Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9c494889-0dd8-382e-8e06-10c9eee1fe9f.roa
File:                     9c494889-0dd8-382e-8e06-10c9eee1fe9f.roa (raw, json)
Hash identifier:          X8rvFUh2EBviwA0dDn+hwx/9pSAjy06LCPh2wBJM6S0=
Subject key identifier:   B4:09:52:C0:F4:25:8C:E1:58:1B:DB:4F:2F:19:B7:D5:29:BF:9C:A0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A5B95A95D32558D8DE34DB100
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9c494889-0dd8-382e-8e06-10c9eee1fe9f.roa
Signing time:             Mon 30 Jun 2025 01:00:50 +0000
ROA not before:           Mon 30 Jun 2025 01:00:50 +0000
ROA not after:            Sun 28 Sep 2025 01:00:50 +0000
asID:                     5065
IP address blocks:        172.120.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5b:95:a9:5d:32:55:8d:8d:e3:4d:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 30 01:00:50 2025 GMT
            Not After : Sep 28 01:00:50 2025 GMT
        Subject: CN=8d704773-6f28-4166-9631-254ea22e1ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4d:5e:4a:72:d6:fb:55:a8:8e:89:63:9a:5e:
                    23:9f:c1:8b:3e:d6:cc:50:4d:4d:5d:c1:d1:e8:70:
                    f2:81:24:30:52:55:4c:58:b7:58:a6:ac:85:11:e6:
                    99:20:f5:ad:f5:be:08:3c:75:dc:4c:04:18:b5:65:
                    c8:78:0a:f7:62:e1:f9:27:ff:2e:71:ba:00:de:fd:
                    2f:6b:38:5c:96:f7:8f:3b:95:65:4e:1b:ab:07:21:
                    a6:6f:6f:7d:03:14:98:2d:aa:f4:46:5c:51:09:25:
                    67:d7:18:2b:64:a3:93:a7:fe:d7:3c:03:77:7b:dc:
                    5a:2b:54:98:d2:7e:d3:da:97:63:89:64:0d:e9:19:
                    6a:26:ad:9e:82:4b:59:44:16:d3:ec:d0:06:16:45:
                    cd:d8:26:77:2c:33:e1:76:3e:9d:4c:d2:c3:58:7b:
                    bb:6e:ef:d8:10:96:a5:ea:a2:1f:00:c2:07:99:c6:
                    3d:e5:a1:5b:19:10:f1:1a:58:f4:7a:8c:52:90:22:
                    a9:4d:74:b0:50:fc:6b:50:37:8f:f8:d8:af:38:f0:
                    d9:fa:f1:66:27:79:21:c9:77:37:25:55:e6:e6:16:
                    63:35:79:cd:c2:bb:69:6c:84:6f:b6:b2:51:7a:db:
                    9d:36:11:77:b0:04:55:89:25:a3:11:23:02:df:14:
                    d0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:09:52:C0:F4:25:8C:E1:58:1B:DB:4F:2F:19:B7:D5:29:BF:9C:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9c494889-0dd8-382e-8e06-10c9eee1fe9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:65:2e:af:cb:dd:f5:41:a2:a0:ca:b6:8c:fd:58:39:ec:b4:
         15:ae:ba:2e:48:4c:87:26:4c:c8:34:c2:5c:87:da:33:4f:e7:
         66:11:0b:1d:f7:d4:8f:34:33:6f:67:c2:0e:16:b3:24:0d:59:
         3e:33:d5:45:39:59:7c:66:f9:32:fd:4f:95:38:af:b5:f1:27:
         6a:ee:37:fe:24:d0:09:69:c2:4f:99:3b:a1:6f:c0:b8:75:dc:
         2d:af:7f:95:e5:10:be:bf:74:5a:bb:fc:b2:fc:4c:5e:77:7c:
         ca:21:45:7a:31:99:24:58:06:55:3c:bf:2a:4e:8b:e1:72:b5:
         62:c1:fe:39:85:dc:b3:67:7b:e5:a5:44:a0:b7:48:dc:8f:df:
         69:d1:84:15:b7:1e:de:3c:16:ee:68:46:13:9f:23:11:8c:82:
         ea:ec:91:38:02:a6:d3:a1:c5:7e:2b:99:ec:81:42:4c:69:5c:
         0d:00:74:2e:d6:e3:43:83:dd:04:ac:77:1d:d1:c9:80:d3:b5:
         4e:b5:80:3f:5e:23:74:dc:8c:d8:76:75:66:d6:b7:f1:b2:51:
         eb:bf:d3:c9:b7:0a:77:d8:dc:89:ea:f3:bc:ee:9e:1a:ff:a0:
         5d:5d:c0:8c:4c:82:00:20:8a:db:e0:fb:c2:18:73:a3:79:81:
         e9:fe:ea:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 21:07:52 2025 by rpki-client