Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a3e426cd-0423-344b-a420-81c6fe321878.roa
File:                     a3e426cd-0423-344b-a420-81c6fe321878.roa (raw, json)
Hash identifier:          gRytxnzzV+xvGAUwPEuaVZqwwiXJ6bHo8Mwe0gCwwkE=
Subject key identifier:   BE:C4:6D:35:B7:C2:E0:69:27:7F:08:57:70:52:42:A0:27:0D:96:1A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EA799FE16D5278F7938FAD700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a3e426cd-0423-344b-a420-81c6fe321878.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     212238
IP address blocks:        172.120.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:fe:16:d5:27:8f:79:38:fa:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1b86a7e5-ac1e-417a-9b59-88c51a884dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6c:b8:0b:4b:da:76:13:3e:ad:bf:26:61:5c:
                    f2:60:03:3a:9f:5d:05:c0:bc:c5:bc:77:2c:15:df:
                    c0:80:ca:55:c0:da:68:50:9a:88:f5:89:be:72:54:
                    64:70:5d:6a:35:25:23:4d:11:d7:87:1c:c0:2a:83:
                    04:71:36:25:3c:cd:e5:3b:6c:cb:c8:20:16:7e:8d:
                    d9:26:ed:3b:ea:d8:5c:45:3c:e9:e3:a9:10:38:cd:
                    35:44:1a:e9:6f:85:46:52:40:2f:3a:f3:4d:2c:f7:
                    c3:d9:62:51:73:c5:80:c8:7e:fa:c1:91:9a:e3:a8:
                    73:1e:85:52:aa:1e:e1:68:d0:3e:e5:1c:99:0f:66:
                    4b:62:ba:04:b2:de:80:d1:7e:9a:ae:00:5c:3a:ff:
                    fb:88:71:38:28:17:dc:58:dc:a0:b6:a8:e7:4d:5a:
                    7b:b3:98:10:14:1b:35:c8:21:da:a4:c8:21:a9:3d:
                    75:e3:c9:f8:06:82:e7:4f:e4:df:96:fc:e7:a7:65:
                    f5:8c:87:f6:8f:49:64:4c:42:45:e0:a1:ef:75:60:
                    e1:e5:e5:ce:17:b0:a5:87:b5:c5:b8:6b:4f:f2:b0:
                    ff:f2:00:2a:1d:3e:9e:d5:f4:da:fc:1b:0f:5a:bf:
                    60:72:26:ce:d7:65:14:31:b6:41:2c:56:a8:ef:55:
                    f3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C4:6D:35:B7:C2:E0:69:27:7F:08:57:70:52:42:A0:27:0D:96:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a3e426cd-0423-344b-a420-81c6fe321878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:3f:f6:b1:93:c4:42:39:50:8c:80:b8:f4:74:a5:58:c0:d0:
         dc:bf:23:09:b9:55:4a:fc:30:46:60:21:55:13:76:70:45:7d:
         e4:29:70:f1:3f:c0:c5:0f:cd:09:4b:75:3d:e5:cc:53:e0:01:
         4c:b5:56:2e:59:2f:fa:21:1d:90:37:71:aa:96:e5:79:39:9c:
         fe:c7:02:72:c8:6f:59:39:1f:15:36:6f:42:09:5b:cd:b8:cc:
         cd:ed:6c:de:67:6a:f6:c2:3a:e4:3f:8e:13:02:ff:aa:69:3e:
         67:0f:fb:82:2a:5a:67:67:61:8c:89:b3:bf:f6:c8:41:72:1f:
         42:61:cc:53:9e:7e:a3:7a:f9:ca:fa:8f:fe:da:fc:65:b8:05:
         54:f7:a7:ba:b1:76:c2:5d:75:c1:57:d6:fa:c9:e4:d5:51:78:
         25:af:c6:0b:ba:ef:42:0e:e3:b4:9c:0c:7e:6f:b2:db:3f:cd:
         c5:e3:a7:56:86:d8:d4:05:bb:4f:a7:8e:9d:65:8c:55:4b:db:
         3e:00:4e:9a:ae:4f:3e:d4:da:d0:d7:f7:86:8c:0e:fb:2d:61:
         1e:bf:e2:39:14:38:9a:76:57:73:49:3d:36:9b:d6:25:47:59:
         d8:2f:28:95:4c:6e:10:08:17:b1:83:00:d1:98:7f:8b:34:38:
         66:40:29:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 07:47:18 2026 by rpki-client