Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/72b0d44c-776b-3a89-b961-7d8e6bfa02ac.roa
File:                     72b0d44c-776b-3a89-b961-7d8e6bfa02ac.roa (raw, json)
Hash identifier:          x1vYeLu8E/1MV0hHFZYzyQevPgaxD+TA+K1wgkDL8ag=
Subject key identifier:   B2:44:18:7B:DE:C6:E7:40:A7:0B:19:14:0D:9F:99:38:04:50:91:61
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584E1333A540697880E1DD52AA10
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/72b0d44c-776b-3a89-b961-7d8e6bfa02ac.roa
Signing time:             Fri 05 Jun 2026 21:52:56 +0000
ROA not before:           Fri 05 Jun 2026 21:52:56 +0000
ROA not after:            Thu 03 Sep 2026 21:52:56 +0000
asID:                     214238
IP address blocks:        172.120.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:33:a5:40:69:78:80:e1:dd:52:aa:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun  5 21:52:56 2026 GMT
            Not After : Sep  3 21:52:56 2026 GMT
        Subject: CN=c16c53c5-8bbe-49ba-bfd6-6021c6b93f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:84:5f:04:31:44:60:de:ae:35:04:c2:5a:c2:
                    50:2e:69:b1:ff:1a:8e:52:20:f2:d6:a8:64:37:09:
                    82:1f:db:47:dd:0b:29:b6:1c:91:04:fb:05:f6:14:
                    3c:ca:19:ab:95:2c:a8:e5:f8:19:5a:c3:7d:f9:d6:
                    5d:3c:c1:92:e8:7c:ce:21:95:ee:6d:27:b7:69:5c:
                    63:57:6c:95:7b:de:46:b9:4c:52:78:af:d0:7b:86:
                    5d:a7:e3:47:0e:01:a2:c2:8b:11:34:d9:c6:15:e0:
                    b0:86:bb:0f:f0:bb:a6:03:65:d3:ea:9c:68:68:c9:
                    d6:af:aa:42:06:96:41:10:3c:0f:0d:4c:d4:c0:4d:
                    f4:c3:42:6a:5d:c6:e2:5c:9f:b0:49:e8:9a:24:05:
                    8b:01:e2:e3:69:7e:57:3f:52:4c:6b:82:d8:1a:a6:
                    6a:cd:c9:ac:ca:2d:70:09:d6:4b:02:aa:40:20:52:
                    12:ee:e5:56:9c:75:72:5e:1c:e2:ea:13:b6:44:9f:
                    2d:66:d7:1e:e7:4b:e5:e9:34:07:9c:a7:9d:6d:e1:
                    3a:82:6e:a1:67:be:a4:78:c6:01:0a:38:62:1f:97:
                    7a:f8:83:e9:d1:48:6d:53:ad:81:87:ca:c3:ec:b1:
                    e6:1c:34:59:ad:98:4c:5b:51:dc:40:e7:c6:fa:01:
                    4b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:44:18:7B:DE:C6:E7:40:A7:0B:19:14:0D:9F:99:38:04:50:91:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/72b0d44c-776b-3a89-b961-7d8e6bfa02ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:13:21:78:e0:c5:1f:b8:6c:34:1c:22:e4:51:c2:4a:74:38:
         3a:bd:5e:5e:6a:e5:ed:ab:09:83:86:50:9b:c8:40:7d:c7:b4:
         e4:de:ce:97:aa:b4:cd:2c:63:9f:ee:d8:23:43:80:da:e0:33:
         5d:c4:88:35:f8:1c:cb:94:9c:fa:bb:b2:8e:10:43:eb:16:0f:
         dd:a0:18:e7:23:59:35:53:1b:e0:47:dd:a8:b6:69:46:e5:0f:
         3a:72:3f:1c:c8:5b:b7:ce:94:b4:a4:93:b7:4f:84:26:f8:bf:
         b8:db:ee:c2:9b:c1:2b:92:22:e3:ae:ea:b4:37:04:bd:77:5d:
         bc:63:63:65:67:c2:3f:73:6b:52:39:79:55:78:1d:52:1d:1e:
         cf:e7:31:f4:b7:66:c6:81:a1:f9:73:af:6a:fc:a5:37:c7:51:
         e6:71:58:87:ad:b9:18:13:aa:a1:99:33:37:50:bb:e1:d1:fd:
         36:7e:b7:f0:ab:7f:2b:59:fc:d5:a6:8b:6e:9a:22:1e:57:55:
         f1:41:f3:77:e0:69:46:43:32:7a:6d:8c:78:23:ab:b8:ca:c9:
         d5:f2:41:78:b1:3f:e2:d1:3a:58:58:57:1b:f8:db:7f:cd:e6:
         63:41:79:c5:14:a5:52:25:65:2c:ca:4d:c9:11:b2:e8:de:ab:
         79:ad:94:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4TM6VAaXiA4d1SqhAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDYwNTIxNTI1NloXDTI2MDkwMzIxNTI1NlowLzEtMCsGA1UEAxMk
YzE2YzUzYzUtOGJiZS00OWJhLWJmZDYtNjAyMWM2YjkzZjlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYRfBDFEYN6uNQTCWsJQLmmx/xqOUiDy1qhk
NwmCH9tH3QspthyRBPsF9hQ8yhmrlSyo5fgZWsN9+dZdPMGS6HzOIZXubSe3aVxj
V2yVe95GuUxSeK/Qe4Zdp+NHDgGiwosRNNnGFeCwhrsP8LumA2XT6pxoaMnWr6pC
BpZBEDwPDUzUwE30w0JqXcbiXJ+wSeiaJAWLAeLjaX5XP1JMa4LYGqZqzcmsyi1w
CdZLAqpAIFIS7uVWnHVyXhzi6hO2RJ8tZtce50vl6TQHnKedbeE6gm6hZ76keMYB
CjhiH5d6+IPp0UhtU62Bh8rD7LHmHDRZrZhMW1HcQOfG+gFLCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLJEGHvexudApwsZFA2fmTgEUJFhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNzJiMGQ0NGMtNzc2Yi0z
YTg5LWI5NjEtN2Q4ZTZiZmEwMmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHh1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD8TIXjgxR+4bDQcIuRRwkp0ODq9Xl5q5e2rCYOGUJvIQH3HtOTezpeq
tM0sY5/u2CNDgNrgM13EiDX4HMuUnPq7so4QQ+sWD92gGOcjWTVTG+BH3ai2aUbl
DzpyPxzIW7fOlLSkk7dPhCb4v7jb7sKbwSuSIuOu6rQ3BL13XbxjY2Vnwj9za1I5
eVV4HVIdHs/nMfS3ZsaBoflzr2r8pTfHUeZxWIetuRgTqqGZMzdQu+HR/TZ+t/Cr
fytZ/NWmi26aIh5XVfFB83fgaUZDMnptjHgjq7jKydXyQXixP+LROlhYVxv423/N
5mNBecUUpVIlZSzKTckRsujeq3mtlDs=
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:49:36 2026 by rpki-client