Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8a8f14b6-79c9-3102-b497-80672b1d9016.roa
File:                     8a8f14b6-79c9-3102-b497-80672b1d9016.roa (raw, json)
Hash identifier:          N6HZ8FlWk3CyfgZyzJrJ+XXfWvI625FxW1NVsNU+EWg=
Subject key identifier:   7E:BB:00:90:CA:4C:65:B4:7C:CD:E8:6E:84:C9:FE:4F:D7:76:C8:FC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B4A47172C7EAC9BE9E8743DC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8a8f14b6-79c9-3102-b497-80672b1d9016.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     18779
IP address blocks:        172.120.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:17:2c:7e:ac:9b:e9:e8:74:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=d8864b1e-bbe8-4581-92e8-0020197029f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:65:35:33:a3:e2:15:1e:19:1f:0f:6d:c0:fd:
                    15:ed:6b:12:c8:0c:35:e9:02:9b:cb:7c:fc:36:fc:
                    f0:2b:f5:a8:8b:dc:97:33:df:15:99:37:34:11:bf:
                    94:09:a0:a9:67:71:6f:d2:92:36:fa:15:cc:a1:76:
                    de:7a:0a:12:49:b0:53:6b:46:a6:ef:2c:87:4a:40:
                    cd:95:d1:55:55:9d:82:7e:67:6a:cf:00:c0:fc:f1:
                    64:93:a7:60:c3:92:d2:11:5a:d4:c3:27:92:ee:4f:
                    95:ff:2b:e6:3c:23:08:48:69:38:e2:20:fe:f7:d5:
                    ea:15:28:86:3b:1f:bb:70:2d:a8:dc:92:01:3d:2d:
                    ac:7c:e4:2c:bc:9a:40:fb:ab:23:00:62:1a:51:31:
                    3d:65:35:0e:c7:5d:41:05:e9:2a:a0:60:91:9f:5d:
                    56:9a:7e:bf:32:9e:fb:66:a8:a8:ce:7e:24:12:28:
                    ba:f0:64:7b:1d:46:19:e0:8b:ea:dd:7e:c3:fc:ba:
                    22:32:5c:77:7b:39:ba:90:70:2c:ff:0a:97:be:ea:
                    a5:d1:a3:93:df:8a:f9:47:0c:01:7d:e6:ad:30:b8:
                    e6:a8:95:9f:24:7e:af:a7:76:ed:b1:ae:c2:f7:2c:
                    4b:9e:4e:f5:14:46:7a:5c:c1:71:6d:6c:5c:4d:63:
                    2f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BB:00:90:CA:4C:65:B4:7C:CD:E8:6E:84:C9:FE:4F:D7:76:C8:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8a8f14b6-79c9-3102-b497-80672b1d9016.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:1d:c0:9d:cd:64:e5:6a:6a:06:4c:c9:58:87:ae:5f:1c:fa:
         50:01:57:08:a0:df:d9:8b:bd:a4:4f:da:3f:7f:d1:2b:5e:19:
         5e:2f:67:37:bb:7f:9c:27:83:03:df:76:e5:2c:e9:4a:9d:2f:
         51:33:39:f5:38:48:a5:30:e8:8e:8c:37:61:33:42:b0:dc:5d:
         67:d8:3a:b5:cb:d8:b7:b1:93:1b:46:6c:5e:41:b6:52:0f:e7:
         2b:48:b9:99:0e:1b:fe:c2:3d:90:ef:64:71:5d:76:18:a5:c7:
         8a:39:d5:fb:ba:a4:83:6b:a1:8e:5f:f8:cd:01:f2:49:29:8c:
         34:7f:f0:41:bc:1b:4c:38:f4:8c:67:ff:ca:22:81:9f:1e:33:
         da:d1:67:32:f4:66:1b:73:2f:a3:d0:23:15:5c:5b:06:8d:f0:
         a9:2f:e1:57:64:63:25:7c:75:83:83:da:2d:2f:63:d3:c9:5e:
         29:53:96:ba:69:fe:69:d0:9b:4b:4e:38:c3:69:c4:da:de:e6:
         68:e8:78:05:b4:68:f0:4f:8c:fd:bd:37:c8:b6:b5:fc:20:ca:
         e8:12:be:04:7e:aa:a2:5f:d2:40:e8:b5:b7:a6:5d:17:8d:d2:
         40:04:f4:92:fd:aa:92:d0:16:4a:61:1c:4c:c7:8f:ef:64:80:
         67:82:ec:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:15:10 2025 by rpki-client