Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4ed37e4f-cf61-39ea-9377-c18de9900ddc.roa
File:                     4ed37e4f-cf61-39ea-9377-c18de9900ddc.roa (raw, json)
Hash identifier:          uwAhRdr9zgQ+5/IuVJ6TinOnmSVskQfcdkM6ckXEo3E=
Subject key identifier:   80:60:17:D2:D3:5C:E6:F1:33:FE:AC:33:BD:98:58:44:A8:0D:FB:EB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D1D0779732E2D7B3FB5DC7300
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4ed37e4f-cf61-39ea-9377-c18de9900ddc.roa
Signing time:             Mon 09 Mar 2026 17:35:05 +0000
ROA not before:           Mon 09 Mar 2026 17:35:05 +0000
ROA not after:            Sun 07 Jun 2026 17:35:05 +0000
asID:                     398781
IP address blocks:        172.120.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:07:79:73:2e:2d:7b:3f:b5:dc:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  9 17:35:05 2026 GMT
            Not After : Jun  7 17:35:05 2026 GMT
        Subject: CN=05694523-2aa3-4b94-90a6-4ce022bf2f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:64:b7:db:c9:65:f4:d7:24:e9:79:ab:e9:fb:
                    17:aa:b7:39:50:21:c9:6c:be:08:89:98:61:68:fa:
                    68:8c:48:5a:ad:35:93:a1:f2:fb:d5:6d:9b:54:20:
                    9d:ae:dd:27:cd:63:7f:1b:1e:d4:1d:3b:10:51:56:
                    f1:0e:29:7d:1d:f7:c8:09:ed:66:18:6e:8c:c4:a3:
                    a9:e3:3d:6c:ff:00:88:75:ce:90:83:77:31:85:78:
                    a7:b5:62:62:a6:c2:a2:ad:b1:11:cf:99:50:5b:58:
                    2f:3e:80:67:2e:bd:b4:c1:e0:8d:73:f2:a2:a6:3d:
                    f2:aa:86:f5:a5:46:72:60:e6:0b:6c:a6:be:20:29:
                    2e:5e:b4:72:78:a8:df:ef:e0:d0:ea:71:6e:00:b3:
                    82:bf:95:22:75:12:ed:d9:19:8e:77:e9:eb:68:e3:
                    5d:04:23:d5:c3:9a:4b:0c:a4:01:ee:c1:5d:6a:e6:
                    e2:6a:01:7d:95:7f:a3:fd:69:7b:ad:aa:ac:40:c6:
                    38:42:a4:63:f3:7c:f6:0d:c9:a0:9d:22:db:b5:31:
                    a7:c4:37:0d:f3:25:39:95:9d:de:9d:13:16:b8:c0:
                    d5:82:5e:cb:52:33:4a:3b:82:9a:3e:38:2b:67:2e:
                    a6:70:39:16:3f:dd:fb:7f:41:f5:da:1e:fd:94:6e:
                    28:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:60:17:D2:D3:5C:E6:F1:33:FE:AC:33:BD:98:58:44:A8:0D:FB:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4ed37e4f-cf61-39ea-9377-c18de9900ddc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:9e:86:df:f0:57:59:7e:4d:51:ab:64:3e:f9:ad:0b:d7:72:
         e9:42:05:14:c2:9c:65:4c:bc:3a:bf:3e:cd:6b:46:f2:ba:54:
         31:b5:4b:8c:30:49:05:4a:d6:a5:f9:16:47:4f:d0:97:47:de:
         9f:e0:69:41:9c:3b:00:a7:72:d5:2b:8f:68:54:c0:b0:66:58:
         44:6a:9a:a1:3d:58:67:6e:06:50:3b:24:47:ae:8b:37:7a:00:
         c6:81:e6:f7:a2:0a:42:14:7e:e4:d6:14:40:20:6c:79:88:f0:
         9c:aa:27:73:ea:c6:33:f3:93:06:85:7f:17:d7:15:f4:13:d4:
         c4:35:1e:25:a2:9b:8f:c9:63:eb:20:14:c1:bc:ae:e8:f6:62:
         ed:b7:aa:a1:62:c7:46:e6:74:18:9b:3a:df:0d:a4:e2:3d:95:
         b0:0c:58:2d:d4:c6:2f:61:ed:ac:85:e7:9f:7b:85:21:e7:04:
         f9:7c:fe:0f:ea:07:b2:d3:9a:d4:47:62:a8:a7:c0:c0:40:5a:
         25:aa:f1:84:5d:ea:38:13:04:77:88:6e:dc:b5:93:8e:f0:b6:
         f0:b9:6a:b0:57:53:dc:12:9d:04:14:89:d9:75:59:c6:32:e3:
         ff:30:77:f3:ab:09:8e:1d:45:5c:7c:65:41:ee:8f:96:5c:f3:
         10:f6:76:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 18:48:40 2026 by rpki-client