Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/988dc2ff-391b-331b-b2a5-a0974c78ee83.roa
File:                     988dc2ff-391b-331b-b2a5-a0974c78ee83.roa (raw, json)
Hash identifier:          Jrs63CLLDU+Rp5zcj00jN6a8OivfonsKdBfRxJR7L54=
Subject key identifier:   E5:7B:8F:2F:28:94:06:2D:FD:88:BC:1C:D0:89:08:C8:53:FF:F5:36
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B7460E85365D34547866CE400
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/988dc2ff-391b-331b-b2a5-a0974c78ee83.roa
Signing time:             Wed 08 Oct 2025 14:56:43 +0000
ROA not before:           Wed 08 Oct 2025 14:56:43 +0000
ROA not after:            Tue 06 Jan 2026 15:56:43 +0000
asID:                     54500
IP address blocks:        172.120.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:74:60:e8:53:65:d3:45:47:86:6c:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  8 14:56:43 2025 GMT
            Not After : Jan  6 15:56:43 2026 GMT
        Subject: CN=c86c985b-62a9-4491-8c9c-4ee86e9bdbe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:47:e6:1b:6c:a7:b8:0e:2f:68:e4:a2:d3:c8:
                    15:b1:1b:03:9b:91:a8:9f:98:94:4a:64:74:7b:91:
                    9e:f8:1d:2f:68:33:bd:70:47:9c:e8:a9:2b:34:a6:
                    41:f6:5e:91:1c:a5:93:aa:f4:85:32:e6:ff:cd:3f:
                    a3:b0:c7:53:89:e5:0e:75:ea:1d:86:37:0e:cf:5a:
                    30:c0:b9:63:68:ee:9d:71:3b:d3:c9:7d:42:33:6b:
                    c6:87:56:ed:bf:63:77:8a:aa:1f:c8:50:02:18:8b:
                    0d:2c:44:a5:47:c2:4e:18:ae:1c:80:e0:21:8b:5f:
                    f6:02:a7:e6:1b:cf:9c:88:23:fe:13:54:c6:dc:50:
                    18:90:d8:b4:6d:09:03:9b:bb:14:bd:44:f4:ae:75:
                    36:2e:cb:cc:20:58:a6:42:f2:12:98:8c:a2:26:47:
                    ac:21:0c:9d:3b:38:88:f9:6a:26:a5:91:5a:59:38:
                    dd:54:e0:55:eb:b6:dd:eb:10:ca:84:b1:cc:66:40:
                    36:a1:10:e1:65:75:ea:a5:50:40:47:8d:cf:af:e6:
                    5f:eb:ff:a3:8c:2e:18:f6:f7:39:13:62:4c:2f:f0:
                    b9:3d:50:0c:46:84:8d:c1:0b:33:fc:3c:e1:ad:3c:
                    41:ff:27:a5:bd:9f:e7:b9:df:97:ea:33:62:1d:c5:
                    21:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7B:8F:2F:28:94:06:2D:FD:88:BC:1C:D0:89:08:C8:53:FF:F5:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/988dc2ff-391b-331b-b2a5-a0974c78ee83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:74:43:23:da:23:31:b6:b5:1b:3f:6d:29:a0:eb:cf:6e:d6:
         b0:db:54:66:9a:b9:9d:c9:2a:5a:75:75:40:cb:5b:ba:fc:5b:
         4b:d2:de:8d:b8:63:4e:3d:47:fa:fb:32:9e:72:9e:43:15:eb:
         d7:93:f0:3a:90:74:6b:f4:a2:c3:62:f1:ef:77:73:e9:95:20:
         65:6c:07:d7:f5:c2:3a:c9:5b:33:86:71:15:f6:a8:cf:42:a0:
         35:de:f8:3e:24:cc:2e:13:e0:13:a7:84:fc:8d:ee:0b:1c:49:
         4b:a6:ef:a4:df:2f:ac:03:19:99:6d:d1:34:21:2a:71:ad:ab:
         48:31:90:9c:23:10:93:2d:a0:22:f1:3e:84:05:ed:f9:6d:79:
         ac:3e:e5:3e:f9:d1:c5:0c:aa:8b:72:b6:17:b8:81:09:b7:ae:
         a5:c8:63:5c:c5:fd:54:eb:27:bc:15:d7:e9:ed:02:3e:93:63:
         89:04:f8:85:4c:a5:dc:36:62:2c:e5:8b:01:89:8b:77:31:29:
         74:64:18:b5:b6:55:7a:4f:6c:fc:d7:79:49:64:32:c3:e3:d0:
         a7:8f:80:a0:98:07:f9:df:21:94:83:9a:48:f1:ba:4e:a0:00:
         aa:3b:ec:0e:d3:24:28:3d:f3:3e:02:de:05:53:6e:13:2d:3a:
         b1:20:fb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:07:52 2025 by rpki-client