Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/848904b3-fcfb-3820-99af-e0f22ae986d6.roa
File:                     848904b3-fcfb-3820-99af-e0f22ae986d6.roa (raw, json)
Hash identifier:          CxvKwXuULXdFHc96khkr+Pl6ysVWRvGtVigrcb/LGHY=
Subject key identifier:   DB:CE:8F:02:15:F4:6E:46:73:82:BD:37:97:4F:B8:21:56:19:74:F1
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EA799FE37E6D9FD6DFDEBDA00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/848904b3-fcfb-3820-99af-e0f22ae986d6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     212238
IP address blocks:        172.120.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:fe:37:e6:d9:fd:6d:fd:eb:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=611566ba-0b49-4c0c-943b-4534f27f77ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:61:e2:20:c6:91:72:c1:61:7d:91:11:51:23:
                    65:e1:11:d0:bc:4f:9f:1e:ee:50:1e:fb:8e:8b:0d:
                    5c:61:67:64:50:f4:a0:cc:24:e4:da:50:51:81:21:
                    28:cb:77:22:a4:44:ef:79:60:0b:fe:16:46:13:74:
                    86:ac:66:fb:93:6c:23:e3:7d:97:a8:f4:44:60:a4:
                    1e:0b:2a:d6:4a:f1:cd:5f:93:2b:f4:8e:ba:ab:80:
                    86:ef:6e:58:12:2f:f4:90:00:57:3b:c9:2c:85:99:
                    2d:d0:c1:db:f6:8a:7e:9d:de:f3:e3:75:8c:cd:a3:
                    0e:c4:f0:3f:24:95:27:cf:4f:d2:63:28:78:65:4a:
                    43:20:3b:e0:3c:7a:42:30:f5:93:d5:25:10:4a:7d:
                    3d:db:9c:93:36:58:b2:78:39:20:f8:f8:74:be:83:
                    b5:e8:17:99:9e:9a:fc:a3:a4:c7:85:cd:20:9b:7a:
                    34:4e:9d:90:8e:7a:46:80:ce:a7:2a:c3:dd:50:ed:
                    ab:8b:9d:06:70:84:b3:43:34:76:5f:1a:f6:3a:8f:
                    3f:1b:70:b9:ff:d0:e7:1e:88:29:c6:1a:c6:fe:3b:
                    6e:c1:51:9c:d8:a2:9f:7a:f6:33:21:cd:bb:57:ec:
                    88:74:17:fe:e3:82:58:bc:54:73:72:4b:17:f2:5b:
                    ea:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CE:8F:02:15:F4:6E:46:73:82:BD:37:97:4F:B8:21:56:19:74:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/848904b3-fcfb-3820-99af-e0f22ae986d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:47:81:c2:00:09:2b:84:94:94:34:4c:d5:fe:2d:0c:40:04:
         ad:0b:f5:12:b6:5d:f3:e4:16:06:05:4e:39:c0:64:37:bc:5d:
         06:2b:13:b1:3c:52:64:36:79:c1:92:be:e6:b5:33:9b:90:68:
         55:04:0a:e4:ca:d6:d7:5c:d0:8a:a2:d9:2f:3b:6f:fb:96:a6:
         74:1d:e0:ca:90:a9:c7:78:cc:28:98:b4:c9:67:43:ce:51:78:
         05:b2:96:f9:56:94:42:28:d0:21:c7:66:1e:7b:1b:e1:aa:1b:
         20:9f:e6:60:ab:98:00:ab:4c:03:ab:df:e3:71:50:d2:6b:c0:
         7f:08:9a:12:66:b4:b8:b3:36:85:6b:65:be:ba:44:48:2b:e1:
         92:1f:e3:5d:9d:2c:bb:50:9e:1c:e2:a6:12:52:1d:c1:b6:d9:
         bd:99:47:ae:04:92:06:ff:2c:f7:da:58:33:53:08:0c:d7:e1:
         97:d1:3a:56:d4:81:e6:35:cf:61:13:19:6f:3a:6f:c2:06:b6:
         78:06:0d:96:ff:bf:95:c2:80:d5:48:48:c4:61:26:47:4d:aa:
         ae:ba:6b:d1:e2:de:e2:90:1b:31:4a:bc:e1:6f:ba:59:29:67:
         6c:bf:7d:a0:32:b9:05:c8:3f:df:13:d3:a1:f4:df:94:b3:9b:
         d5:ad:e5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 07:46:52 2026 by rpki-client