Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/225289da-cfd1-309d-b10e-619f1fe3e177.roa
File:                     225289da-cfd1-309d-b10e-619f1fe3e177.roa (raw, json)
Hash identifier:          vShAR9QPpOgUD9DuDfjHBw817NzpE9yJpk5WAZKqhtc=
Subject key identifier:   02:AD:AA:44:45:6E:69:11:EF:AE:AE:53:7E:CD:31:7A:1A:23:F1:C6
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B6D2CC18E262B0977C5FDF800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/225289da-cfd1-309d-b10e-619f1fe3e177.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     6939
IP address blocks:        172.120.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:c1:8e:26:2b:09:77:c5:fd:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=3b489bc0-1070-49eb-803b-2cdcd4ea39e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:57:dd:ad:4d:be:70:ad:d6:44:8d:b2:9d:9d:
                    68:39:5a:e7:58:14:9c:3b:2e:9c:0a:16:06:6c:2e:
                    bb:43:88:31:8c:e7:fe:b3:dd:aa:75:27:ed:78:db:
                    ab:e7:44:25:00:6d:a6:01:c2:53:0f:e3:be:d1:30:
                    c1:31:81:aa:5a:17:88:a4:31:ed:e5:98:e8:fe:62:
                    b4:7b:5e:82:c8:b0:06:51:a5:6a:b4:ea:92:7e:c4:
                    05:d8:21:50:1d:2d:fd:08:15:00:86:c8:ca:8f:f4:
                    f7:b2:76:d3:31:7a:52:37:c4:80:84:29:64:1c:e7:
                    82:23:11:6d:d3:54:fb:4f:e3:66:9a:dc:e2:ab:74:
                    d7:18:2c:90:0a:fc:9c:ea:7a:8b:d6:a7:99:93:80:
                    b3:7f:39:1d:49:9c:5a:71:32:cb:63:4e:74:77:8e:
                    3f:8b:54:4a:82:25:ae:3d:62:65:58:b3:49:78:b0:
                    41:2f:e1:d5:4e:b1:22:8f:a5:5b:7a:b1:05:99:f9:
                    31:35:1d:33:7f:01:a1:4b:df:1d:98:ea:92:1f:20:
                    d3:54:7e:e9:3f:51:e3:79:22:e7:4f:38:08:82:d3:
                    3f:2f:2a:65:8b:cc:0c:f9:e9:95:fd:5f:09:63:99:
                    63:a4:70:05:ac:d1:d1:a7:a4:07:fe:df:9d:92:27:
                    80:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AD:AA:44:45:6E:69:11:EF:AE:AE:53:7E:CD:31:7A:1A:23:F1:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/225289da-cfd1-309d-b10e-619f1fe3e177.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:5e:50:c5:35:9c:c3:63:8f:fe:be:b8:e3:73:36:39:4b:2e:
         aa:07:6a:4e:6d:a2:94:9a:28:05:d9:d7:5a:96:c8:62:0b:c4:
         c4:b8:2d:77:c2:2f:26:a2:12:8e:6f:b3:ab:e6:24:91:7f:1e:
         53:2a:5c:9c:14:fa:03:dc:c3:90:d3:2a:d0:34:92:ce:bd:89:
         d8:86:9d:ff:1c:d0:a5:44:c4:06:1a:7d:f4:f8:46:0e:2c:5b:
         3e:f3:f0:92:80:12:85:79:eb:8f:61:ef:2a:40:37:45:a4:0d:
         1c:28:c4:c5:c8:8d:47:c9:a7:c0:47:18:21:a2:c1:cb:85:63:
         38:02:97:e3:be:8a:a9:e7:f9:87:bd:01:be:c0:80:89:c9:52:
         dd:4d:01:90:79:0a:f1:6c:b0:46:99:c5:1f:24:1b:52:d5:8d:
         a3:36:f3:50:8a:f7:f1:d6:49:af:81:6e:75:92:41:35:6e:03:
         74:40:91:4b:46:2c:93:da:bc:7d:5d:51:ce:8a:ba:56:be:e9:
         9c:c4:f7:29:00:c2:23:65:8e:68:8e:dd:6b:64:01:51:66:b5:
         ae:93:7a:7a:9a:44:54:58:10:45:73:99:a4:20:6e:9e:51:bf:
         21:e1:77:b7:c6:7e:a1:0f:ee:30:be:f2:1c:27:77:3b:e2:3c:
         54:80:f9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 13:30:00 2025 by rpki-client