Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/77870906-32c4-349a-8919-2237493d3cd2.roa
File:                     77870906-32c4-349a-8919-2237493d3cd2.roa (raw, json)
Hash identifier:          ItRA00KhOUAKf6j8mlBLTYSgiCV24vwkDH7jyXLLfQI=
Subject key identifier:   CC:F0:D2:2E:28:CE:F2:F9:7B:4A:64:D4:A2:47:BD:50:97:43:06:36
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D71A528B8F1D7AABC8EEBD460
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/77870906-32c4-349a-8919-2237493d3cd2.roa
Signing time:             Thu 09 Apr 2026 01:00:23 +0000
ROA not before:           Thu 09 Apr 2026 01:00:23 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     834
IP address blocks:        172.121.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:a5:28:b8:f1:d7:aa:bc:8e:eb:d4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr  9 01:00:23 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=703b0e2f-e10f-4f7a-9035-648233d2e0f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:67:c6:b4:e4:44:be:63:f0:87:03:34:85:cc:
                    53:3f:c4:77:ef:bb:c1:05:75:d0:6d:4f:e2:07:6a:
                    70:b9:39:db:bf:fb:d6:75:43:5e:44:55:d7:56:ea:
                    e0:8c:d0:f9:1a:c9:55:3e:59:f9:c8:ee:ed:0a:55:
                    0f:11:1f:a5:0d:f2:61:35:68:bd:9a:66:da:d0:f3:
                    45:16:88:34:4d:71:16:8c:6e:13:cf:41:36:70:f6:
                    d3:f5:dd:b8:be:c5:6e:74:fb:da:85:25:89:80:45:
                    2e:cb:84:5e:4b:3e:1c:7b:5a:32:04:c3:3a:9c:02:
                    3e:a9:14:5d:ca:b0:80:a7:74:ff:fa:08:1c:a7:00:
                    68:dd:3c:f0:7c:62:b0:86:fd:53:7f:02:de:e6:ce:
                    d1:09:2c:13:c2:73:ba:dc:61:4e:83:17:e2:7a:49:
                    84:6f:e0:99:49:be:c5:7b:65:a9:ad:44:a6:d9:6e:
                    0b:3e:d1:5d:42:ac:99:b9:7b:35:a6:b4:64:81:b0:
                    b4:8b:f9:c0:e8:63:97:2b:2c:75:82:37:32:1d:7d:
                    c9:26:1b:75:55:e7:69:0f:3c:32:1e:fb:fd:9d:52:
                    9b:dc:89:c2:f0:0d:2b:c8:a2:96:56:d3:b8:cf:ed:
                    6d:82:07:d4:d9:a7:77:8c:1d:7d:d1:51:20:12:42:
                    09:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F0:D2:2E:28:CE:F2:F9:7B:4A:64:D4:A2:47:BD:50:97:43:06:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/77870906-32c4-349a-8919-2237493d3cd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:98:42:b3:a2:8f:db:6c:d6:aa:c4:b0:ed:d2:9a:31:ee:5e:
         81:f8:69:81:f8:f7:9e:8a:98:bc:d9:9e:ec:3b:3b:4a:d5:63:
         d9:7d:a7:d7:4b:11:eb:06:d9:67:ba:1e:11:21:33:d1:2a:a1:
         d0:03:8e:f4:d3:a4:b0:23:34:dd:dd:97:70:00:fc:e7:fa:e1:
         d6:26:d9:38:a4:a0:82:a1:20:75:51:63:8d:29:69:8d:44:78:
         76:9d:a3:d5:e5:f0:4f:8e:3d:1e:22:71:6e:47:e5:6c:38:a9:
         c8:b0:a2:6a:84:3e:48:99:09:c2:bd:b7:20:05:15:b2:7a:87:
         b3:26:e6:9d:41:12:35:47:7c:31:9d:e0:c6:c1:bc:47:a9:a9:
         4d:c9:21:f4:c4:11:a7:4a:33:f6:e3:ca:7c:9e:7b:36:ff:9e:
         d6:67:b0:30:78:2b:0e:38:44:57:15:e2:ce:20:1a:2a:5e:33:
         fd:48:e3:7c:52:97:2e:1f:d9:72:0f:8e:93:57:0f:86:98:31:
         a2:3d:ef:3c:b4:86:20:81:22:74:50:06:b2:8e:a4:76:bd:c0:
         d7:3f:13:03:a6:e3:88:96:b8:e9:d7:34:62:20:40:4f:fb:0a:
         d8:cf:d9:76:f9:74:38:82:60:05:a1:79:9e:50:1d:cd:84:0f:
         56:ef:5b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 23:18:48 2026 by rpki-client