Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/feb07bf8-3b5d-3abc-889a-e49d8d62c8b7.roa
File:                     feb07bf8-3b5d-3abc-889a-e49d8d62c8b7.roa (raw, json)
Hash identifier:          XRx/+IDX2B0mtljg3X1MVql1UP7dRMvFdns+oAX7jWQ=
Subject key identifier:   93:D5:91:6C:E7:90:52:DE:04:81:F0:CE:0E:C7:38:39:4C:BE:56:12
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F51D2B5D0508C24BD45E72C00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/feb07bf8-3b5d-3abc-889a-e49d8d62c8b7.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     10557
IP address blocks:        172.121.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:b5:d0:50:8c:24:bd:45:e7:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=edd77325-323d-432b-9647-47c4c6dd7d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:07:86:a4:bd:d3:a0:9f:83:84:b8:62:de:bc:
                    32:5d:be:65:27:89:83:26:f0:d2:f5:19:21:da:d4:
                    96:1d:31:03:0c:02:93:c6:d4:cd:5b:da:13:fe:52:
                    32:a7:72:5e:d5:d5:8f:6c:99:08:6d:24:d7:44:f6:
                    52:a9:0a:a2:47:5c:b4:b6:fe:10:88:0e:d6:58:2b:
                    35:7f:bf:d1:ef:82:7c:ea:e6:a6:77:6d:e5:6f:b4:
                    a8:bb:52:07:25:50:03:a0:b3:fa:de:42:d8:f9:aa:
                    44:32:8b:7c:08:60:63:a9:63:37:51:e5:a0:41:10:
                    b1:a8:83:0a:d2:58:89:ac:bd:d1:19:22:40:55:9d:
                    46:3b:26:7f:14:65:93:7d:33:16:1c:c4:88:22:e1:
                    6a:5f:38:97:e3:29:99:2a:a8:2c:92:05:d9:7a:ec:
                    97:d6:7f:15:e5:33:f3:6a:81:7c:64:a8:58:d1:fa:
                    56:58:28:e7:46:ad:31:48:ed:25:03:58:06:34:d7:
                    86:ba:22:47:73:fe:cc:45:6a:21:8b:c8:5c:6b:45:
                    bc:67:2d:1f:82:ff:8f:bc:48:ad:90:9c:0a:b6:a9:
                    c5:85:50:e7:65:b1:a0:66:35:00:6c:16:45:ba:c2:
                    35:1e:bf:dd:b4:3e:dc:7f:d6:ba:f2:b8:a7:c7:ee:
                    65:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D5:91:6C:E7:90:52:DE:04:81:F0:CE:0E:C7:38:39:4C:BE:56:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/feb07bf8-3b5d-3abc-889a-e49d8d62c8b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:61:39:9e:5c:22:4d:3a:cc:b5:38:56:c8:03:5f:44:32:c7:
         51:ee:93:a2:52:3a:05:23:13:e0:87:31:a8:46:89:f7:44:8a:
         94:5b:91:2f:aa:05:05:5b:e7:fa:08:01:b9:b2:59:bb:14:f1:
         58:8c:e2:14:04:f7:b6:9a:e2:09:a9:df:5f:b9:85:40:18:0c:
         4e:6d:ba:d0:43:70:55:cc:f5:eb:86:50:45:50:f3:03:c4:26:
         0a:9d:e4:ef:52:0a:77:5b:63:24:59:e2:2a:cd:23:1f:0c:fe:
         72:72:86:aa:09:04:17:4d:07:16:a7:76:55:fe:10:d3:07:67:
         ef:d8:25:08:be:9c:cb:07:a1:7d:e9:06:f9:67:58:06:03:68:
         59:bf:ef:7f:42:da:a7:ac:a4:08:f2:27:8d:5e:63:61:9c:ea:
         68:ec:f7:19:5a:7a:e0:39:da:72:41:8e:55:9b:45:75:09:a8:
         38:fe:83:9e:0e:17:f4:e5:56:1d:a4:ea:9c:7e:46:30:31:73:
         d2:30:ea:31:2f:31:cf:46:18:1e:fd:31:ac:25:f6:fc:03:97:
         b8:ca:19:bc:d2:d1:98:3e:db:ad:fd:8f:19:cd:d4:ce:21:90:
         10:ff:f6:8c:a2:66:ff:02:00:fc:f6:1d:32:20:23:20:48:b7:
         31:bc:d5:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0rXQUIwkvUXnLAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk
ZWRkNzczMjUtMzIzZC00MzJiLTk2NDctNDdjNGM2ZGQ3ZDlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjweGpL3ToJ+DhLhi3rwyXb5lJ4mDJvDS9Rkh
2tSWHTEDDAKTxtTNW9oT/lIyp3Je1dWPbJkIbSTXRPZSqQqiR1y0tv4QiA7WWCs1
f7/R74J86uamd23lb7Sou1IHJVADoLP63kLY+apEMot8CGBjqWM3UeWgQRCxqIMK
0liJrL3RGSJAVZ1GOyZ/FGWTfTMWHMSIIuFqXziX4ymZKqgskgXZeuyX1n8V5TPz
aoF8ZKhY0fpWWCjnRq0xSO0lA1gGNNeGuiJHc/7MRWohi8hca0W8Zy0fgv+PvEit
kJwKtqnFhVDnZbGgZjUAbBZFusI1Hr/dtD7cf9a68rinx+5lXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJPVkWznkFLeBIHwzg7HODlMvlYSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZmViMDdiZjgtM2I1ZC0z
YWJjLTg4OWEtZTQ5ZDhkNjJjOGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHmBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACRhOZ5cIk06zLU4VsgDX0Qyx1Huk6JSOgUjE+CHMahGifdEipRbkS+q
BQVb5/oIAbmyWbsU8ViM4hQE97aa4gmp31+5hUAYDE5tutBDcFXM9euGUEVQ8wPE
Jgqd5O9SCndbYyRZ4irNIx8M/nJyhqoJBBdNBxandlX+ENMHZ+/YJQi+nMsHoX3p
BvlnWAYDaFm/739C2qespAjyJ41eY2Gc6mjs9xlaeuA52nJBjlWbRXUJqDj+g54O
F/TlVh2k6px+RjAxc9Iw6jEvMc9GGB79Mawl9vwDl7jKGbzS0Zg+2639jxnN1M4h
kBD/9oyiZv8CAPz2HTIgIyBItzG81Qw=
-----END CERTIFICATE-----
Generated at Wed Oct 28 07:24:54 2026 by rpki-client