Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d871b270-a246-3f8a-8a86-1910059a9e7c.roa
File:                     d871b270-a246-3f8a-8a86-1910059a9e7c.roa (raw, json)
Hash identifier:          1A/zOP3EH9DSO5jEVbSZYsFyV+KyqPzr7XDQYor6zGs=
Subject key identifier:   7D:87:5D:1F:DC:12:A0:E6:AC:E5:77:90:55:CC:A4:EE:44:24:A2:77
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584E1333BC1102C13FE698078C20
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d871b270-a246-3f8a-8a86-1910059a9e7c.roa
Signing time:             Fri 05 Jun 2026 21:53:07 +0000
ROA not before:           Fri 05 Jun 2026 21:53:07 +0000
ROA not after:            Thu 03 Sep 2026 21:53:07 +0000
asID:                     214238
IP address blocks:        172.120.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:33:bc:11:02:c1:3f:e6:98:07:8c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun  5 21:53:07 2026 GMT
            Not After : Sep  3 21:53:07 2026 GMT
        Subject: CN=356068bb-e982-4d35-80f5-9e507459786d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5d:cb:e0:cc:87:b3:be:29:4b:09:b1:0d:ee:
                    d6:5e:6e:ee:94:55:a8:b1:7c:9d:91:52:54:4d:00:
                    95:17:63:e7:60:3b:78:69:18:ad:3b:5f:19:eb:70:
                    49:bc:b6:8e:10:6c:c9:47:06:ba:c2:f5:ae:04:b0:
                    bb:76:f1:89:cc:ed:e8:54:b9:66:55:bd:a8:ba:95:
                    c3:c2:88:cb:44:6b:9e:27:15:6a:07:82:c0:3c:99:
                    ef:48:cc:17:e6:c2:7e:a7:8b:a2:e7:02:c6:40:ac:
                    6b:d6:0c:db:51:6d:27:56:d6:4d:5d:70:12:0a:55:
                    65:48:88:36:3b:9b:cf:87:24:86:2e:be:5e:e8:ac:
                    cb:01:d9:97:b3:c1:03:b5:8d:99:9c:a7:3a:24:12:
                    f1:b9:a4:cf:02:06:b7:13:b8:29:c7:70:8b:24:51:
                    f1:a7:3b:74:7c:a3:c4:16:84:d1:f2:9c:2f:2e:23:
                    47:47:cc:f6:7b:c1:86:8e:2a:f9:7e:9a:f9:7d:9e:
                    95:3f:12:5e:50:b2:d6:37:50:ad:d5:ea:33:d1:75:
                    71:e7:22:98:6b:ea:95:a9:45:72:eb:65:6c:c4:aa:
                    02:06:77:3f:45:94:43:d1:9e:62:da:4c:a5:33:93:
                    0c:2d:32:0e:8b:af:34:bf:3a:9d:ef:26:7b:b7:73:
                    d5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:87:5D:1F:DC:12:A0:E6:AC:E5:77:90:55:CC:A4:EE:44:24:A2:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d871b270-a246-3f8a-8a86-1910059a9e7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:20:8f:24:4e:a9:dc:bc:22:a2:a8:89:2f:ac:e4:09:e5:db:
         17:df:0f:ca:28:d0:70:52:d5:ae:66:54:5c:18:bf:d3:0c:13:
         02:c4:23:c2:89:a1:0a:b3:d1:de:53:8f:74:ef:93:52:ef:a3:
         4e:66:1f:88:44:01:92:88:2b:e9:e6:d3:bb:cc:2f:f2:8e:55:
         42:02:af:5e:2f:28:98:54:f0:ba:1c:38:b7:28:f0:69:ae:f0:
         21:92:1d:97:0d:c5:09:2d:2e:1f:f1:98:77:31:22:f7:fc:d4:
         a9:43:2b:d9:be:e2:12:12:4c:30:06:b7:6f:f7:ea:87:e0:ba:
         75:79:1d:d8:bb:a0:39:e9:eb:4e:14:7e:e6:d0:a3:1a:0a:95:
         22:6f:c8:e5:87:0f:b7:f2:fd:0a:37:87:8c:a3:cc:41:e8:11:
         a7:4a:14:be:f2:1b:37:2b:ae:c7:03:0a:c4:ac:7c:5c:fb:8e:
         8a:7c:2e:1d:19:b3:d2:10:1d:ab:81:27:17:73:74:bf:49:6b:
         ef:e7:f0:f4:8f:7f:a2:73:18:df:6e:55:ef:96:50:61:8f:6d:
         5f:f2:d4:70:80:91:14:8f:e8:52:cb:e3:5c:5d:c6:88:be:d1:
         e7:ac:c6:4a:c5:68:77:f6:73:f4:c9:ea:6c:32:3c:ab:1f:98:
         72:61:9d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:49:36 2026 by rpki-client