Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a1ca482b-2a6e-3256-a36d-522e6bd1aedf.roa
File:                     a1ca482b-2a6e-3256-a36d-522e6bd1aedf.roa (raw, json)
Hash identifier:          rzltsqqB5f3aHBrR9t1dVqOeDPW/JtSuxLa6pd7wFI8=
Subject key identifier:   90:E9:17:CD:BC:7F:2F:47:62:3F:4D:03:1E:03:9C:89:4C:3A:50:6E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EC0A75C5C8A34F61101721AC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a1ca482b-2a6e-3256-a36d-522e6bd1aedf.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     7018
IP address blocks:        172.121.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:5c:5c:8a:34:f6:11:01:72:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=7a78a9c8-116d-4ed5-88ac-a5ddda5f327b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:75:2e:b5:e8:87:c1:de:28:1a:17:f0:15:d1:
                    4f:51:28:e6:9f:f3:74:b0:9d:a1:57:0d:05:2d:00:
                    f4:e0:13:6e:e0:2d:e1:9c:65:f2:44:d0:21:38:e6:
                    5d:b2:c1:3e:ce:d1:6a:cd:ef:06:72:dc:6e:e2:ef:
                    08:1f:e8:ab:a9:8a:f5:fd:33:ca:ac:05:ea:31:85:
                    f0:2f:c5:06:e9:02:91:ea:99:35:1d:f0:f3:54:d3:
                    b4:ff:2f:46:6e:b0:b6:8c:3a:6d:e7:95:05:de:f2:
                    ee:ad:a3:5b:0e:76:ec:57:61:f0:1c:26:5a:68:7d:
                    23:2c:04:39:78:cc:d9:00:0c:b2:ff:4e:ab:ef:df:
                    08:ab:b1:99:d2:e6:2e:4a:1a:89:50:1d:82:86:11:
                    d5:81:f1:97:5c:03:fa:35:32:59:5b:04:a2:95:05:
                    52:5d:fa:21:66:a8:fa:cf:d9:b8:dc:24:0f:34:35:
                    dd:5c:32:bb:80:0a:02:cd:ce:63:2b:e7:c3:73:11:
                    e4:d5:db:b9:39:76:2d:34:4f:af:dc:41:4d:69:d9:
                    bf:bc:d0:1c:2f:92:1e:52:01:46:d1:3d:ee:52:fd:
                    ec:65:26:6a:c6:25:54:23:05:35:a3:ef:08:e4:63:
                    e0:ab:82:55:83:0d:7e:dc:fe:a4:9e:81:e1:92:93:
                    e2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E9:17:CD:BC:7F:2F:47:62:3F:4D:03:1E:03:9C:89:4C:3A:50:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a1ca482b-2a6e-3256-a36d-522e6bd1aedf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:d7:49:97:d3:24:81:70:45:ed:d9:95:e2:f8:f8:95:fa:49:
         3f:6d:7c:1c:a5:a2:b2:b4:80:8f:a7:5b:d6:fd:d1:b8:06:5a:
         8c:ce:b4:4c:ff:a4:7e:71:e8:75:18:6c:85:da:ea:af:f1:6f:
         98:84:bb:b9:8b:ee:c0:72:53:50:89:77:9a:85:d3:4e:4a:7f:
         07:f8:74:da:bb:f7:8b:e2:a3:bd:db:a7:cd:20:bf:30:a0:0e:
         78:8e:f8:c1:c4:b1:90:34:82:4a:ff:46:47:65:e8:bc:48:e1:
         1c:44:d2:43:e0:82:99:92:47:1b:34:61:ef:6d:94:ed:e0:b4:
         ee:e9:48:20:e7:d8:c1:d4:fe:33:26:55:75:0a:4b:eb:2f:32:
         ea:52:2c:57:f1:15:65:0d:fa:33:4c:20:39:9a:4e:58:e7:e9:
         ec:a8:51:dc:b2:e6:89:a6:02:bc:53:50:2a:6c:81:13:5b:bd:
         3d:ce:14:9b:74:97:0f:4b:2e:44:46:dc:91:a1:d8:4d:a3:8c:
         38:85:68:e4:21:ca:3c:0a:8d:72:85:ef:70:79:b4:d9:4b:a9:
         48:53:05:86:c9:51:df:18:e0:2d:79:8f:f9:b9:18:55:2c:23:
         ee:95:b3:9b:ae:52:cf:8f:31:31:f8:76:58:01:07:80:6d:18:
         70:61:a0:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Ap1xcijT2EQFyGsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk
N2E3OGE5YzgtMTE2ZC00ZWQ1LTg4YWMtYTVkZGRhNWYzMjdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnUuteiHwd4oGhfwFdFPUSjmn/N0sJ2hVw0F
LQD04BNu4C3hnGXyRNAhOOZdssE+ztFqze8Gctxu4u8IH+irqYr1/TPKrAXqMYXw
L8UG6QKR6pk1HfDzVNO0/y9GbrC2jDpt55UF3vLuraNbDnbsV2HwHCZaaH0jLAQ5
eMzZAAyy/06r798Iq7GZ0uYuShqJUB2ChhHVgfGXXAP6NTJZWwSilQVSXfohZqj6
z9m43CQPNDXdXDK7gAoCzc5jK+fDcxHk1du5OXYtNE+v3EFNadm/vNAcL5IeUgFG
0T3uUv3sZSZqxiVUIwU1o+8I5GPgq4JVgw1+3P6knoHhkpPinQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJDpF828fy9HYj9NAx4DnIlMOlBuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTFjYTQ4MmItMmE2ZS0z
MjU2LWEzNmQtNTIyZTZiZDFhZWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHkzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF3XSZfTJIFwRe3ZleL4+JX6ST9tfBylorK0gI+nW9b90bgGWozOtEz/
pH5x6HUYbIXa6q/xb5iEu7mL7sByU1CJd5qF005Kfwf4dNq794vio73bp80gvzCg
DniO+MHEsZA0gkr/Rkdl6LxI4RxE0kPggpmSRxs0Ye9tlO3gtO7pSCDn2MHU/jMm
VXUKS+svMupSLFfxFWUN+jNMIDmaTljn6eyoUdyy5ommArxTUCpsgRNbvT3OFJt0
lw9LLkRG3JGh2E2jjDiFaOQhyjwKjXKF73B5tNlLqUhTBYbJUd8Y4C15j/m5GFUs
I+6Vs5uuUs+PMTH4dlgBB4BtGHBhoGY=
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:36:08 2026 by rpki-client