Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/45d83b4a-00d1-3144-82c2-62aa86e09db6.roa
File:                     45d83b4a-00d1-3144-82c2-62aa86e09db6.roa (raw, json)
Hash identifier:          qqUqUictsR7PNYWdS7UvF1ot3xujgw1J0Lu7Bsjwhn4=
Subject key identifier:   9E:9B:BB:F5:9B:26:BF:CA:31:10:3B:62:67:5F:04:67:16:8E:D5:6C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B6D2CC3AEEFB25A9AA5CEB860
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/45d83b4a-00d1-3144-82c2-62aa86e09db6.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     6939
IP address blocks:        172.120.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:c3:ae:ef:b2:5a:9a:a5:ce:b8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=ccb243eb-fa05-44a2-8b1b-f23be519a34b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cf:e2:5d:e6:0e:e5:06:dd:96:c5:9c:ca:14:
                    f2:cb:4f:7e:65:47:0f:39:3f:0a:4d:9b:56:18:11:
                    d0:36:a7:a8:e0:1f:7c:64:62:04:12:d9:0c:b7:3c:
                    5a:99:6b:ca:e6:a4:9d:0b:e2:cd:80:31:50:65:ed:
                    af:04:59:60:b7:ad:ab:d0:55:53:2c:62:09:78:24:
                    14:83:e1:d8:5a:07:47:dd:7f:e2:a4:a3:e9:6e:d7:
                    6f:04:a1:0e:db:63:c6:4b:8a:e2:ba:d4:ef:f1:4e:
                    c1:9f:01:31:e0:9e:64:2d:74:c2:8a:1d:9b:ac:7d:
                    b4:16:ab:50:b2:c1:f0:19:47:7d:96:28:7e:55:93:
                    a6:45:86:41:0e:48:90:6d:b4:77:82:e5:29:55:ba:
                    49:93:d8:7c:02:9f:80:4d:4b:08:36:b2:35:e2:a0:
                    64:f4:1b:5e:a0:e1:17:ae:91:ef:e6:5c:28:92:b9:
                    ea:c9:f1:48:45:39:95:70:9c:56:89:84:60:77:b8:
                    ac:ec:ac:cf:8c:37:80:13:c8:c1:13:f8:a4:0c:83:
                    de:a2:ea:4c:57:60:f7:82:31:6b:8f:4f:55:ca:61:
                    98:42:f2:0f:ae:38:e1:0c:85:91:e3:83:69:a7:80:
                    58:61:ed:ab:79:6d:a3:e1:50:02:54:ef:e0:97:c5:
                    1d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9B:BB:F5:9B:26:BF:CA:31:10:3B:62:67:5F:04:67:16:8E:D5:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/45d83b4a-00d1-3144-82c2-62aa86e09db6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:3c:5d:ee:23:4b:86:b5:67:84:1f:6b:bd:2c:c2:dc:e5:4b:
         ec:23:96:93:3c:c7:1b:12:f6:b3:b9:71:4b:bd:8e:5f:20:8f:
         21:8d:32:2c:7a:c8:57:cf:59:ab:91:98:4c:08:76:d7:15:bb:
         c1:71:aa:ea:9f:f4:83:75:7a:5e:e5:d7:fd:28:e1:1c:6a:8a:
         89:d2:24:be:56:51:ff:c5:6d:5f:9d:c7:23:0f:12:d8:c6:24:
         1d:0f:fe:1c:19:ca:58:de:88:59:b4:1e:83:1f:cf:e7:b7:3b:
         bf:0e:19:2a:b5:f2:eb:2e:7d:0a:b1:b8:2c:9e:1f:7e:c8:1f:
         27:7c:28:a8:8f:45:d0:4a:5e:2f:e3:c0:a5:d9:e6:ae:8a:62:
         c2:b9:1c:4c:c8:51:c6:2d:2d:b0:6d:03:eb:4e:91:c1:48:df:
         98:55:96:44:a0:bb:22:5e:61:1c:9f:1d:7a:59:61:bf:42:6e:
         ea:89:89:43:2f:13:25:7f:07:df:aa:f0:80:a2:72:7a:eb:0d:
         5c:17:d7:bb:03:12:db:16:d9:96:66:1b:83:70:4b:51:eb:27:
         86:27:cb:91:e6:09:5c:7b:f6:49:04:20:c4:4d:ac:82:46:86:
         51:f5:36:5b:3c:00:46:5a:0c:47:bc:f7:96:ea:ee:24:49:bc:
         0a:06:80:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:13:52 2025 by rpki-client