Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2f34cecb-b4a3-3362-a3ac-844cb321f603.roa
File:                     2f34cecb-b4a3-3362-a3ac-844cb321f603.roa (raw, json)
Hash identifier:          ho+5wFPHeecZQkjCch6ciHF8pELq5gakgHioDKRjEQ4=
Subject key identifier:   87:E0:74:AA:78:97:43:1C:15:7A:D0:E4:59:E6:76:83:F7:3C:90:2B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A849D3D310CEAD85669C61460
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2f34cecb-b4a3-3362-a3ac-844cb321f603.roa
Signing time:             Mon 14 Jul 2025 17:44:17 +0000
ROA not before:           Mon 14 Jul 2025 17:44:17 +0000
ROA not after:            Sun 12 Oct 2025 17:44:17 +0000
asID:                     44559
IP address blocks:        172.120.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:9d:3d:31:0c:ea:d8:56:69:c6:14:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 14 17:44:17 2025 GMT
            Not After : Oct 12 17:44:17 2025 GMT
        Subject: CN=b18831ce-2fd4-4b18-be97-c9a9c974a61c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6d:fe:c8:49:cb:b7:98:1b:46:63:19:ed:18:
                    0e:c6:bb:85:05:e0:ed:35:31:9e:53:3d:11:19:14:
                    a8:70:15:24:15:8c:75:96:e0:b5:8e:27:f8:2a:96:
                    54:f0:65:cd:f0:af:de:88:0a:b0:f0:ba:00:7e:95:
                    ea:75:08:9a:1f:d7:dd:b0:b3:4c:4c:9b:49:af:e3:
                    71:20:30:f3:49:45:64:b0:f8:ca:74:73:6d:c2:3a:
                    dd:f4:6a:82:6d:87:c3:22:7c:f2:3e:d9:d8:9d:58:
                    5d:cc:2e:ad:31:2d:9e:bf:cf:d8:24:34:05:76:21:
                    f5:29:28:cd:a9:d4:62:a8:73:08:e1:0b:1c:ee:57:
                    9a:ab:e0:c7:4b:63:c8:c4:db:f8:1a:47:46:a4:3d:
                    1c:98:cb:ad:63:42:ac:31:e1:90:1c:4a:9b:a4:96:
                    1c:c6:a3:95:43:fc:bc:98:3c:1a:c2:1d:6e:ff:67:
                    71:b1:e9:30:5e:99:d7:2d:d3:c5:f7:9b:e9:c1:39:
                    50:d6:fb:32:62:46:a8:d4:bf:cb:cf:84:23:a6:f2:
                    69:b1:49:6c:db:8d:e9:3f:84:1e:4a:64:30:ac:ce:
                    31:fc:dc:d0:24:1b:39:6f:67:a0:45:5f:b8:63:6a:
                    9d:cc:95:64:95:69:7e:b3:1c:11:f5:08:bc:9a:d7:
                    68:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E0:74:AA:78:97:43:1C:15:7A:D0:E4:59:E6:76:83:F7:3C:90:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2f34cecb-b4a3-3362-a3ac-844cb321f603.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:83:12:84:13:e7:45:4b:1c:60:c9:06:3f:29:7e:0f:b3:1a:
         88:52:e4:25:79:e8:5c:29:1a:52:f4:0e:bb:05:25:3d:14:1d:
         29:2a:11:e4:ef:74:e0:95:25:b6:d0:f4:6d:09:49:da:78:32:
         af:cb:4c:7c:f2:cf:4c:02:9d:8b:dc:71:e8:9a:84:6a:10:be:
         5c:52:b0:1c:82:b2:0c:6f:3e:ce:f4:07:c5:27:8a:c0:c5:7b:
         09:94:1a:ee:3b:ad:40:2b:f6:d5:bc:e5:18:09:b4:9e:b6:1b:
         c9:4f:bd:5a:ae:84:cf:e0:d7:b6:44:d8:ee:60:85:fe:08:89:
         6b:99:38:26:90:3d:47:b9:b6:de:d1:f3:37:5b:b6:f1:8b:2e:
         8b:0d:57:37:98:b4:65:3a:41:18:32:74:95:49:1c:6f:00:6d:
         3a:4c:a3:d4:5e:4f:c8:74:7d:e4:4c:48:db:67:01:d9:b3:a9:
         ae:b6:1c:bc:60:c9:b8:3a:74:46:89:8f:ae:db:38:2b:bf:32:
         5e:df:8b:0d:32:45:7e:3b:8a:a4:55:b6:ae:e1:d5:12:29:b0:
         0d:e0:e9:12:f7:e2:f9:01:f8:e9:82:0f:4f:f0:21:ad:06:c7:
         62:e5:10:04:22:ca:a2:f7:57:44:58:83:cb:aa:51:4e:eb:cf:
         fc:c7:28:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 20:10:09 2025 by rpki-client