Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/13bf989e-bbf5-3d3a-925c-f6685b0a398b.roa
File:                     13bf989e-bbf5-3d3a-925c-f6685b0a398b.roa (raw, json)
Hash identifier:          FERM2cCA5F9FWo0KQUfHy4sAJk3hGyX9Sj6EUPb03dI=
Subject key identifier:   07:99:EA:FE:F1:86:C6:C8:90:08:A9:D7:31:2C:C0:0A:DF:BD:91:6F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584E147EE4AAE9C9DEACDFF48A60
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/13bf989e-bbf5-3d3a-925c-f6685b0a398b.roa
Signing time:             Sat 06 Jun 2026 09:00:12 +0000
ROA not before:           Sat 06 Jun 2026 09:00:12 +0000
ROA not after:            Fri 04 Sep 2026 09:00:12 +0000
asID:                     212238
IP address blocks:        172.120.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:14:7e:e4:aa:e9:c9:de:ac:df:f4:8a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun  6 09:00:12 2026 GMT
            Not After : Sep  4 09:00:12 2026 GMT
        Subject: CN=a5519f0d-ee9f-434d-83a8-dff77eee2083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c3:3d:bc:98:8b:c3:25:2d:18:c2:2b:88:e8:
                    01:24:2c:cf:25:fe:73:cf:40:cc:a7:33:21:4b:ec:
                    3e:a1:fc:1e:27:46:d8:60:73:c8:f2:43:f6:39:da:
                    20:f6:34:91:48:ab:12:34:76:0c:41:3b:95:0f:75:
                    3e:ef:ce:f7:6b:3c:3a:65:68:76:8b:8a:8c:67:a4:
                    d2:74:2c:bd:6b:96:b1:8e:de:45:46:ef:56:c7:4e:
                    84:18:7b:50:c6:b0:0e:fc:c0:e4:d5:e4:e6:d9:f2:
                    9e:02:1a:df:a2:3c:aa:6e:69:e4:98:4f:21:39:5f:
                    c4:4f:83:05:b8:d3:07:80:38:09:e6:8d:67:76:2f:
                    ce:1a:b0:60:e5:1d:ec:f5:6c:5f:e2:f4:3f:28:76:
                    78:f1:d8:a1:ed:d4:89:36:c3:4a:dd:ce:67:f7:cd:
                    dd:7a:67:1e:51:1d:7c:4b:ef:0d:c9:bb:dd:e0:b8:
                    95:87:43:a1:21:a6:96:16:79:fb:27:08:6b:f2:29:
                    6e:95:cd:12:fe:d1:c0:a4:2b:1c:8d:4e:54:81:af:
                    43:48:fe:49:59:43:18:bb:75:45:2b:3b:b5:cb:c4:
                    2e:1c:ec:f1:55:5e:17:e3:c4:fd:ef:31:d1:bc:8d:
                    28:ff:8e:a0:47:8a:31:ba:be:76:1e:8b:37:1a:d0:
                    66:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:99:EA:FE:F1:86:C6:C8:90:08:A9:D7:31:2C:C0:0A:DF:BD:91:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/13bf989e-bbf5-3d3a-925c-f6685b0a398b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:64:b0:5f:37:e0:95:c7:45:bf:9f:5f:08:2c:b2:8e:aa:06:
         f3:83:6e:36:e4:ad:1b:b1:a2:82:ef:07:68:61:a8:3e:80:05:
         ae:92:6f:9c:ff:b6:34:b8:a8:8d:a5:05:ed:ff:56:fa:41:2c:
         08:2f:9e:cf:b5:f9:c1:ba:f2:96:ea:cb:75:6e:27:9d:63:34:
         87:29:5f:1d:95:76:46:db:d1:86:1a:08:d8:45:ee:b4:79:20:
         2e:ea:69:97:07:bb:6e:2e:93:e9:c0:3c:ce:57:ca:e5:53:87:
         8b:b5:c1:75:e4:81:e7:85:bf:80:e8:60:7b:90:ad:bf:b7:5c:
         67:33:6b:b5:95:c8:c3:cc:8d:fb:55:fe:f7:f6:d1:4f:df:d1:
         7e:8b:2a:6b:aa:ca:2e:3d:3d:51:bc:85:e5:ce:f4:98:ad:36:
         4a:8a:63:4d:3d:2f:00:97:f0:eb:30:54:67:df:29:3f:58:36:
         64:60:ad:a9:ce:cf:df:e0:d2:76:12:de:4f:b4:21:c7:15:bd:
         b2:89:e8:b5:db:be:9f:4b:ab:48:ee:be:3f:8c:1a:36:0d:3b:
         f9:a8:50:34:c8:2f:39:4c:c8:db:3e:86:96:1b:32:aa:fd:bd:
         a2:0c:fa:cb:35:b1:59:06:57:19:fd:c2:16:67:93:d0:46:fb:
         46:7f:9c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:38:53 2026 by rpki-client