Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9fa3d32b-eff5-3052-86e3-56d6162af95c.roa
File:                     9fa3d32b-eff5-3052-86e3-56d6162af95c.roa (raw, json)
Hash identifier:          QQ5ne5GVWR/9c6TUb5xefDoQyrkVmFWMEfTyyrdgKvQ=
Subject key identifier:   E9:40:28:0F:14:B1:1E:01:DE:52:03:4F:0F:8D:70:48:99:0E:95:D0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F498B5867C1FE473B29EA32C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9fa3d32b-eff5-3052-86e3-56d6162af95c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     9009
IP address blocks:        172.120.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:58:67:c1:fe:47:3b:29:ea:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1af4058e-b88b-46b5-8acf-6d6b4774ad23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2f:8c:41:dd:1a:24:77:58:e3:bb:5d:3e:96:
                    43:d9:86:35:1c:04:76:b0:2d:0d:c5:c5:1f:eb:17:
                    9a:91:ef:09:94:8a:d1:73:2b:3a:91:e9:9f:54:15:
                    e9:7a:07:ca:49:f0:cc:b9:37:f9:85:f0:c5:91:5e:
                    6a:23:51:f7:7c:71:a7:ee:8c:02:1f:32:53:8b:f4:
                    5f:fa:d1:d1:e9:80:97:98:3a:32:bf:82:aa:90:90:
                    a3:94:28:19:8c:f2:64:24:7f:a5:63:7b:a8:d4:eb:
                    0a:e8:14:35:cf:d2:1b:ba:3e:0c:85:58:00:f6:e2:
                    35:69:13:17:e8:32:01:14:96:53:75:7e:c8:7e:74:
                    8d:61:a9:16:ab:ff:34:4c:47:41:c2:49:b8:a4:7b:
                    43:dc:79:c0:4a:a6:e2:99:41:71:c7:80:52:a8:71:
                    0e:49:6a:a6:ee:b2:96:17:30:d9:f0:92:a0:0c:09:
                    d4:80:4b:23:b2:ab:3b:63:b0:1d:1c:8c:5f:3a:90:
                    3e:e8:83:10:7f:32:e8:2d:44:f2:d0:b7:95:a1:58:
                    61:c7:e5:22:ef:25:f8:1f:87:70:bb:8d:6c:4e:62:
                    97:2c:cd:51:d0:44:21:af:9e:da:9a:39:79:1c:34:
                    93:d6:ee:4a:05:c8:8e:e6:28:26:59:dc:96:6a:7f:
                    ea:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:40:28:0F:14:B1:1E:01:DE:52:03:4F:0F:8D:70:48:99:0E:95:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9fa3d32b-eff5-3052-86e3-56d6162af95c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:f1:0a:1d:67:a4:67:75:32:fb:f9:a5:28:cd:d9:e8:f6:d0:
         c5:e3:d1:bc:9f:75:71:86:62:52:12:b6:09:c8:ca:ec:b6:25:
         10:10:fe:e3:2e:c1:59:bd:cb:61:97:69:ff:d0:01:5b:19:58:
         b1:6f:7d:eb:95:37:4c:07:89:7e:52:47:57:4a:0a:bc:0e:41:
         61:14:2f:be:62:36:f7:1b:16:ae:43:7e:9f:d2:9d:fb:ee:b5:
         19:af:91:ef:60:13:ed:3e:24:8e:8c:2e:cf:d2:f6:b2:df:7b:
         2d:8b:bb:3e:05:8a:34:d5:5a:9a:59:43:e0:51:49:66:70:43:
         14:6f:d5:cc:f3:3c:0e:fa:9f:f4:56:53:e7:af:0d:11:1c:17:
         9f:a1:ae:51:c9:92:55:e8:94:fc:08:7a:2c:83:00:5a:86:bb:
         17:c8:37:0e:ea:1f:7c:ee:c5:ab:3a:69:24:ae:4f:98:8d:e4:
         46:0e:ad:f3:c8:21:43:72:e1:10:9c:f9:d3:d4:d1:f2:26:08:
         b0:5c:c6:a4:5f:61:e7:45:50:29:d6:d1:3b:25:d3:13:4a:2a:
         67:43:1b:ad:2e:f6:c2:f9:22:df:71:ac:44:a5:59:29:c8:38:
         ab:a3:57:8c:43:f4:ce:19:b7:d2:8c:05:e5:56:72:0a:63:75:
         4a:d9:81:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:03:23 2026 by rpki-client