Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6a9a31d8-ae10-3bbe-abc8-f210dc9802bd.roa
File:                     6a9a31d8-ae10-3bbe-abc8-f210dc9802bd.roa (raw, json)
Hash identifier:          K0ZoBOom2XCpyHtOReMEyGGvvjp2M3V/IpQVYVZjOP8=
Subject key identifier:   9D:C9:8E:65:AB:0A:8C:E8:75:51:9A:96:3F:5B:22:78:38:2A:15:6E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A698B1E3D314954E14C11A280
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6a9a31d8-ae10-3bbe-abc8-f210dc9802bd.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     18779
IP address blocks:        172.121.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:1e:3d:31:49:54:e1:4c:11:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=f351258e-91f2-4b00-b658-7c0e364f50fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8d:09:2b:2e:02:c8:80:51:d1:93:1a:99:20:
                    bd:6f:7f:4c:c8:83:70:a4:e4:eb:91:c5:13:45:ae:
                    36:9d:ca:29:61:b5:5b:6c:37:50:ab:64:a7:bb:88:
                    54:16:10:56:93:6e:6d:3d:cb:2c:d9:ab:49:3d:d1:
                    21:eb:60:d8:63:2a:44:24:19:c0:6f:20:80:fa:4f:
                    c6:25:36:47:31:c7:3c:aa:06:11:a4:9e:f7:7d:f0:
                    6d:42:f0:ca:bd:d9:2c:20:c3:e5:d2:73:dd:f0:7b:
                    bb:30:8f:e7:11:6a:a4:f1:00:86:a2:6a:8d:b0:6b:
                    e0:61:63:ed:ea:e2:cb:d8:f4:b9:81:68:6a:0a:a0:
                    5f:d0:78:a7:1f:27:d1:78:6c:27:8c:74:0c:63:9f:
                    0e:aa:60:74:89:23:6a:9e:ab:d2:68:6f:ee:de:0f:
                    1d:f0:be:3f:74:a6:ce:b0:14:13:e7:8c:8f:65:92:
                    ea:70:7f:03:e2:c8:1a:72:a4:e0:e3:45:fd:fc:23:
                    1c:c1:c9:9b:6b:21:75:d3:2f:00:f0:30:06:b4:99:
                    64:35:c3:b7:d6:be:f8:df:f1:8e:29:8b:d7:43:e7:
                    41:ac:7d:b6:40:ac:92:95:a1:46:47:ee:ff:9c:71:
                    f4:30:b7:5d:e6:00:56:db:b7:bb:02:51:0c:60:df:
                    af:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C9:8E:65:AB:0A:8C:E8:75:51:9A:96:3F:5B:22:78:38:2A:15:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6a9a31d8-ae10-3bbe-abc8-f210dc9802bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:4a:33:56:0b:76:b4:ae:5f:ae:d1:85:22:be:a2:09:a0:3f:
         2c:56:7c:39:da:2a:71:36:6c:80:b4:b3:aa:f3:13:80:80:32:
         12:7b:7d:b4:cd:96:7f:3c:0b:06:96:40:76:46:9e:b9:e2:e9:
         2e:ae:cf:0a:50:06:98:40:2a:b9:e4:c4:c5:d7:63:cd:e2:41:
         ea:3f:b3:54:c9:da:08:d2:c6:d5:b5:77:c8:a6:83:13:02:e5:
         2b:b9:07:44:1d:32:d0:85:ed:0d:57:04:c1:6e:6e:f7:7e:3c:
         b1:5d:11:8a:48:58:02:25:5c:84:a4:6f:8e:cb:77:97:4d:d7:
         7a:60:a5:85:0c:46:bd:66:5f:54:a0:57:32:11:d3:75:75:78:
         f5:cc:6e:44:31:09:a0:61:55:c3:75:ed:8c:9b:19:a2:93:c3:
         d5:28:d4:ca:96:1e:b0:8d:7e:a9:a2:99:27:89:69:f3:73:39:
         24:19:fa:8b:7f:3f:be:1c:e9:3a:61:6d:4d:e6:d5:77:20:5f:
         82:ed:68:46:e1:53:dd:4d:2d:87:bd:03:7e:47:61:6e:70:dc:
         1e:f7:2f:7e:0d:99:a0:9f:42:87:7e:1b:b7:a8:7f:e1:fa:24:
         79:4a:3a:ec:75:cb:7a:6e:dc:4a:4e:fe:58:fc:c3:19:e8:09:
         7e:88:e6:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppix49MUlU4UwRooAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk
ZjM1MTI1OGUtOTFmMi00YjAwLWI2NTgtN2MwZTM2NGY1MGZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY0JKy4CyIBR0ZMamSC9b39MyINwpOTrkcUT
Ra42ncopYbVbbDdQq2Snu4hUFhBWk25tPcss2atJPdEh62DYYypEJBnAbyCA+k/G
JTZHMcc8qgYRpJ73ffBtQvDKvdksIMPl0nPd8Hu7MI/nEWqk8QCGomqNsGvgYWPt
6uLL2PS5gWhqCqBf0HinHyfReGwnjHQMY58OqmB0iSNqnqvSaG/u3g8d8L4/dKbO
sBQT54yPZZLqcH8D4sgacqTg40X9/CMcwcmbayF10y8A8DAGtJlkNcO31r743/GO
KYvXQ+dBrH22QKySlaFGR+7/nHH0MLdd5gBW27e7AlEMYN+vZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ3JjmWrCozodVGalj9bIng4KhVuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNmE5YTMxZDgtYWUxMC0z
YmJlLWFiYzgtZjIxMGRjOTgwMmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrHmIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB5KM1YLdrSuX67RhSK+ogmgPyxWfDnaKnE2bIC0s6rzE4CAMhJ7fbTN
ln88CwaWQHZGnrni6S6uzwpQBphAKrnkxMXXY83iQeo/s1TJ2gjSxtW1d8imgxMC
5Su5B0QdMtCF7Q1XBMFubvd+PLFdEYpIWAIlXISkb47Ld5dN13pgpYUMRr1mX1Sg
VzIR03V1ePXMbkQxCaBhVcN17YybGaKTw9Uo1MqWHrCNfqmimSeJafNzOSQZ+ot/
P74c6TphbU3m1XcgX4LtaEbhU91NLYe9A35HYW5w3B73L34NmaCfQod+G7eof+H6
JHlKOux1y3pu3EpO/lj8wxnoCX6I5vs=
-----END CERTIFICATE-----
Generated at Mon Jul 21 07:28:10 2025 by rpki-client