Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f5af0a84-2432-39f4-a789-d93fd6508484.roa
File:                     f5af0a84-2432-39f4-a789-d93fd6508484.roa (raw, json)
Hash identifier:          h9t8vRrWOkz/OHGLNkJ22ZepgPzdwZjL7PTm69+1yKc=
Subject key identifier:   85:4D:50:27:39:9F:3D:2A:4A:08:BC:D9:D7:E8:E9:4C:C0:86:2E:3C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F576819266DBA097FEF77D838
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f5af0a84-2432-39f4-a789-d93fd6508484.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     44559
IP address blocks:        172.120.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:19:26:6d:ba:09:7f:ef:77:d8:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=57a88df1-1d19-4e0c-b106-1d6b106555a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2c:3c:1c:21:e3:6b:f6:ce:f1:89:ba:58:b7:
                    9d:2d:5b:9e:50:70:24:94:e0:b8:12:b2:b8:00:83:
                    f3:95:11:b5:5c:b0:e4:34:f9:69:25:86:c7:c9:5d:
                    d7:c7:94:92:a4:a4:dc:2e:73:dc:70:27:f0:66:d2:
                    34:31:7c:93:bb:99:69:a9:85:28:66:db:b7:41:ac:
                    4d:9e:a6:3b:c3:f9:56:8a:eb:84:7d:bb:e4:c4:6f:
                    2e:de:3a:e3:75:65:52:9f:f4:97:ac:cb:fd:9d:fc:
                    2f:5a:8f:70:c6:a0:35:95:a3:9b:e7:8c:e8:dc:16:
                    92:d2:2b:58:65:59:65:e2:a3:72:3a:d1:a0:fc:44:
                    48:52:58:c8:53:e6:c2:6e:bd:f5:55:be:cc:d9:40:
                    68:a1:0d:33:07:77:a4:a3:28:53:64:79:ac:8d:30:
                    97:2a:2a:5e:54:7a:f0:a1:9f:1d:33:aa:11:d5:76:
                    ae:4c:8c:61:72:9c:40:04:93:bb:b8:47:3f:32:e7:
                    d4:9a:de:45:e3:fa:31:18:d7:ef:67:3c:68:1a:76:
                    55:30:35:d9:02:a8:82:4b:c6:61:e9:00:86:7b:6e:
                    cd:d3:5a:12:cf:2f:85:f0:57:94:12:17:8d:cb:9b:
                    3a:8e:d2:dd:68:f2:98:23:46:e8:3e:84:4d:50:93:
                    3b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4D:50:27:39:9F:3D:2A:4A:08:BC:D9:D7:E8:E9:4C:C0:86:2E:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f5af0a84-2432-39f4-a789-d93fd6508484.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:40:ce:7e:32:1c:e6:ec:94:e2:6f:9b:d1:0b:f2:9c:c5:48:
         5f:b8:b7:ae:3a:fd:7a:e8:91:20:6c:37:6c:69:db:8d:46:b6:
         8c:09:5f:59:e0:06:e7:0f:1f:64:12:c5:25:8a:fb:65:53:03:
         ae:04:12:6c:69:45:99:a7:b1:97:f3:fc:af:c6:2d:4f:65:48:
         0c:13:5c:38:16:fd:b7:05:41:de:a5:2b:4c:28:e1:b9:38:63:
         39:b9:ba:0d:ba:17:cf:05:80:3f:f8:c2:65:a6:44:bb:b0:c1:
         29:7f:c7:3d:cb:e4:bd:88:74:0d:7b:60:90:09:a8:e3:17:31:
         eb:64:7b:a9:b2:63:10:bd:19:e6:92:9a:6f:61:3a:0b:c9:44:
         6c:db:c4:59:c4:37:40:11:fe:30:ee:cf:57:c4:cf:73:32:50:
         6c:9e:e0:f9:89:5a:4b:da:c0:99:06:86:f4:8b:35:da:46:91:
         c6:32:23:f4:fd:16:e5:cf:4d:9f:cb:14:3f:ee:85:43:aa:f5:
         ec:de:44:dc:48:1f:cd:43:60:03:37:53:3d:cb:f1:3f:fa:ec:
         44:87:0d:0e:98:5b:c1:07:20:10:1f:70:0e:11:cf:af:cc:54:
         6e:8d:e1:ff:5b:36:59:fb:a1:a4:65:b2:82:64:7e:bd:67:b1:
         57:bb:59:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:25:46 2026 by rpki-client