Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dce7988d-6ebe-371b-8018-d94d47dc428e.roa
File:                     dce7988d-6ebe-371b-8018-d94d47dc428e.roa (raw, json)
Hash identifier:          /3AFgFBucqlcEv8M+ekPE65X5A91XDQYyqipY9kLmEY=
Subject key identifier:   F7:02:EC:70:01:9C:CD:AE:BD:66:79:65:7F:96:04:9D:81:4D:49:60
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EA7933EB62C8236869EB94480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dce7988d-6ebe-371b-8018-d94d47dc428e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     18779
IP address blocks:        172.120.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:3e:b6:2c:82:36:86:9e:b9:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=41bef34f-711e-48c1-b96c-f3000e7ebc8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:84:cd:ab:9a:d5:0a:9e:76:6d:e2:54:7b:c1:
                    51:e2:c1:7f:10:9a:ab:50:97:2b:15:02:b7:8e:3f:
                    cc:9d:d9:c3:b4:cd:9c:08:a1:53:31:62:43:97:ec:
                    82:c3:7a:e6:ce:25:c1:c0:e2:e7:92:f9:ee:0a:76:
                    41:47:af:f3:2f:33:4f:a6:92:23:58:71:4c:6a:aa:
                    b1:0e:18:f6:6f:d2:4a:6a:61:8c:05:72:05:8e:35:
                    71:5e:14:7b:27:dc:32:68:eb:a0:d3:49:aa:d3:53:
                    fb:f6:1c:34:a2:6c:e4:d8:c2:75:22:2f:1b:24:79:
                    28:21:e2:a1:08:00:24:85:b6:8e:42:11:2c:30:68:
                    68:1d:1b:47:72:1b:9c:01:28:85:c0:8e:ac:f9:df:
                    1b:47:72:65:50:fe:d4:39:3f:d8:74:01:26:0b:39:
                    12:9e:fd:62:4f:44:44:ce:8f:90:f2:80:13:c3:42:
                    11:57:2b:a6:2f:52:12:49:05:99:8f:ba:c2:28:cf:
                    6f:0f:62:8d:af:70:f4:e3:67:a6:36:95:b1:7a:e1:
                    76:3d:82:6d:ce:89:40:dc:2b:e1:19:b1:e0:ea:5f:
                    c3:7a:50:a8:44:0d:2e:98:a3:c7:81:fd:8e:01:16:
                    0b:f5:e4:f8:42:22:9c:b0:0f:36:4f:d1:95:b1:ec:
                    49:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:02:EC:70:01:9C:CD:AE:BD:66:79:65:7F:96:04:9D:81:4D:49:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dce7988d-6ebe-371b-8018-d94d47dc428e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:7c:94:0e:7d:a9:7b:68:ad:69:76:b0:13:93:13:86:b2:09:
         4a:52:5c:b1:93:b1:5f:08:4b:8d:fd:e0:c2:c6:85:71:0b:a6:
         e5:da:af:5b:a0:31:2b:6d:70:e1:b5:d4:e5:87:95:a0:97:dd:
         a9:47:96:b1:79:c0:bc:c5:eb:a9:68:a5:ef:27:f3:fa:69:25:
         09:14:46:8a:76:38:80:e4:f3:1c:1a:46:63:0b:c3:20:be:52:
         29:c6:8c:de:7a:ee:09:d1:23:9e:4c:62:bd:96:9c:72:07:17:
         2f:51:ad:94:bd:3e:ee:97:e6:52:d1:9a:88:60:27:58:04:d2:
         62:de:fb:4e:56:30:cf:68:7a:2c:34:64:97:01:4e:12:d2:67:
         9e:f1:f6:d1:a6:40:5d:b2:dc:cb:8c:23:5c:64:0b:a3:e6:fc:
         58:45:e2:2b:9c:02:c1:c2:9d:9a:a2:3c:c4:a3:ed:15:9a:1a:
         4d:ac:92:ad:80:f4:1a:af:61:d6:61:92:63:a2:01:fc:af:2b:
         47:d0:35:04:a6:49:9e:2b:f1:ab:aa:b3:51:25:a3:fc:4e:3a:
         cb:bf:e6:e5:96:88:a5:7c:30:c0:74:be:94:ac:79:78:42:d4:
         37:9e:24:56:21:d2:27:92:8a:72:37:1c:e8:90:f4:e2:54:27:
         be:c5:88:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 22:48:59 2026 by rpki-client