Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f975dd64-6673-386b-bf50-227700e80e42.roa
File:                     f975dd64-6673-386b-bf50-227700e80e42.roa (raw, json)
Hash identifier:          iPXfeBpwb/F+rQCOl5QzhdTBVSv4xxw5E1zONa7X0rw=
Subject key identifier:   9D:E2:B1:B1:31:8A:10:9C:B1:32:C7:F7:99:3E:1E:BC:71:D2:DC:83
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584E13350AED9E506472573BE438
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f975dd64-6673-386b-bf50-227700e80e42.roa
Signing time:             Fri 05 Jun 2026 21:55:45 +0000
ROA not before:           Fri 05 Jun 2026 21:55:45 +0000
ROA not after:            Thu 03 Sep 2026 21:55:45 +0000
asID:                     44559
IP address blocks:        172.120.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:35:0a:ed:9e:50:64:72:57:3b:e4:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun  5 21:55:45 2026 GMT
            Not After : Sep  3 21:55:45 2026 GMT
        Subject: CN=e0115374-aa70-4119-a857-fbd4bee27f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:46:1c:c6:2f:a3:67:1a:f1:7e:a2:b7:87:fa:
                    38:b2:70:ed:44:29:8b:47:46:78:d3:5a:1d:df:bf:
                    bf:b7:bc:02:15:58:20:1c:67:47:1e:dd:32:00:45:
                    29:99:5f:e8:9c:88:59:d8:bb:e4:b6:34:93:a7:ac:
                    f6:da:8b:ec:6e:13:00:3e:1f:56:a2:1b:d2:7c:f0:
                    c3:98:a5:e4:d0:3b:37:48:f8:2e:02:4a:43:07:64:
                    80:85:8c:f6:1e:08:a1:8c:7c:75:45:ae:01:97:fb:
                    b8:6a:71:c9:69:32:a1:c1:97:9c:4f:b0:32:a3:2c:
                    1b:74:69:3d:48:d2:3f:b1:bb:33:f5:d7:23:e4:a1:
                    dc:91:8f:8e:87:a8:d3:7b:33:14:b1:46:f4:94:f9:
                    69:e8:a5:6b:5c:79:40:bd:b4:06:00:3b:10:2b:1d:
                    dc:56:85:36:20:5a:8a:3c:82:19:59:fb:28:2d:90:
                    a0:ad:2e:f7:1e:83:ef:8c:79:1a:fc:78:20:39:b9:
                    57:a9:83:a9:a6:9a:d7:39:ff:bf:cd:4c:b1:66:49:
                    63:b9:d2:2c:64:da:4b:40:f1:2c:3e:6d:05:46:89:
                    7b:ee:90:43:04:e7:5d:01:d9:33:ad:49:9b:79:4f:
                    b9:89:a6:2a:f1:1e:d6:82:09:7e:e9:bd:7b:ce:dd:
                    4d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E2:B1:B1:31:8A:10:9C:B1:32:C7:F7:99:3E:1E:BC:71:D2:DC:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f975dd64-6673-386b-bf50-227700e80e42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:39:11:a9:18:bc:26:d1:11:5d:eb:21:28:89:7b:29:5e:bd:
         cd:9a:f2:d6:cc:6d:e3:cc:1e:c0:56:25:58:31:c6:49:58:7e:
         43:b2:a0:82:ea:ac:f1:74:6d:c3:1d:d2:0d:b7:58:e8:77:0b:
         91:84:a6:f4:97:9a:d5:71:64:55:3b:59:23:15:c1:63:fb:d1:
         78:0e:59:67:65:12:21:39:45:1e:ff:f8:c1:0c:3e:a3:73:8f:
         2f:b0:6a:af:8c:07:ee:af:ba:17:4f:e6:e0:95:9e:11:03:8b:
         e3:b9:fe:44:5b:56:bc:ac:d9:52:1f:83:4c:b7:4a:12:c0:52:
         34:2f:f7:30:93:92:e7:c2:00:54:b3:a7:d3:18:49:f0:01:24:
         49:be:29:f7:0b:a2:ad:05:26:fa:b9:0f:8a:39:e3:ad:8a:16:
         2f:cf:88:18:2e:a6:d8:2e:02:9a:ab:fb:1b:ad:62:47:3a:de:
         6c:4c:c8:d9:fc:7c:b9:88:e9:76:6e:85:a5:d9:4b:32:53:bb:
         ee:ed:e8:48:26:11:39:fc:d3:e0:20:f3:9b:6e:56:eb:5f:9c:
         be:90:62:45:1c:35:5c:01:8a:77:09:af:5b:c7:b1:6b:01:e2:
         bb:82:a1:b5:93:16:82:b9:7c:be:40:3f:38:eb:65:0e:90:c3:
         7f:cf:5b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:36:18 2026 by rpki-client