Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cdb022fd-5c35-3906-8be7-b3044eadd97c.roa
File:                     cdb022fd-5c35-3906-8be7-b3044eadd97c.roa (raw, json)
Hash identifier:          jYPC7e9UGWIeTbwFeKf6FTAzugeOBjAc25Mh3Le02u8=
Subject key identifier:   B3:C0:5E:D9:47:90:47:AA:A7:08:D9:6F:AE:D4:77:31:0F:6D:11:32
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EB6E1AE49F049E07D5CA6FB00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cdb022fd-5c35-3906-8be7-b3044eadd97c.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     212238
IP address blocks:        172.121.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:ae:49:f0:49:e0:7d:5c:a6:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=7206d85d-00d9-4a6f-b475-6dcb19ef6613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7a:52:5d:1a:e9:28:02:ea:73:ca:20:46:00:
                    5d:aa:b4:d5:4e:8d:79:d0:94:6f:44:12:f5:08:c4:
                    48:87:48:da:27:4d:d1:20:58:44:34:3d:4f:7d:da:
                    ee:11:cd:96:d4:88:c3:4d:7f:de:3c:e3:c8:a0:c6:
                    dc:dd:29:80:91:ca:8a:a8:6e:1b:a4:4b:89:68:dd:
                    1a:a6:d1:03:11:1c:3b:e2:94:45:73:a2:4a:78:f4:
                    9b:12:29:1c:d8:e1:4b:05:1b:12:60:fb:70:b3:dd:
                    d6:b9:87:ae:c1:6f:ae:09:19:97:68:ff:ba:9c:2d:
                    83:c8:68:76:69:f2:3e:a2:d3:e8:b1:da:a1:53:95:
                    ad:4c:df:3d:73:d1:6c:f8:47:37:a8:39:c8:e7:af:
                    72:2a:fe:b7:75:d0:16:bb:f8:4e:31:71:49:57:59:
                    d7:76:ef:4a:5b:ef:0e:29:82:d8:4c:fc:6d:0b:14:
                    21:0a:ed:9f:1c:44:aa:2c:c4:b3:ff:21:41:bd:22:
                    c2:ca:f7:e1:c9:b1:2c:c7:36:71:c7:9f:30:ad:8c:
                    90:1c:2a:87:1c:b1:fd:1e:98:6c:83:a7:90:68:f1:
                    0b:10:b2:47:23:0c:89:0e:70:c7:a4:01:5e:b0:81:
                    ed:00:7c:1c:56:ab:16:0a:6f:ec:bb:47:28:67:1e:
                    62:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C0:5E:D9:47:90:47:AA:A7:08:D9:6F:AE:D4:77:31:0F:6D:11:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cdb022fd-5c35-3906-8be7-b3044eadd97c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:35:b7:10:90:fb:4d:39:ff:f1:73:09:da:3d:a9:2a:31:2e:
         e0:4e:c5:48:31:f3:0d:ca:90:88:6a:47:09:9c:2c:aa:38:09:
         99:e8:50:bb:1d:6e:48:60:2f:68:57:18:fc:ea:b3:a0:df:d0:
         f9:a6:97:4f:6c:ae:08:ba:7f:fc:ae:c5:1b:9f:af:f2:1e:58:
         e8:27:b2:a4:33:49:87:28:6e:6b:d2:5b:e1:e0:22:4c:f8:74:
         2d:10:46:4f:c1:08:2c:7b:c8:fe:1a:b5:5d:34:0e:51:30:a2:
         6a:36:00:c0:bf:50:97:f6:7f:0d:d4:21:df:e3:e0:0e:8f:4d:
         9e:9d:29:bd:2f:39:f4:16:82:45:20:cb:a7:f2:e3:6c:0d:1d:
         67:f2:fd:ce:ff:bc:74:8d:21:f6:46:4b:73:6d:18:d4:ef:d1:
         e5:35:11:f3:4c:1d:5c:7a:d9:3b:f3:03:c6:c4:b3:fd:1a:7f:
         df:ef:01:98:35:cb:3d:76:98:fd:06:b3:e2:39:1c:74:91:e0:
         f2:21:8c:2d:c2:ce:92:07:f1:fb:a6:a8:17:d3:7e:aa:fb:26:
         93:14:c9:0d:bf:82:08:e2:bf:58:84:75:fb:cc:61:32:c1:fc:
         04:be:e0:f4:46:54:a6:eb:d6:87:13:7d:0f:93:e0:cc:08:b7:
         e0:4a:37:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 07:46:37 2026 by rpki-client