Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7cbc1325-bed5-3b3d-b8f8-5664ca2fd5d6.roa
File:                     7cbc1325-bed5-3b3d-b8f8-5664ca2fd5d6.roa (raw, json)
Hash identifier:          ErToDjFq+x0usCb+M70YU32oUtEVvO+BVB9m8pTPVfw=
Subject key identifier:   37:FE:8A:81:8D:09:E7:83:8C:51:55:72:A1:E9:93:EF:E0:5A:D5:FF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D1D0778AF81F3F6A52A435200
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7cbc1325-bed5-3b3d-b8f8-5664ca2fd5d6.roa
Signing time:             Mon 09 Mar 2026 17:35:04 +0000
ROA not before:           Mon 09 Mar 2026 17:35:04 +0000
ROA not after:            Sun 07 Jun 2026 17:35:04 +0000
asID:                     398781
IP address blocks:        172.120.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:07:78:af:81:f3:f6:a5:2a:43:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  9 17:35:04 2026 GMT
            Not After : Jun  7 17:35:04 2026 GMT
        Subject: CN=cd2b2398-9c73-4992-b2ab-bbd5a068d2b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fa:14:8c:44:af:aa:a0:f2:ed:90:d2:6b:5f:
                    a7:20:ac:17:64:e9:4b:ea:45:d9:95:e3:9d:91:68:
                    27:3b:e0:47:c9:37:22:14:94:80:f6:cb:71:fd:66:
                    31:1c:11:6c:61:fa:4a:ef:8e:17:6c:35:fb:07:1e:
                    e5:0a:ad:b5:60:31:68:10:df:5b:8b:8e:e9:49:db:
                    9b:47:35:6a:57:08:dc:04:99:3f:f5:31:9b:59:bc:
                    ff:d4:c6:63:9f:a4:17:58:70:e4:46:ea:65:df:14:
                    c6:52:e5:2b:09:70:1c:cb:68:4a:85:0f:dd:bb:0a:
                    67:24:b7:47:7f:58:35:fc:18:2f:17:17:56:54:5c:
                    b3:9c:73:32:f0:6b:29:3c:57:de:57:af:b8:c3:24:
                    08:52:18:90:f5:dc:bd:d2:0d:84:2e:97:60:82:9a:
                    20:02:d4:99:fa:b9:9a:63:c4:f7:8a:61:68:dd:29:
                    6c:7a:47:06:99:46:e5:2a:a5:1e:09:14:55:87:71:
                    b2:de:f4:46:dc:49:53:b6:53:19:c2:1a:a9:d1:95:
                    0e:35:21:1a:89:90:ee:66:31:c6:3b:70:dd:07:ad:
                    0c:a4:20:b9:c3:1b:3a:39:aa:fa:52:76:a4:e2:b1:
                    56:96:5d:78:6c:b5:53:15:ab:68:8c:d2:ce:30:d6:
                    6b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:FE:8A:81:8D:09:E7:83:8C:51:55:72:A1:E9:93:EF:E0:5A:D5:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7cbc1325-bed5-3b3d-b8f8-5664ca2fd5d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e5:c7:88:4a:d5:a8:db:5e:7b:c4:9c:66:b3:e8:1e:99:2d:
         ba:c7:f0:9c:41:d0:2a:b7:08:c4:13:ae:a1:a7:88:e5:3f:63:
         9d:b6:05:52:0f:d2:eb:94:6f:07:b8:cd:de:12:80:f4:ac:cc:
         df:3a:fc:2a:94:0b:31:89:b1:cd:d5:d7:c7:9d:4c:4c:d1:a9:
         ae:c6:29:08:41:ef:14:d7:35:be:a5:b6:25:e3:5c:e0:86:c2:
         6a:e3:1b:9f:93:0d:b3:cf:de:82:31:86:19:03:f5:0a:a7:18:
         c7:f4:6a:42:6d:50:f9:89:e2:07:00:f9:16:f0:8b:15:6d:b1:
         4e:9d:68:9f:36:7c:06:6d:9a:37:3a:dc:b2:9f:c9:83:29:38:
         bb:4a:53:69:dc:b3:27:37:dc:95:ea:15:d8:95:ec:73:c8:ae:
         de:cf:dd:44:4a:0e:24:54:23:09:4f:90:a9:c5:ca:ed:7e:9d:
         e8:7e:b6:9c:ec:90:e3:b3:f9:60:f3:02:c6:dd:93:f3:d7:56:
         9e:a9:19:6a:80:91:90:10:6a:05:1c:5f:52:c2:4c:10:50:af:
         46:61:20:a3:cc:99:d7:00:78:38:c8:90:ee:d0:34:cc:ef:48:
         ec:da:c2:cc:24:f4:d2:f4:2d:5e:98:20:e9:01:90:34:b1:7d:
         31:98:d6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 18:48:19 2026 by rpki-client