Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9f175dbc-a5b0-3b84-9de2-d3ddfb3583e5.roa
File:                     9f175dbc-a5b0-3b84-9de2-d3ddfb3583e5.roa (raw, json)
Hash identifier:          Etm1+xLfMasRnJl4/9WxFsZO9W86FzBQfRzYBYMD0Qk=
Subject key identifier:   27:4E:02:89:07:8E:25:A1:55:63:93:8C:E6:D5:B7:3A:E9:AC:83:B4
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D1D0268EAF0F682E47B98CE40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9f175dbc-a5b0-3b84-9de2-d3ddfb3583e5.roa
Signing time:             Mon 09 Mar 2026 17:24:52 +0000
ROA not before:           Mon 09 Mar 2026 17:24:52 +0000
ROA not after:            Sun 07 Jun 2026 17:24:52 +0000
asID:                     398781
IP address blocks:        172.120.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:02:68:ea:f0:f6:82:e4:7b:98:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  9 17:24:52 2026 GMT
            Not After : Jun  7 17:24:52 2026 GMT
        Subject: CN=2cce81b5-7ebe-4efd-86ee-a9611e1529a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:66:ca:f8:b3:0a:16:3e:97:82:70:2a:ed:8f:
                    0b:72:10:52:13:9c:87:ea:8b:7d:5a:42:98:12:7b:
                    a1:a9:4e:69:0b:5d:e1:9d:83:e4:a9:7d:52:18:c7:
                    4f:06:c9:fc:3f:8f:a1:71:55:e6:8f:ac:1c:09:35:
                    7a:51:18:22:58:b3:51:44:69:97:02:49:8a:88:5b:
                    05:01:ed:0f:24:bf:98:98:d7:79:10:b2:0d:a5:53:
                    d4:4b:d9:24:cf:0d:01:66:ab:c6:7a:f2:94:f5:cc:
                    31:8b:f7:0d:93:34:dd:d3:b5:90:19:5c:ed:ee:bf:
                    df:2a:16:b2:fc:57:9c:81:dd:9d:57:c9:e3:76:6e:
                    63:b2:15:a5:19:22:24:88:61:b3:55:63:ec:1b:94:
                    c2:4d:82:fd:45:1a:18:75:03:43:bc:d6:9d:86:08:
                    0d:c7:a5:5d:2a:0f:4f:4e:1f:36:cc:cc:ec:fb:42:
                    38:08:94:bf:00:b5:d4:13:9e:66:55:52:64:75:43:
                    3e:70:6e:2d:81:b5:85:f3:05:dd:39:8c:a9:16:19:
                    6d:3f:40:f5:5f:af:7f:27:fe:ab:13:b3:b6:8f:5c:
                    a5:1b:b5:23:54:ba:5b:d7:40:91:5c:62:40:7e:47:
                    9d:c7:05:8d:6b:a4:58:51:db:44:c2:af:0b:ff:50:
                    d2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4E:02:89:07:8E:25:A1:55:63:93:8C:E6:D5:B7:3A:E9:AC:83:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9f175dbc-a5b0-3b84-9de2-d3ddfb3583e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:33:5f:cc:a2:8d:a9:65:ac:9a:f0:fb:4d:22:a7:f4:06:7f:
         86:a9:10:d5:5f:0e:3c:7a:1c:11:45:f3:e7:96:00:66:13:24:
         0b:33:35:90:11:17:9f:84:be:28:f5:45:cd:00:d1:4b:d2:45:
         ba:b5:77:a4:f8:5e:00:8b:bc:5e:8a:39:cb:3d:fb:61:db:a9:
         35:39:98:15:72:f0:cc:8f:13:c2:9e:a2:ef:5c:51:60:98:94:
         97:52:46:5c:94:4f:57:61:ad:04:5c:8a:6b:94:ee:d7:fc:9e:
         63:c0:49:ff:f4:93:40:8e:43:6c:da:6b:f3:b0:06:ee:7c:90:
         65:b9:6b:d6:9c:4a:02:d4:f1:df:e1:2f:24:2a:d5:7c:0a:07:
         79:63:27:3c:c7:24:46:52:19:53:81:9f:46:23:d1:9f:dc:d5:
         58:81:a1:f2:fd:50:b1:ad:1b:44:2e:3e:f7:d1:fd:a8:e3:b9:
         86:26:26:c5:d8:3a:04:a8:88:16:a1:2b:df:62:01:8d:db:9b:
         ee:55:6b:6e:a3:8c:fd:9e:6a:2d:a4:ab:4e:b9:55:63:f3:28:
         12:4c:d9:ae:22:0a:74:d0:3d:60:1f:3b:11:b5:d6:dd:72:9f:
         45:d5:2b:5f:0b:20:e7:ac:cf:a3:ad:93:27:fd:d4:2e:c8:ba:
         0f:ff:fc:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0dAmjq8PaC5HuYzkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDMwOTE3MjQ1MloXDTI2MDYwNzE3MjQ1MlowLzEtMCsGA1UEAxMk
MmNjZTgxYjUtN2ViZS00ZWZkLTg2ZWUtYTk2MTFlMTUyOWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWbK+LMKFj6XgnAq7Y8LchBSE5yH6ot9WkKY
EnuhqU5pC13hnYPkqX1SGMdPBsn8P4+hcVXmj6wcCTV6URgiWLNRRGmXAkmKiFsF
Ae0PJL+YmNd5ELINpVPUS9kkzw0BZqvGevKU9cwxi/cNkzTd07WQGVzt7r/fKhay
/Fecgd2dV8njdm5jshWlGSIkiGGzVWPsG5TCTYL9RRoYdQNDvNadhggNx6VdKg9P
Th82zMzs+0I4CJS/ALXUE55mVVJkdUM+cG4tgbWF8wXdOYypFhltP0D1X69/J/6r
E7O2j1ylG7UjVLpb10CRXGJAfkedxwWNa6RYUdtEwq8L/1DSHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCdOAokHjiWhVWOTjObVtzrprIO0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOWYxNzVkYmMtYTViMC0z
Yjg0LTlkZTItZDNkZGZiMzU4M2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHhDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIUzX8yijallrJrw+00ip/QGf4apENVfDjx6HBFF8+eWAGYTJAszNZAR
F5+Evij1Rc0A0UvSRbq1d6T4XgCLvF6KOcs9+2HbqTU5mBVy8MyPE8Keou9cUWCY
lJdSRlyUT1dhrQRcimuU7tf8nmPASf/0k0COQ2zaa/OwBu58kGW5a9acSgLU8d/h
LyQq1XwKB3ljJzzHJEZSGVOBn0Yj0Z/c1ViBofL9ULGtG0QuPvfR/ajjuYYmJsXY
OgSoiBahK99iAY3bm+5Va26jjP2eai2kq065VWPzKBJM2a4iCnTQPWAfOxG11t1y
n0XVK18LIOesz6Otkyf91C7Iug///L0=
-----END CERTIFICATE-----
Generated at Mon Mar 23 18:47:22 2026 by rpki-client