Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18b38e44-8449-3a0e-87be-bd12e7e668e6.roa
File:                     18b38e44-8449-3a0e-87be-bd12e7e668e6.roa (raw, json)
Hash identifier:          l2tVKsLUlxJLbZhy4zgiZlrcNMNKDJULM2nhThE498s=
Subject key identifier:   18:30:54:D6:EE:EA:A6:06:D6:B2:7A:8B:63:13:A3:28:CE:9A:F4:FF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EA7923A62EE3424D485733420
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18b38e44-8449-3a0e-87be-bd12e7e668e6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     9009
IP address blocks:        172.120.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:3a:62:ee:34:24:d4:85:73:34:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b042f47c-8754-4196-b6a2-cd02e55afcde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d4:65:49:cb:87:88:b9:0e:cd:68:33:77:2d:
                    20:2a:bf:25:59:85:9f:bd:44:dc:0e:68:9b:fd:7e:
                    2a:5b:2b:28:71:41:98:3f:67:6f:1b:dc:28:98:e0:
                    7c:cb:b5:bf:42:01:b8:a9:58:e8:fa:38:63:00:f7:
                    fb:18:6d:37:af:49:12:a4:58:cd:36:f2:d4:32:90:
                    8f:42:bb:31:ae:4b:df:80:8d:ea:cc:72:36:ff:0c:
                    de:ef:37:c7:41:07:31:ea:5c:96:6b:71:5b:76:8a:
                    51:9f:1e:9e:db:5c:0b:c6:a0:1c:1b:6e:03:f4:8c:
                    7c:bd:76:32:f8:b0:a7:57:e1:b6:e4:19:4d:3f:59:
                    bb:34:45:31:df:5a:e5:29:c0:8c:e4:73:6a:16:16:
                    95:d7:cc:1f:15:c7:c7:99:33:36:5a:db:5a:0c:5a:
                    a8:a1:e4:be:65:dc:06:9e:6e:63:3c:70:29:91:a6:
                    d8:fa:aa:03:d9:ea:88:5f:bb:f1:c0:fb:d1:38:07:
                    f3:bc:6b:ee:bf:44:0a:56:d7:cb:63:32:c8:2f:1e:
                    14:da:bc:9b:8b:32:72:9c:69:98:ce:12:19:82:78:
                    92:c6:93:c5:37:40:f7:6f:2d:64:0a:24:db:87:82:
                    6c:77:89:54:8a:00:13:68:95:a0:26:42:29:d9:f2:
                    ae:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:30:54:D6:EE:EA:A6:06:D6:B2:7A:8B:63:13:A3:28:CE:9A:F4:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18b38e44-8449-3a0e-87be-bd12e7e668e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:cc:e0:fb:0b:13:d8:bb:27:35:cc:9d:7a:8d:1e:c9:46:ee:
         ba:4c:fc:2c:6d:66:2e:f6:b4:42:c6:27:71:b8:60:01:12:6b:
         62:ae:d6:75:5f:47:83:39:a7:0d:8c:67:d4:5a:1a:b9:80:7b:
         24:79:55:96:e2:5b:79:bf:e4:eb:de:ec:b2:5f:98:fc:98:7e:
         8d:88:97:06:15:c6:cf:dc:ee:72:f1:63:87:99:39:9f:ce:81:
         ed:f1:f7:da:c5:7a:0c:91:05:96:51:f0:f4:0c:8d:de:66:6d:
         55:a1:6a:12:02:da:8c:35:ca:f7:9a:f2:c6:ef:a4:b5:58:74:
         d7:3e:e6:89:c8:38:ea:b0:47:13:82:0e:cb:67:a3:ba:1c:35:
         4c:b7:8a:ab:d1:40:c8:3a:df:14:ad:3a:32:ce:3d:a9:57:a6:
         f6:49:23:7c:5f:39:92:c7:2b:d7:80:9a:63:bf:ea:0f:a2:38:
         8f:5a:97:30:95:35:3c:cc:b4:4e:25:92:15:01:41:19:18:84:
         f3:15:6b:6d:ec:02:12:5e:fd:8c:b2:c3:db:e6:18:30:ea:c9:
         b0:ef:c2:90:15:28:68:02:ad:df:f5:db:4f:fa:a0:9e:1b:a4:
         0a:40:cc:59:fb:f0:00:58:07:96:70:d2:1f:11:90:cf:23:81:
         3a:fa:87:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 12:24:29 2026 by rpki-client