Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4cb4a280-eb22-32ec-af3c-14f269cf2ac4.roa
File:                     4cb4a280-eb22-32ec-af3c-14f269cf2ac4.roa (raw, json)
Hash identifier:          tBTilXudrP7c+f+V7iHcAt40+FSB+NWJPCHkiPox9q4=
Subject key identifier:   F8:EF:9B:8E:21:59:77:8D:29:42:11:63:15:49:5A:9D:F0:7A:99:D8
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584DE908AE5402D5F339DFFF0760
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4cb4a280-eb22-32ec-af3c-14f269cf2ac4.roa
Signing time:             Thu 21 May 2026 19:22:25 +0000
ROA not before:           Thu 21 May 2026 19:22:25 +0000
ROA not after:            Wed 19 Aug 2026 19:22:25 +0000
asID:                     9009
IP address blocks:        172.120.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:08:ae:54:02:d5:f3:39:df:ff:07:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 21 19:22:25 2026 GMT
            Not After : Aug 19 19:22:25 2026 GMT
        Subject: CN=92cc5083-5717-4e5d-ba72-cfc8d26cbfaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:78:e3:41:dc:98:c0:19:27:f2:05:1c:bc:09:
                    19:f3:5f:c3:22:e0:fe:2c:e8:f3:ae:7c:aa:4e:c1:
                    35:cd:a6:33:0f:85:db:75:1a:0f:b8:00:45:83:b5:
                    43:54:bc:5d:3d:3a:da:20:c9:59:78:65:e2:d6:4a:
                    ff:bc:ed:c3:70:66:9e:08:05:bb:47:79:10:eb:23:
                    88:77:59:c7:03:54:29:9f:65:76:cc:2b:c3:cf:ee:
                    70:60:7d:da:21:00:1b:a4:df:10:5b:07:2a:9d:c2:
                    35:33:6f:20:4e:5c:57:f6:db:12:09:55:fc:4d:ba:
                    0e:2d:37:72:ee:02:1c:bd:53:32:6c:76:5f:41:a0:
                    e1:18:0c:d9:9c:1f:31:3f:a2:25:4b:30:af:86:d5:
                    e0:87:12:1b:dd:e5:f7:2d:26:b4:1e:bb:1a:cf:43:
                    0f:7a:5b:99:de:4c:29:37:e5:17:57:59:b8:27:ec:
                    53:61:dd:95:7c:c2:f6:7a:c4:b8:d1:d7:7e:af:94:
                    93:39:d5:9e:53:8d:ec:aa:59:fb:2f:c3:2c:39:ca:
                    45:89:df:19:4a:c8:db:41:c6:20:1c:a3:9d:34:43:
                    27:86:69:31:35:81:78:ef:61:00:c2:00:f7:eb:88:
                    c2:d6:f6:f1:e4:e1:b4:3f:a7:ec:0f:cf:d3:91:c0:
                    80:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EF:9B:8E:21:59:77:8D:29:42:11:63:15:49:5A:9D:F0:7A:99:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4cb4a280-eb22-32ec-af3c-14f269cf2ac4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:96:ba:b0:ea:8b:69:b1:73:70:92:60:ac:a1:e8:92:77:45:
         c0:60:bc:32:f2:b2:da:e0:69:70:b1:c3:63:fc:1c:b9:ed:6e:
         22:35:cd:a6:ab:93:59:a9:75:6d:fe:81:3c:51:ca:b3:11:bc:
         12:77:41:6e:15:fc:bb:e1:ec:49:93:90:7c:97:a9:e2:c2:9b:
         56:00:59:ce:b5:0c:45:f0:c6:45:5d:e3:ef:63:09:e1:4e:14:
         1c:18:1b:d8:20:51:d6:a2:18:35:be:34:cf:37:2c:a6:dd:9e:
         ef:24:99:80:66:52:ef:b6:fc:a4:80:1a:91:a6:bd:ea:0b:47:
         95:11:12:1e:04:a8:10:93:d7:80:b7:db:01:88:ab:55:16:8d:
         98:7b:6d:f8:65:b7:ba:d3:4f:a0:61:80:33:a4:e5:c7:25:ef:
         c7:76:c4:2c:1a:73:c5:8a:7e:7c:f3:43:d8:07:2e:36:8b:dc:
         59:7d:67:40:37:81:91:4b:19:ee:28:58:50:ed:e8:c9:98:be:
         d9:bf:04:ba:4e:d2:9b:96:33:fd:95:31:94:5b:62:fe:9d:64:
         4b:64:62:82:6e:5c:d9:bb:69:4d:cd:08:85:15:36:1c:17:c4:
         ec:42:24:e3:c0:9b:60:1e:86:47:77:4c:d2:30:53:85:b1:17:
         a4:b9:34:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3pCK5UAtXzOd//B2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDUyMTE5MjIyNVoXDTI2MDgxOTE5MjIyNVowLzEtMCsGA1UEAxMk
OTJjYzUwODMtNTcxNy00ZTVkLWJhNzItY2ZjOGQyNmNiZmFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3jjQdyYwBkn8gUcvAkZ81/DIuD+LOjzrnyq
TsE1zaYzD4XbdRoPuABFg7VDVLxdPTraIMlZeGXi1kr/vO3DcGaeCAW7R3kQ6yOI
d1nHA1Qpn2V2zCvDz+5wYH3aIQAbpN8QWwcqncI1M28gTlxX9tsSCVX8TboOLTdy
7gIcvVMybHZfQaDhGAzZnB8xP6IlSzCvhtXghxIb3eX3LSa0Hrsaz0MPeluZ3kwp
N+UXV1m4J+xTYd2VfML2esS40dd+r5STOdWeU43sqln7L8MsOcpFid8ZSsjbQcYg
HKOdNEMnhmkxNYF472EAwgD364jC1vbx5OG0P6fsD8/TkcCAbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPjvm44hWXeNKUIRYxVJWp3wepnYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNGNiNGEyODAtZWIyMi0z
MmVjLWFmM2MtMTRmMjY5Y2YyYWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHj6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIqWurDqi2mxc3CSYKyh6JJ3RcBgvDLystrgaXCxw2P8HLntbiI1zaar
k1mpdW3+gTxRyrMRvBJ3QW4V/Lvh7EmTkHyXqeLCm1YAWc61DEXwxkVd4+9jCeFO
FBwYG9ggUdaiGDW+NM83LKbdnu8kmYBmUu+2/KSAGpGmveoLR5UREh4EqBCT14C3
2wGIq1UWjZh7bfhlt7rTT6BhgDOk5ccl78d2xCwac8WKfnzzQ9gHLjaL3Fl9Z0A3
gZFLGe4oWFDt6MmYvtm/BLpO0puWM/2VMZRbYv6dZEtkYoJuXNm7aU3NCIUVNhwX
xOxCJOPAm2Aehkd3TNIwU4WxF6S5NJI=
-----END CERTIFICATE-----
Generated at Tue May 26 05:31:48 2026 by rpki-client