Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ff6d9cf0-0074-354d-9de1-c41d7bb052c2.roa
File:                     ff6d9cf0-0074-354d-9de1-c41d7bb052c2.roa (raw, json)
Hash identifier:          hGtC9bX4ztL7V2Qcu5n62C7i82F/1VfuyGUysAdn56E=
Subject key identifier:   7F:3F:1B:77:AF:86:7B:A7:4F:29:8C:C5:99:76:BE:AF:1A:72:9C:61
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D1D031804C35D5A9C1BE09C80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ff6d9cf0-0074-354d-9de1-c41d7bb052c2.roa
Signing time:             Mon 09 Mar 2026 17:26:15 +0000
ROA not before:           Mon 09 Mar 2026 17:26:15 +0000
ROA not after:            Sun 07 Jun 2026 17:26:15 +0000
asID:                     398781
IP address blocks:        172.121.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:03:18:04:c3:5d:5a:9c:1b:e0:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  9 17:26:15 2026 GMT
            Not After : Jun  7 17:26:15 2026 GMT
        Subject: CN=1f1e269b-b30b-4e9f-91ae-6d9e7f8b75af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:38:a9:b1:c9:a7:dd:41:9d:36:6a:49:99:
                    1a:c0:ec:57:72:c0:57:81:e6:9e:3b:82:bc:08:55:
                    95:b0:76:6a:b7:24:59:9c:8a:c0:d6:5d:c3:90:f8:
                    d2:e4:0a:ca:73:f0:f2:76:fe:82:9a:f3:94:c2:e6:
                    e5:fd:65:a4:5b:92:33:a5:b2:8e:4d:d6:61:8f:c5:
                    ab:c4:b6:b2:e7:32:5a:9a:d5:96:07:f4:d3:8b:9c:
                    66:92:e9:21:18:4d:a6:12:f4:d5:fb:92:35:0c:1a:
                    36:6d:c9:85:5d:57:3e:46:41:c9:3c:a6:98:50:2a:
                    6a:3e:d4:46:28:e8:64:83:c5:6a:2d:b9:a7:92:e5:
                    47:2e:c1:41:31:33:0e:fb:dd:67:83:8b:93:8a:cc:
                    6f:18:2a:f1:ed:b3:89:32:96:05:4c:17:eb:cf:13:
                    45:cc:30:e1:e9:34:b6:0c:61:72:81:9d:59:19:ad:
                    4d:c6:0a:eb:c6:2b:36:26:cd:fb:27:b6:2b:fb:b8:
                    c3:ef:bc:9f:92:28:b4:bb:fb:b1:c5:d5:39:88:bc:
                    22:6f:bc:44:91:8b:4e:f6:c3:bf:fa:2d:46:a7:90:
                    54:29:5b:22:74:ef:12:5b:71:03:31:83:1e:e8:ef:
                    12:e7:41:4e:4d:e5:cc:07:e6:0c:40:8e:05:b5:7f:
                    30:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3F:1B:77:AF:86:7B:A7:4F:29:8C:C5:99:76:BE:AF:1A:72:9C:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ff6d9cf0-0074-354d-9de1-c41d7bb052c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:1f:a0:59:30:4c:47:da:d0:7a:02:97:f1:d9:46:59:56:57:
         7c:29:f1:0c:7b:dd:bb:90:cc:8e:5b:f1:b3:4f:45:5b:a8:59:
         fd:e7:d4:20:5c:b6:6f:ad:35:9d:dc:dc:d5:79:4c:3e:ed:16:
         b8:5a:32:29:a3:e0:f4:a0:0a:52:3b:b4:c0:9f:f8:ed:9f:ea:
         31:e4:26:cc:87:34:ab:f5:08:50:2b:86:c6:7c:0b:fc:69:56:
         6d:84:d5:fa:e7:40:77:29:3f:1f:f2:79:ca:d5:fe:e4:64:07:
         c9:8c:68:d4:5e:3b:55:de:a6:c1:0e:89:b1:7f:76:28:ff:ed:
         fb:bb:cf:5b:df:5a:25:28:31:b9:53:ef:48:10:a1:f9:38:e6:
         47:0c:a8:9c:aa:7a:b3:5a:ba:e9:c9:4e:8a:da:80:00:e3:db:
         57:44:7e:1d:f5:97:c6:3c:ba:e2:f5:07:24:a5:dc:2f:ef:13:
         ff:ed:7f:1d:65:8f:cd:71:fa:28:c5:13:b1:8d:69:cd:bb:18:
         7c:2d:95:7a:23:da:dc:05:34:1f:38:3e:53:fd:8a:39:07:7f:
         9f:1f:cc:56:1f:fe:e0:43:4f:7f:30:b3:76:e7:85:33:9e:c3:
         99:1b:04:a9:5a:dc:51:2a:1e:ca:55:d7:91:1d:c6:20:f6:be:
         0e:53:fa:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 18:48:47 2026 by rpki-client