Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1982fe32-f51d-31ee-b451-e2553481054e.roa
File:                     1982fe32-f51d-31ee-b451-e2553481054e.roa (raw, json)
Hash identifier:          1TP7+CU7jOb7agQ6Ulu9gcSHSsnAqfmWrYNl3LXs+dw=
Subject key identifier:   C3:76:72:CB:84:97:F5:DE:CA:9A:42:E5:D3:5A:4C:65:1F:F6:74:C9
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584BB88D0A7294E83BE3FBE92AE0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1982fe32-f51d-31ee-b451-e2553481054e.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     214238
IP address blocks:        172.120.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:0a:72:94:e8:3b:e3:fb:e9:2a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=f2969076-7f20-438d-9575-135488e5c61b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3b:e3:e2:88:fd:72:46:ba:7e:93:e3:12:ad:
                    22:ea:3d:5e:4e:b1:35:eb:f8:25:bc:32:3e:55:3f:
                    4b:14:2b:18:72:64:e9:96:fa:87:80:82:a8:96:82:
                    79:a1:8c:6e:57:bc:2b:66:32:cb:73:2b:46:23:33:
                    76:36:99:f4:9c:b5:10:26:27:a3:55:c3:b8:db:60:
                    4c:42:d8:e4:21:f0:2e:ba:b3:83:6e:a6:6d:3b:11:
                    bd:72:7d:21:3e:d4:6b:17:90:ec:3b:0d:ef:f3:99:
                    9f:ab:98:04:5d:4e:86:b9:41:46:81:3a:cf:39:4b:
                    a7:86:76:eb:ab:80:3f:87:30:a1:84:db:b4:35:6e:
                    13:fc:8a:bb:e3:5c:92:56:aa:34:bf:c8:19:6d:cb:
                    f6:3f:ca:bf:c1:01:49:45:a0:09:54:52:f6:8e:1b:
                    85:db:67:1a:3f:d3:9e:fd:a3:7c:98:d0:40:34:c8:
                    5c:91:84:ec:3a:c8:dd:6c:59:4c:ee:44:e0:90:ec:
                    d3:b2:9a:61:db:c9:fc:9b:14:0a:81:bd:b4:6d:3f:
                    e6:2f:6c:4f:2c:ef:ac:c2:0d:2b:dd:33:cb:d0:17:
                    a1:2a:15:12:1f:ea:5b:29:bd:a9:0c:85:de:a8:1e:
                    84:09:c6:38:d2:c4:3d:72:d7:92:05:6e:35:e6:38:
                    af:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:76:72:CB:84:97:F5:DE:CA:9A:42:E5:D3:5A:4C:65:1F:F6:74:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1982fe32-f51d-31ee-b451-e2553481054e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:49:c1:2d:b1:5d:8b:15:4e:ce:60:14:56:d5:ed:54:66:46:
         28:f3:23:9b:ec:2b:e5:39:16:02:68:5e:6c:1a:21:91:fb:10:
         43:22:6c:2c:d6:b1:3f:e4:56:ec:ac:8e:63:bc:f8:76:14:2a:
         03:86:2a:8e:0d:01:e1:d7:07:6c:ba:a5:24:99:5e:64:81:81:
         2f:08:0e:18:3a:43:f1:f3:6e:93:4b:c8:2a:32:48:45:f5:39:
         0d:b0:f6:fc:3f:bb:f6:1b:7a:b8:8b:ed:38:1c:40:ca:4a:9c:
         fd:86:a0:26:a5:e4:28:82:40:6f:e1:76:f0:ec:6f:4b:17:42:
         ee:a9:ae:78:a6:90:5f:83:c0:c0:12:43:4d:c0:03:f1:ab:a5:
         78:1a:0e:37:82:3f:2b:b1:50:d6:ad:89:63:7c:f9:f4:0e:6b:
         80:73:73:d9:76:6f:a5:9b:7c:77:a5:74:63:e0:05:07:9f:04:
         93:d4:c9:9c:e9:7a:91:43:9f:09:e4:fd:3b:ca:d1:53:dc:c2:
         7b:f3:e6:0c:d2:f9:d9:a0:2d:06:b8:8d:bd:4a:c6:fa:f8:f5:
         f1:f7:71:90:b3:66:1d:21:46:8c:49:1c:80:cd:3a:05:d0:db:
         83:57:67:6f:8e:88:aa:11:70:62:33:77:3f:d7:17:45:69:41:
         31:ac:1d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:58:37 2025 by rpki-client