Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18b38e44-8449-3a0e-87be-bd12e7e668e6.roa
File:                     18b38e44-8449-3a0e-87be-bd12e7e668e6.roa (raw, json)
Hash identifier:          fE0eEveDqxa1fj72uuFwEKDAU09iHA6h47oOF1R7CGg=
Subject key identifier:   22:A8:6D:9B:61:82:DD:C7:9A:81:EF:7A:10:39:87:07:71:4F:7F:67
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584DE908ACF88ED085531120A500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18b38e44-8449-3a0e-87be-bd12e7e668e6.roa
Signing time:             Thu 21 May 2026 19:22:24 +0000
ROA not before:           Thu 21 May 2026 19:22:24 +0000
ROA not after:            Wed 19 Aug 2026 19:22:24 +0000
asID:                     9009
IP address blocks:        172.120.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:08:ac:f8:8e:d0:85:53:11:20:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 21 19:22:24 2026 GMT
            Not After : Aug 19 19:22:24 2026 GMT
        Subject: CN=3523e533-2bde-48a8-91b7-0bd85b2d6b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:69:cc:f8:4e:b6:89:56:d0:82:36:1b:a8:6a:
                    dd:84:81:4c:2a:88:53:14:11:42:48:68:10:ad:b6:
                    66:64:59:74:b0:32:00:64:e8:1d:0b:62:53:f0:51:
                    26:b3:ee:54:56:5b:a8:7d:1f:2d:e8:02:48:c1:e0:
                    4a:9e:c9:2e:a9:74:8e:36:9f:8b:e3:1a:e2:dc:76:
                    1a:a2:65:07:7c:45:23:5b:35:e8:ae:ab:5e:24:06:
                    5a:30:5b:ae:eb:04:7d:d4:e9:27:a6:59:a8:2c:12:
                    f4:8f:d7:b2:8d:b6:7e:a8:31:82:e6:c7:f3:88:55:
                    8a:49:d5:71:49:7d:e3:93:08:26:72:80:28:87:23:
                    66:67:a6:c8:dd:12:f4:c0:ec:7f:8f:36:9a:6f:13:
                    50:50:c4:3e:17:4a:39:d5:a1:bf:d6:92:fe:2c:e5:
                    b0:4b:a5:2c:b9:a6:ec:d3:eb:e0:00:c4:15:d2:d0:
                    e8:18:cb:82:58:f6:c0:41:35:66:fa:0f:16:42:bf:
                    b1:30:17:4d:18:8c:3f:14:78:39:a2:2e:fb:ac:91:
                    88:50:a8:cd:1f:d1:14:1e:df:9b:45:34:7d:a6:cd:
                    32:03:91:be:3a:fe:04:21:2c:4e:cf:41:4c:30:88:
                    3d:c9:16:0a:9e:54:da:e8:df:c0:e0:61:b4:cb:fd:
                    0f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A8:6D:9B:61:82:DD:C7:9A:81:EF:7A:10:39:87:07:71:4F:7F:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18b38e44-8449-3a0e-87be-bd12e7e668e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:cc:68:3b:96:1c:fc:b5:e4:8e:47:9f:bc:c7:8e:b2:a3:fb:
         df:1f:5e:37:ec:de:89:3f:1e:6d:0e:80:a1:0e:67:36:08:92:
         00:9b:01:6f:04:af:61:72:c8:ec:6f:22:10:ab:70:71:3d:57:
         d5:ee:af:fa:24:02:9a:b0:7f:85:c6:93:70:bb:47:f2:6a:07:
         68:2f:d8:77:3f:05:a3:55:58:c9:43:ee:e1:a2:ea:a0:fd:76:
         a8:d9:f1:f2:6f:da:63:20:79:be:42:30:37:8a:28:59:dd:36:
         c8:06:08:98:98:30:db:1c:53:96:cc:f5:2e:0e:72:d7:99:74:
         53:ea:bf:68:3d:3d:15:0e:66:0a:1e:0b:f7:89:b6:ce:6f:7c:
         84:69:73:d0:9a:72:75:dc:e8:ea:2f:93:35:80:71:ab:23:c5:
         f4:fd:d4:53:53:37:7e:e9:11:49:fa:48:b2:5c:80:c0:16:64:
         6f:f6:d8:02:0f:d1:f7:68:ff:41:57:18:63:39:66:d7:81:48:
         ae:a9:37:f6:05:9f:9e:38:90:e4:02:89:69:e2:8f:a5:ef:0a:
         d9:06:83:0c:22:69:fc:d4:9a:85:31:c4:d8:95:2a:47:28:76:
         ea:81:40:73:79:98:ae:cc:cf:e8:77:f9:c8:5d:24:a1:55:62:
         49:3e:9e:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3pCKz4jtCFUxEgpQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDUyMTE5MjIyNFoXDTI2MDgxOTE5MjIyNFowLzEtMCsGA1UEAxMk
MzUyM2U1MzMtMmJkZS00OGE4LTkxYjctMGJkODViMmQ2YjkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimnM+E62iVbQgjYbqGrdhIFMKohTFBFCSGgQ
rbZmZFl0sDIAZOgdC2JT8FEms+5UVluofR8t6AJIweBKnskuqXSONp+L4xri3HYa
omUHfEUjWzXorqteJAZaMFuu6wR91OknplmoLBL0j9eyjbZ+qDGC5sfziFWKSdVx
SX3jkwgmcoAohyNmZ6bI3RL0wOx/jzaabxNQUMQ+F0o51aG/1pL+LOWwS6Usuabs
0+vgAMQV0tDoGMuCWPbAQTVm+g8WQr+xMBdNGIw/FHg5oi77rJGIUKjNH9EUHt+b
RTR9ps0yA5G+Ov4EISxOz0FMMIg9yRYKnlTa6N/A4GG0y/0PfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCKobZthgt3HmoHvehA5hwdxT39nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMThiMzhlNDQtODQ0OS0z
YTBlLTg3YmUtYmQxMmU3ZTY2OGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADXMaDuWHPy15I5Hn7zHjrKj+98fXjfs3ok/Hm0OgKEOZzYIkgCbAW8E
r2FyyOxvIhCrcHE9V9Xur/okApqwf4XGk3C7R/JqB2gv2Hc/BaNVWMlD7uGi6qD9
dqjZ8fJv2mMgeb5CMDeKKFndNsgGCJiYMNscU5bM9S4OcteZdFPqv2g9PRUOZgoe
C/eJts5vfIRpc9CacnXc6OovkzWAcasjxfT91FNTN37pEUn6SLJcgMAWZG/22AIP
0fdo/0FXGGM5ZteBSK6pN/YFn544kOQCiWnij6XvCtkGgwwiafzUmoUxxNiVKkco
duqBQHN5mK7Mz+h3+chdJKFVYkk+nnc=
-----END CERTIFICATE-----
Generated at Tue May 26 05:31:30 2026 by rpki-client