Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/66c21418-2173-3432-a94d-787021702abb.roa
File:                     66c21418-2173-3432-a94d-787021702abb.roa (raw, json)
Hash identifier:          N6Umz03EBXowFAKBPP95TNL+x9WN3HczWd20t4q7OCk=
Subject key identifier:   DC:57:C8:F3:73:0A:D8:97:B9:C9:1D:4A:4F:DB:BB:9C:1A:43:78:FB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A84970B15106E5E22E325D480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/66c21418-2173-3432-a94d-787021702abb.roa
Signing time:             Mon 14 Jul 2025 17:31:48 +0000
ROA not before:           Mon 14 Jul 2025 17:31:48 +0000
ROA not after:            Sun 12 Oct 2025 17:31:48 +0000
asID:                     44559
IP address blocks:        172.120.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:97:0b:15:10:6e:5e:22:e3:25:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 14 17:31:48 2025 GMT
            Not After : Oct 12 17:31:48 2025 GMT
        Subject: CN=9317ea89-3e04-4a38-bcd4-e7d996710ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ea:7a:fb:06:18:fd:45:88:3d:99:bf:4d:59:
                    ed:05:34:e4:95:c0:6e:95:34:f9:4d:60:72:96:64:
                    98:4e:91:23:8d:07:a4:5d:b5:76:b2:4a:bd:2a:51:
                    98:b0:d3:36:fa:1f:47:49:c2:a7:bb:f2:34:e5:67:
                    90:64:e4:01:2e:66:df:eb:fb:4a:6a:7a:e8:e0:52:
                    52:4f:c5:89:c2:09:60:3c:48:39:c2:3e:dc:3f:15:
                    5d:f7:37:ea:52:55:a8:c1:ef:9a:5b:b0:49:74:11:
                    84:06:4e:90:e4:4a:af:ba:de:c0:42:6d:33:83:38:
                    a4:50:48:09:ca:05:b2:84:6a:23:f1:a2:e8:ca:ed:
                    02:0e:5b:05:f0:55:e3:c4:c2:d9:e3:a0:11:59:92:
                    df:d6:82:4d:14:ed:3d:39:6b:3e:28:dd:29:9a:2c:
                    e8:4d:a9:13:6a:8b:d3:6f:f6:88:7f:17:ee:5f:a8:
                    61:69:0a:1f:b7:4a:84:f8:8b:4a:41:e3:fb:7f:34:
                    1f:39:27:88:5a:b1:fe:19:e3:85:15:9f:af:4d:05:
                    20:8e:65:ad:11:bc:19:23:a2:fd:42:81:3c:69:ad:
                    70:c5:0c:71:aa:70:f8:55:6b:68:eb:c1:c1:3b:c2:
                    a4:eb:e8:33:ef:27:b4:e2:70:00:8f:d1:a9:3d:a9:
                    e7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:57:C8:F3:73:0A:D8:97:B9:C9:1D:4A:4F:DB:BB:9C:1A:43:78:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/66c21418-2173-3432-a94d-787021702abb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:e9:f6:8f:97:3b:bc:36:6e:9e:42:ec:60:9c:e2:8d:a7:f2:
         ca:34:25:53:1a:d0:24:85:44:66:0e:8d:b5:86:c8:21:69:08:
         bd:a2:82:7e:ad:f8:51:d7:d3:f5:f6:13:5c:05:d3:28:e2:cb:
         e4:4d:88:28:df:a2:2d:f9:7f:76:49:36:be:d8:af:53:5e:00:
         7f:e6:91:8b:3d:da:e3:d6:48:6b:bc:7c:f6:a0:54:5e:74:af:
         8b:f6:88:bb:7d:f0:52:6e:fc:6c:66:ba:1d:35:7a:45:87:51:
         71:bf:e5:44:55:21:2d:db:8e:8e:ba:55:86:b1:9f:bb:38:43:
         b9:02:36:49:98:c0:7f:e4:ad:da:56:03:b3:85:6b:52:e2:12:
         32:61:39:05:4e:42:2f:e9:a5:ec:41:8d:13:eb:20:9f:fa:3f:
         5b:74:29:96:ab:8f:8f:6e:d6:bb:5e:1e:c8:0c:75:7b:38:3c:
         fe:60:71:b1:59:02:08:bf:d7:4f:40:f7:6a:df:cc:ec:d8:10:
         32:74:2d:d9:6f:6a:a8:28:fb:c0:a5:b1:79:8c:ca:ab:7c:3f:
         bb:fc:73:c0:9e:1e:2d:f4:6f:76:97:d4:b6:d3:1a:d0:cc:ad:
         f8:81:9f:2e:03:e2:92:f1:f7:19:ff:7b:5f:1d:de:5c:e7:7f:
         0a:98:c7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:42:54 2025 by rpki-client