Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/257c5034-d134-32fb-ad91-73bc24a1ec62.roa
File:                     257c5034-d134-32fb-ad91-73bc24a1ec62.roa (raw, json)
Hash identifier:          /h6Y0IEZmKcSleb6go9LCXjZRXHaoBPuWBJmMBJDPNw=
Subject key identifier:   C5:BF:0E:CE:06:47:C7:9E:0F:45:34:F6:41:5C:24:C0:E9:D5:5C:D2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F5768245DFC1C17578AB09680
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/257c5034-d134-32fb-ad91-73bc24a1ec62.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     44559
IP address blocks:        172.120.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:24:5d:fc:1c:17:57:8a:b0:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=8f2297b7-ba3d-468b-86ff-e4bebc3c3592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:18:9f:9a:be:e8:e4:63:75:30:51:31:5a:a6:
                    9b:03:b0:f0:09:dd:a1:c1:b7:9f:66:b6:d7:a4:d7:
                    2b:49:b2:ec:ad:dc:f8:3f:e2:eb:23:fb:bd:97:ae:
                    4f:b8:ce:b4:f7:1e:4c:60:03:12:77:ae:17:ef:6d:
                    99:aa:e1:26:69:31:8e:73:3f:a5:bd:30:18:52:08:
                    61:34:60:34:0a:11:74:30:e2:72:9a:ab:1a:03:2e:
                    08:1d:55:82:4d:67:85:62:bc:73:ee:33:d3:65:d7:
                    92:e9:e9:26:f6:fa:a6:97:ea:83:2a:f5:b8:84:9f:
                    3e:31:35:8c:cb:52:ce:a3:8e:b8:88:3f:03:24:35:
                    b3:77:10:e9:42:54:51:02:da:8a:5c:af:5d:9c:84:
                    ce:5a:3b:2a:5d:2d:b7:91:87:74:c4:6b:8b:59:87:
                    9b:3c:91:f4:43:65:c4:33:8f:fa:10:1c:bb:11:6a:
                    75:a7:5a:40:b6:a6:cf:ba:a3:28:02:aa:5b:7b:f2:
                    1b:88:b3:63:4b:a8:b8:82:92:8a:4b:a5:1d:60:4b:
                    97:a9:a0:82:be:81:a7:79:ad:97:a0:3d:25:2f:ca:
                    5d:74:e5:a1:a2:ab:93:bd:5b:20:ef:b5:da:02:02:
                    ea:a5:df:79:b7:38:24:13:70:ca:4a:0b:50:9e:b0:
                    14:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BF:0E:CE:06:47:C7:9E:0F:45:34:F6:41:5C:24:C0:E9:D5:5C:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/257c5034-d134-32fb-ad91-73bc24a1ec62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:9f:c3:71:a4:2f:58:b4:0c:5b:07:bf:25:f0:cc:b1:90:75:
         6e:13:a9:d8:f3:e3:74:13:84:98:c7:be:7f:ac:aa:47:10:f7:
         47:e0:6e:78:45:47:3d:ff:e0:92:dd:ad:d6:e5:07:64:5d:05:
         68:8c:e4:82:c6:ad:5f:07:ad:4c:3c:dc:e5:2f:4a:0a:09:2e:
         aa:48:49:8b:f1:d7:87:95:3a:eb:bb:60:06:55:03:48:9b:7d:
         5c:90:23:b3:bc:08:87:df:51:6a:1c:06:fd:5b:a5:a2:75:d7:
         68:dd:c4:d4:8c:89:73:fc:68:3a:66:4e:2c:75:2d:d7:44:be:
         7d:77:6a:ee:48:f4:1e:e5:d1:93:14:21:77:43:d7:22:f1:b2:
         3b:05:9b:39:48:4a:cf:3a:f1:53:ee:b4:40:db:3a:71:b1:a7:
         2e:fb:72:94:35:04:a0:79:3d:4d:3f:9e:20:ad:cf:8d:65:76:
         ef:bc:6e:dd:f6:61:05:c1:3e:3c:c2:9d:49:ee:06:5c:1a:36:
         3a:cf:63:b4:30:73:1d:f2:48:4f:80:18:b1:45:ba:ff:4b:3c:
         9a:8d:68:28:e7:f8:ce:58:82:7f:cc:ff:e0:e5:60:e2:0a:dc:
         9f:e3:11:57:fb:31:c2:5d:9b:03:97:f8:cf:87:3b:14:6f:f2:
         4b:5f:dc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:53:36 2026 by rpki-client