Generated at Sat Oct 10 17:49:53 2026 by rpki-client