Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7aff3c03-b316-3fd1-9a2e-79d215efbab4.roa
File:                     7aff3c03-b316-3fd1-9a2e-79d215efbab4.roa (raw, json)
Hash identifier:          PXuLwyz5EahW7gVFqUIe64T/qdOMsMbq+KOC/TuLzus=
Subject key identifier:   81:FB:0C:85:8D:51:07:2B:74:3F:FE:08:3C:E0:B3:68:3E:2B:58:91
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B583CAB64A7CFF943CE418700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7aff3c03-b316-3fd1-9a2e-79d215efbab4.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     9304
IP address blocks:        172.120.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:ab:64:a7:cf:f9:43:ce:41:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=bb179f0d-07be-4225-bddd-8319ba973d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:93:7c:a8:d2:48:fc:d7:74:50:b0:8e:3d:8e:
                    be:21:56:25:6d:f1:f3:25:53:ba:65:bd:4f:93:ae:
                    d4:f2:5f:07:01:e5:d3:af:9b:26:5a:8e:f2:bb:a4:
                    50:7f:16:19:71:a1:4d:65:9f:ab:68:5d:8e:64:ab:
                    3c:b8:46:31:52:35:be:18:82:51:d9:f7:7a:34:25:
                    db:d0:bc:20:99:4d:e8:5d:85:af:5b:34:c6:98:be:
                    8a:b0:bb:dd:5e:0a:b3:93:f3:ee:a8:1d:9a:a2:c2:
                    54:e7:89:4e:c5:74:09:e4:ac:58:6d:d7:ec:12:a1:
                    fd:fa:37:4e:eb:cc:1f:d6:7a:88:2a:6a:4c:39:6c:
                    16:48:ad:06:6b:a7:0c:54:ef:5f:63:cf:47:21:29:
                    69:94:f3:bf:62:64:f0:56:52:c6:cd:ce:38:ac:99:
                    cf:13:8e:48:d2:20:2f:46:8f:24:b9:55:26:ca:61:
                    12:14:bf:5f:8e:d4:71:b1:6d:a9:4f:f6:39:b0:86:
                    cb:b8:75:9b:ee:20:01:a3:bf:4f:48:08:66:3e:f2:
                    bf:9a:21:11:c7:ba:2f:e2:14:a9:6b:cb:c5:9f:34:
                    cd:76:db:3f:60:0b:94:64:27:75:90:da:78:6f:d6:
                    be:70:19:1d:ba:48:b8:be:d9:67:b6:13:dd:59:fe:
                    e0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FB:0C:85:8D:51:07:2B:74:3F:FE:08:3C:E0:B3:68:3E:2B:58:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7aff3c03-b316-3fd1-9a2e-79d215efbab4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:bb:ad:7f:f6:36:7b:b2:c4:08:b0:a8:43:32:e8:43:93:40:
         bf:dc:58:c3:10:ab:f7:2c:df:bd:6c:e8:ac:d8:b4:39:fc:ec:
         3b:01:a0:37:ff:38:64:9c:30:be:6f:73:ab:d8:69:1c:68:42:
         7b:85:70:62:66:23:c2:8b:78:a2:90:9a:49:52:cf:37:3e:2c:
         3f:ec:48:17:17:4e:b7:b7:73:9d:21:76:e6:81:b1:fd:f0:28:
         22:1a:78:c1:d0:ba:b7:a5:77:d6:3c:03:4f:10:70:28:51:80:
         e4:3e:b5:5d:d8:be:26:94:87:8f:a6:f6:99:e1:da:f2:20:43:
         ba:c6:1a:b6:c0:00:4b:84:31:39:9a:a6:81:34:33:cb:05:54:
         95:c0:e4:54:63:ce:26:85:46:83:97:13:e6:99:52:8a:ed:71:
         5f:5b:f4:a3:c3:f2:27:eb:5c:5e:ff:23:ec:ce:40:fc:e5:6b:
         dd:34:be:f4:0f:0e:27:cc:44:c8:b8:54:14:c3:2d:28:a5:69:
         d2:d0:ad:43:83:dd:dd:ac:45:d6:b9:41:be:5e:ce:61:c7:95:
         32:67:af:5a:65:c9:87:59:da:20:5e:dc:2b:1c:42:a2:2f:4a:
         fe:ff:7b:4d:21:0a:39:26:72:5a:00:0e:de:31:24:cd:1c:9e:
         12:f2:50:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:15:14 2025 by rpki-client