Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b66fef64-e0b4-3047-99f5-c0a26dc1303c.roa
File:                     b66fef64-e0b4-3047-99f5-c0a26dc1303c.roa (raw, json)
Hash identifier:          cTv2FHKJv3dDCf7kQk51hxJlpLpUDA34mrP1aYeufCQ=
Subject key identifier:   33:C4:83:F1:0A:B1:82:7A:47:DA:9E:5B:CE:0F:4D:09:E4:E7:4B:95
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D0A77BEA2FC456AD290566300
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b66fef64-e0b4-3047-99f5-c0a26dc1303c.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     18779
IP address blocks:        172.121.20.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:be:a2:fc:45:6a:d2:90:56:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=2308e108-cf8b-44ef-9094-d754ecd0f490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:62:d3:73:64:ed:36:ab:71:23:7b:37:e7:98:
                    a1:9f:3d:fb:a5:61:ba:6d:37:0a:9c:97:4b:c4:98:
                    61:be:2c:e7:c3:f6:31:04:97:c1:3a:ca:11:9b:af:
                    09:09:6e:ac:61:b6:2a:31:65:76:e1:b7:bc:12:c4:
                    d7:f5:06:76:74:fa:b9:55:11:17:46:68:91:8d:2e:
                    7f:2d:26:3c:b1:63:c6:9d:7d:93:5f:01:12:21:dd:
                    61:86:e0:e9:d5:2b:43:50:55:74:42:cf:65:48:f7:
                    1e:2e:94:a8:fa:64:55:f5:65:06:18:14:d6:b8:1f:
                    1d:39:8a:ca:c5:f2:28:bc:2d:ff:81:3d:80:fa:79:
                    58:51:50:de:71:9a:ba:bb:2b:02:b7:f0:87:69:33:
                    23:6a:a7:b4:3d:5d:06:9e:2c:61:b1:9d:e3:78:09:
                    d8:99:8d:76:73:45:8d:18:b6:a5:21:69:5f:ba:48:
                    1a:7b:3c:39:6c:74:8f:24:95:5d:5e:ed:4b:71:18:
                    9d:6d:8c:44:6b:aa:57:d6:12:7e:5a:7d:27:47:bf:
                    f3:b9:a5:85:a8:75:85:45:c3:14:89:15:3c:de:ef:
                    40:2c:a2:2a:fa:a8:ed:e0:cb:6d:86:5c:45:36:f5:
                    6f:5d:aa:38:0f:94:6c:3d:7c:03:d5:16:fc:88:26:
                    53:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C4:83:F1:0A:B1:82:7A:47:DA:9E:5B:CE:0F:4D:09:E4:E7:4B:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b66fef64-e0b4-3047-99f5-c0a26dc1303c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:e0:fe:84:2e:80:6d:1c:b1:5c:8d:92:11:ac:87:41:95:35:
         b5:8a:87:1e:85:2d:c4:87:dc:74:ce:a1:8d:bd:15:61:18:5f:
         b3:2f:aa:4d:10:ce:01:1b:e1:19:89:0a:2d:e6:80:79:9b:78:
         1b:35:dc:1c:db:bb:f0:0f:b5:55:29:18:fa:84:3d:42:5e:7f:
         88:89:29:1a:b9:9f:0f:2f:40:99:27:3f:1e:9a:83:de:91:87:
         9b:b9:19:41:14:d8:1a:da:3c:26:41:68:31:a0:d9:3e:ca:d4:
         3b:eb:4d:e5:35:45:c1:d5:9e:3c:0c:a8:08:c8:e5:7e:5b:78:
         48:bd:92:f8:d6:1f:97:fa:6a:78:15:a7:d4:35:29:f2:ca:3c:
         a3:61:92:65:ca:e1:07:6e:ac:6e:7c:dc:d9:08:c4:67:00:30:
         ae:c0:eb:90:47:77:9a:c9:73:5a:55:1a:f2:07:f9:57:42:66:
         72:98:20:f9:6c:ee:a6:85:fd:0b:7b:92:9b:3f:a8:12:ed:b0:
         01:6c:a5:ae:a9:68:33:60:4f:68:0c:b3:95:77:0a:9e:2d:a0:
         a8:91:dc:26:b5:d4:b0:9e:35:92:8c:d2:de:d7:92:76:23:32:
         95:47:5b:fd:c6:86:5a:b6:6f:34:be:6b:32:dd:b6:17:e3:ec:
         a5:d4:5c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 12:03:40 2026 by rpki-client