Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6580f077-c462-360c-9b48-207e628a3a04.roa
File:                     6580f077-c462-360c-9b48-207e628a3a04.roa (raw, json)
Hash identifier:          jT9QQP+bM8Um/RCgPYDBOQS18P1h6UxITQkxxg9R1mw=
Subject key identifier:   33:B9:08:B3:60:49:A7:C9:FC:F9:86:53:18:14:14:E0:B7:A0:D8:36
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584E1335096D492C93C5448530C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6580f077-c462-360c-9b48-207e628a3a04.roa
Signing time:             Fri 05 Jun 2026 21:55:44 +0000
ROA not before:           Fri 05 Jun 2026 21:55:44 +0000
ROA not after:            Thu 03 Sep 2026 21:55:44 +0000
asID:                     44559
IP address blocks:        172.120.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:35:09:6d:49:2c:93:c5:44:85:30:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun  5 21:55:44 2026 GMT
            Not After : Sep  3 21:55:44 2026 GMT
        Subject: CN=6da611e2-040e-4be0-8edb-5e5bfefc1d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4b:a7:76:cb:03:f5:fb:15:bd:22:4c:1d:f7:
                    75:29:93:37:28:88:b5:5b:91:3b:f9:d2:33:a3:60:
                    e2:2c:34:00:0d:0a:ca:97:ae:0c:5a:65:49:dc:ca:
                    24:08:74:24:d8:66:9d:8d:4e:de:13:86:f0:0a:88:
                    89:5b:72:e6:9e:65:f3:2f:cd:18:e6:5c:53:29:ac:
                    5a:d0:ee:3a:05:4d:83:63:45:21:08:39:64:41:e6:
                    db:0b:b0:f3:29:9c:1a:98:93:e1:4f:2a:7d:ed:b7:
                    9a:f6:4d:0b:05:0d:99:95:dd:54:ed:3c:c9:f3:84:
                    51:8d:0b:10:59:c5:1f:1d:96:98:4d:14:88:fe:1a:
                    5d:f5:69:9b:20:dc:7f:10:9c:ca:74:a3:d9:11:37:
                    49:d2:40:a3:89:67:01:36:ed:1f:39:bb:ee:b5:98:
                    56:7d:89:fe:e9:db:66:7c:05:27:14:bd:64:bd:f3:
                    d8:01:e0:89:9d:c3:d7:f6:21:e0:b6:30:58:23:d7:
                    0d:24:98:0e:29:f6:31:76:ad:2f:13:5f:ea:80:81:
                    0f:a2:d6:52:27:31:1b:2a:fc:1e:7c:fa:aa:4d:02:
                    1d:ad:27:21:43:fb:8e:48:dc:4a:60:7f:83:ee:93:
                    c7:69:5c:1c:ef:fa:63:18:c1:4c:0c:16:88:06:43:
                    d4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B9:08:B3:60:49:A7:C9:FC:F9:86:53:18:14:14:E0:B7:A0:D8:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6580f077-c462-360c-9b48-207e628a3a04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:b2:db:cf:bc:26:bc:cf:c0:60:41:1f:f6:b3:a0:05:d0:b3:
         fd:c9:92:00:27:ba:59:8b:dc:59:1e:b8:ab:6f:a7:75:68:b2:
         dd:c3:d2:16:ee:bf:d2:80:35:18:22:9c:d7:0b:7b:64:99:07:
         24:c7:25:f1:93:cd:11:aa:73:6a:1f:75:49:07:42:60:23:77:
         99:8c:2b:6d:00:3f:03:9b:da:51:39:7e:e9:cc:a5:38:4d:13:
         17:92:03:53:4b:45:d0:5a:89:e0:c3:0c:ac:22:cb:ee:c1:2a:
         35:b3:c1:bc:37:81:61:6d:b6:c6:50:62:e2:9d:62:ea:d8:ed:
         c5:98:67:d2:6c:ba:e2:41:17:64:f5:22:03:f6:f6:a7:2f:7b:
         c6:e9:eb:cd:41:39:89:24:08:ae:fd:30:04:a6:bf:26:78:12:
         62:33:59:29:4f:09:2a:15:2d:b3:84:be:6b:32:20:6c:34:8b:
         90:fc:cc:b1:04:0e:d2:02:0d:d9:e6:ec:12:e9:79:5d:f8:7f:
         34:47:31:f6:ba:13:fe:61:cd:d6:6f:02:a1:97:f2:7e:ad:6a:
         ee:3a:49:17:72:a7:01:8d:66:3e:26:c2:8d:f3:a0:f5:bf:1f:
         39:f7:20:a1:62:8d:bf:fb:bd:61:01:ed:fc:36:f6:ff:16:f8:
         80:7b:c9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:35:06 2026 by rpki-client