Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e47f7629-04bb-3c7f-85cb-e777670e587b.roa
File:                     e47f7629-04bb-3c7f-85cb-e777670e587b.roa (raw, json)
Hash identifier:          PQQr4ySmZ5QkBiuwX7Q9Lgr7otNv2Yw+gQHVXlIkPzM=
Subject key identifier:   AC:32:F5:14:65:A8:E7:01:42:4C:43:D7:0F:86:31:13:C0:C9:BD:A7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D0A779EED02105C658FA58FC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e47f7629-04bb-3c7f-85cb-e777670e587b.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     18779
IP address blocks:        172.121.38.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:9e:ed:02:10:5c:65:8f:a5:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=0d6c643b-4b5a-4982-9424-766f6d799f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f2:5c:12:c9:67:1e:6f:4c:11:2c:10:c1:98:
                    7d:eb:c2:c8:62:e5:19:7f:5a:36:8a:5e:95:46:95:
                    0a:59:3a:86:9c:c0:8a:e2:da:fb:b4:c9:07:0c:28:
                    0d:28:24:ff:dd:ee:ff:c5:4b:9c:e6:ee:45:33:dd:
                    89:e8:17:15:9c:43:6f:29:cd:0d:18:06:40:c7:ad:
                    87:bb:34:90:99:54:ef:72:37:9e:dc:15:fa:b2:1e:
                    c0:00:2f:4f:20:71:bd:d0:52:fb:eb:55:ca:dc:62:
                    d9:66:ab:1d:24:d3:cd:20:03:eb:cc:01:8c:fa:31:
                    d4:85:2d:95:ec:bd:fb:56:7d:2e:a8:ba:59:c6:a3:
                    f8:92:f1:0a:36:4e:70:76:e4:a3:01:74:36:92:57:
                    06:b2:6a:d2:32:78:c3:b6:dc:14:2a:7f:2f:99:db:
                    41:ed:59:4e:15:63:b2:28:b8:5f:2f:83:c6:f4:ce:
                    50:11:94:56:f5:c6:b9:71:7c:8e:03:ca:1e:41:8f:
                    ac:62:c9:0b:9b:bc:53:2c:a4:b8:0e:28:12:59:fc:
                    3d:bf:f1:ed:49:c5:ae:4b:ff:3d:2a:3f:74:c9:54:
                    e4:15:9f:05:2b:7e:63:bd:69:d3:29:31:06:a6:67:
                    46:9c:10:28:e9:1a:49:45:c8:2c:30:0e:ec:a7:c9:
                    72:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:32:F5:14:65:A8:E7:01:42:4C:43:D7:0F:86:31:13:C0:C9:BD:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e47f7629-04bb-3c7f-85cb-e777670e587b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:6c:29:b4:fb:6f:bc:f4:59:2b:c8:cc:f3:38:85:2a:67:9c:
         2a:7b:7b:96:9c:9c:85:7c:e5:19:a7:85:11:ef:e3:1c:c0:16:
         4d:5b:63:df:3e:18:1b:42:ab:e9:9e:3a:16:a9:24:2e:de:f9:
         34:97:c2:1b:9d:e1:aa:14:1b:51:bc:f6:d8:4d:27:a5:ef:15:
         59:6a:23:61:7f:e9:52:f6:ae:fb:ab:53:76:13:36:c7:a3:06:
         47:44:e9:e6:3b:e2:d5:3a:e6:c5:dd:5e:8c:f9:29:fe:a6:87:
         67:17:ae:ab:86:b6:6f:c8:5a:7a:07:dd:a4:bd:90:a3:a6:a1:
         f0:fb:61:e1:4d:3b:25:5d:27:74:18:4d:93:78:30:30:55:3d:
         68:f8:58:40:e6:6f:40:7a:9a:4a:56:23:34:e8:8f:8e:90:70:
         b3:fb:e3:8c:57:bd:48:d4:bf:e7:ad:e6:24:98:83:bd:2d:22:
         a2:05:55:d1:2c:0c:94:65:31:0a:10:db:4a:88:0b:9c:53:d3:
         e5:fa:4f:ad:b6:0d:3e:bf:a3:80:23:c4:bd:a4:d6:29:14:d8:
         bd:7a:6f:c5:7b:29:27:f0:15:46:85:b4:d9:af:66:10:89:b6:
         b4:99:02:01:ce:ca:2c:4a:f4:65:48:17:5e:2a:43:29:2a:08:
         64:97:49:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 12:09:17 2026 by rpki-client