Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6d968ad8-eb8e-33aa-ba89-24ba2fda9ffd.roa
File:                     6d968ad8-eb8e-33aa-ba89-24ba2fda9ffd.roa (raw, json)
Hash identifier:          81tr1LIP7jP3cpN4p8vSdUnrf8uh7/LhM14VvVdLgcA=
Subject key identifier:   A6:6F:75:47:76:5E:9A:1C:76:22:B3:5D:87:57:D4:FF:0F:87:98:35
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EA7923AFF121CCB1AF8F21700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6d968ad8-eb8e-33aa-ba89-24ba2fda9ffd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     9009
IP address blocks:        172.120.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:3a:ff:12:1c:cb:1a:f8:f2:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a0854b4a-b17c-4769-a190-06692e1fe629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:19:68:81:db:71:2a:54:9c:fa:55:7e:f6:1a:
                    9e:4f:a6:58:ff:52:4f:7a:3d:dc:10:e3:f4:a5:d5:
                    1e:4d:d9:96:0c:a2:09:9d:93:a8:2d:2d:bc:1e:c7:
                    c2:33:5f:f0:8a:be:20:48:47:57:9a:85:9e:24:94:
                    1f:38:64:9e:b9:2d:0e:79:b0:f8:51:6c:7b:28:d1:
                    66:22:59:40:e3:be:47:73:d6:b4:07:54:61:bf:43:
                    e2:6b:11:a6:1f:e8:98:e1:f4:1b:1b:f5:70:da:a3:
                    ce:c6:1d:f4:02:06:74:f5:35:1a:33:3b:bb:2a:0f:
                    43:91:ba:bd:80:e7:39:76:8d:2d:f2:7d:1a:10:44:
                    8a:e2:6c:a9:c8:27:d2:08:0f:2f:23:5c:e4:56:c6:
                    eb:14:1f:57:15:78:5a:2f:ed:53:bc:8b:e8:80:b1:
                    c2:cf:76:3c:d1:0c:55:7f:5c:60:11:8b:3a:c5:32:
                    29:e9:4a:0d:ef:e0:fc:fa:79:fc:7e:41:22:01:d7:
                    a7:e8:d4:23:83:8b:f7:90:4c:d1:41:c7:d4:a3:ce:
                    52:40:34:6c:93:d4:84:90:28:39:cd:2e:fb:2a:a9:
                    2c:e2:b0:37:e4:9b:97:3c:17:84:3a:68:0e:be:20:
                    9e:b9:cb:f7:77:db:de:f6:07:38:60:68:ff:7f:e0:
                    73:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6F:75:47:76:5E:9A:1C:76:22:B3:5D:87:57:D4:FF:0F:87:98:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6d968ad8-eb8e-33aa-ba89-24ba2fda9ffd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:3a:89:71:7e:f5:4a:76:3e:48:e2:14:56:7a:70:4d:83:d1:
         9e:ca:0f:a8:87:e8:6e:94:96:cd:48:38:c2:2a:e9:4c:e0:c1:
         8c:dc:b8:f5:4c:75:29:7e:a6:bf:38:b3:3d:57:09:2e:05:f6:
         29:f5:03:4c:9e:5c:69:42:67:f2:67:db:3c:90:8f:1f:7f:f7:
         89:7e:46:f2:aa:97:1a:0b:33:94:bd:49:b3:c4:4a:0b:ff:3a:
         a2:d5:c5:1c:13:67:22:40:1b:02:0e:89:7f:7e:c2:10:8e:3d:
         f6:67:78:e4:f8:41:27:a1:c7:a4:74:14:9f:81:3f:49:71:dd:
         9e:23:db:28:2c:45:50:8d:d5:66:6d:86:6c:4c:6c:7b:ad:db:
         6e:f0:20:95:65:6f:eb:9e:ab:73:e0:b9:14:ad:f6:72:8f:5c:
         a4:3e:d6:5e:f0:c6:ee:98:28:1e:d2:91:03:3c:6a:bd:6d:83:
         37:8d:10:2b:8c:17:86:d9:61:fe:ba:72:8b:26:41:01:3b:80:
         3b:dd:60:df:a4:39:a1:c8:d6:a2:3b:3b:3b:dc:c7:a9:93:82:
         ea:a4:06:b7:3f:4c:6c:7e:f3:c2:47:0c:fa:7e:a7:a0:2c:9f:
         2d:d9:59:16:da:e3:d4:af:f1:e0:21:df:f9:0e:4a:f8:cd:60:
         54:2f:a2:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkjr/EhzLGvjyFwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YTA4NTRiNGEtYjE3Yy00NzY5LWExOTAtMDY2OTJlMWZlNjI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBlogdtxKlSc+lV+9hqeT6ZY/1JPej3cEOP0
pdUeTdmWDKIJnZOoLS28HsfCM1/wir4gSEdXmoWeJJQfOGSeuS0OebD4UWx7KNFm
IllA475Hc9a0B1Rhv0PiaxGmH+iY4fQbG/Vw2qPOxh30AgZ09TUaMzu7Kg9Dkbq9
gOc5do0t8n0aEESK4mypyCfSCA8vI1zkVsbrFB9XFXhaL+1TvIvogLHCz3Y80QxV
f1xgEYs6xTIp6UoN7+D8+nn8fkEiAden6NQjg4v3kEzRQcfUo85SQDRsk9SEkCg5
zS77Kqks4rA35JuXPBeEOmgOviCeucv3d9ve9gc4YGj/f+BzAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKZvdUd2XpocdiKzXYdX1P8Ph5g1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNmQ5NjhhZDgtZWI4ZS0z
M2FhLWJhODktMjRiYTJmZGE5ZmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA06iXF+9Up2PkjiFFZ6cE2D0Z7KD6iH6G6Uls1IOMIq6UzgwYzcuPVM
dSl+pr84sz1XCS4F9in1A0yeXGlCZ/Jn2zyQjx9/94l+RvKqlxoLM5S9SbPESgv/
OqLVxRwTZyJAGwIOiX9+whCOPfZneOT4QSehx6R0FJ+BP0lx3Z4j2ygsRVCN1WZt
hmxMbHut227wIJVlb+ueq3PguRSt9nKPXKQ+1l7wxu6YKB7SkQM8ar1tgzeNECuM
F4bZYf66cosmQQE7gDvdYN+kOaHI1qI7Ozvcx6mTguqkBrc/TGx+88JHDPp+p6As
ny3ZWRba49Sv8eAh3/kOSvjNYFQvovI=
-----END CERTIFICATE-----
Generated at Tue Aug 25 15:41:19 2026 by rpki-client