Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ee9b5766-062f-329f-b5e5-74d5f8f404eb.roa
File:                     ee9b5766-062f-329f-b5e5-74d5f8f404eb.roa (raw, json)
Hash identifier:          VuyWOCsxAVLqDVxoXas8RqAL9K8+7W9dAWrnWkjP040=
Subject key identifier:   A7:55:45:7E:4F:B5:F9:BF:39:0B:95:FC:EE:66:CA:85:B2:7B:0D:B4
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D1D02921701DDC012BB92EF00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ee9b5766-062f-329f-b5e5-74d5f8f404eb.roa
Signing time:             Mon 09 Mar 2026 17:25:12 +0000
ROA not before:           Mon 09 Mar 2026 17:25:12 +0000
ROA not after:            Sun 07 Jun 2026 17:25:12 +0000
asID:                     398781
IP address blocks:        172.120.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:02:92:17:01:dd:c0:12:bb:92:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  9 17:25:12 2026 GMT
            Not After : Jun  7 17:25:12 2026 GMT
        Subject: CN=628cedc2-49c6-4b06-a2cf-158d227a1d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8c:2a:0f:39:32:e6:10:e6:71:b4:c2:58:ce:
                    7e:0d:d1:9d:38:7f:68:01:ac:6f:09:d2:e2:ee:56:
                    9e:ea:b8:97:f0:f1:c7:bf:0b:79:11:d0:a4:66:21:
                    d7:6a:87:8a:01:4b:e5:8d:99:d5:9c:0f:06:9e:f6:
                    a5:0b:0d:2f:60:8f:5a:e8:cc:37:a5:ab:17:bb:70:
                    a5:5c:58:cb:a6:c4:1b:50:45:56:b3:ab:f9:8c:15:
                    9f:03:b3:12:85:94:e9:e1:4a:73:42:33:e5:73:09:
                    5a:2c:e4:eb:23:fe:57:a1:f6:bb:94:d6:98:5d:b2:
                    c8:b5:87:60:fe:21:8c:17:b2:98:83:ec:24:27:2b:
                    a5:d6:c5:4a:01:2c:8e:b8:91:85:b1:ea:14:b0:a7:
                    f6:90:25:e5:78:c9:11:8b:56:75:90:a2:d4:67:1d:
                    7b:a7:e9:e9:51:78:00:ab:70:5b:fb:98:7b:bc:e9:
                    8b:42:bd:8b:40:b3:02:48:ee:06:92:3e:d4:5d:3c:
                    d7:77:17:0a:f6:46:30:93:df:2e:32:6d:c8:46:2b:
                    73:59:53:e3:a3:02:12:12:27:29:b8:b7:0e:cd:c6:
                    67:e7:a4:2d:cc:27:fd:26:cc:d2:4d:c2:7a:4a:0b:
                    5c:37:3f:62:e9:e9:2a:a7:5d:8e:ce:23:ab:26:d1:
                    92:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:55:45:7E:4F:B5:F9:BF:39:0B:95:FC:EE:66:CA:85:B2:7B:0D:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ee9b5766-062f-329f-b5e5-74d5f8f404eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:da:37:a9:5c:84:7e:47:68:02:13:3b:bd:ae:2f:8d:08:5e:
         ea:07:d3:bf:0d:3e:aa:ee:38:ab:ae:60:b3:56:25:06:d9:a3:
         7b:71:1e:38:fa:c4:1f:fb:44:83:61:0f:ea:7a:0e:c6:3b:4d:
         51:6b:30:07:35:24:13:af:91:6c:05:6e:bb:f6:5f:a5:c1:fa:
         75:32:f8:da:1c:2a:c8:15:57:a4:a0:43:bf:55:10:5d:c6:c8:
         5a:ea:ca:64:02:5e:e3:9b:ef:07:ce:14:ef:47:05:38:0d:83:
         55:bd:bd:c9:cc:fd:9e:27:64:44:76:18:38:04:e0:b6:44:fd:
         20:de:2c:8f:c3:46:7e:b7:a8:8e:ad:6a:ea:88:a2:9e:80:41:
         ce:9e:30:68:29:65:ff:eb:a2:02:08:5c:3f:d4:7a:58:57:86:
         62:a2:1b:6d:5b:5f:53:9f:b2:c6:54:92:a5:30:57:34:84:45:
         84:36:c9:41:7f:d9:f7:35:03:b5:a5:b9:bb:8a:43:9b:52:95:
         1d:fc:46:ee:4d:a6:98:3f:ca:86:d3:eb:f9:d9:f1:79:2b:e5:
         a9:d3:bf:02:7f:38:21:c9:77:dd:91:a3:0d:dc:80:b9:e1:ec:
         31:0b:51:49:81:56:c6:70:3c:90:60:3c:58:12:41:23:94:0e:
         6b:e6:f3:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0dApIXAd3AEruS7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDMwOTE3MjUxMloXDTI2MDYwNzE3MjUxMlowLzEtMCsGA1UEAxMk
NjI4Y2VkYzItNDljNi00YjA2LWEyY2YtMTU4ZDIyN2ExZDEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4wqDzky5hDmcbTCWM5+DdGdOH9oAaxvCdLi
7lae6riX8PHHvwt5EdCkZiHXaoeKAUvljZnVnA8GnvalCw0vYI9a6Mw3pasXu3Cl
XFjLpsQbUEVWs6v5jBWfA7MShZTp4UpzQjPlcwlaLOTrI/5Xofa7lNaYXbLItYdg
/iGMF7KYg+wkJyul1sVKASyOuJGFseoUsKf2kCXleMkRi1Z1kKLUZx17p+npUXgA
q3Bb+5h7vOmLQr2LQLMCSO4Gkj7UXTzXdxcK9kYwk98uMm3IRitzWVPjowISEicp
uLcOzcZn56QtzCf9JszSTcJ6SgtcNz9i6ekqp12OziOrJtGSHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKdVRX5Ptfm/OQuV/O5myoWyew20MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZWU5YjU3NjYtMDYyZi0z
MjlmLWI1ZTUtNzRkNWY4ZjQwNGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHhLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGTaN6lchH5HaAITO72uL40IXuoH078NPqruOKuuYLNWJQbZo3txHjj6
xB/7RINhD+p6DsY7TVFrMAc1JBOvkWwFbrv2X6XB+nUy+NocKsgVV6SgQ79VEF3G
yFrqymQCXuOb7wfOFO9HBTgNg1W9vcnM/Z4nZER2GDgE4LZE/SDeLI/DRn63qI6t
auqIop6AQc6eMGgpZf/rogIIXD/UelhXhmKiG21bX1OfssZUkqUwVzSERYQ2yUF/
2fc1A7WlubuKQ5tSlR38Ru5Nppg/yobT6/nZ8Xkr5anTvwJ/OCHJd92Row3cgLnh
7DELUUmBVsZwPJBgPFgSQSOUDmvm86U=
-----END CERTIFICATE-----
Generated at Mon Mar 23 18:49:56 2026 by rpki-client