Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/245af5f8-1aa4-3c9b-ab6d-ac0cbaba8268.roa
File:                     245af5f8-1aa4-3c9b-ab6d-ac0cbaba8268.roa (raw, json)
Hash identifier:          CmLgp9DhUICDrEWx9jcpcaeqHxHeyBqXrsxHOguLrbk=
Subject key identifier:   47:99:5B:85:34:32:32:B7:57:6B:27:FC:AA:44:5E:65:27:52:09:BD
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EA7923C6AD5BACAB2B8D27F00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/245af5f8-1aa4-3c9b-ab6d-ac0cbaba8268.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     9009
IP address blocks:        172.120.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:3c:6a:d5:ba:ca:b2:b8:d2:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=409aaf5f-6718-45a8-8ba8-3d9656522db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b9:aa:2b:2a:31:93:fc:6b:03:e5:63:de:97:
                    bf:81:f5:18:1e:5a:df:23:2d:46:20:ec:52:73:45:
                    9a:45:df:5a:b3:53:df:66:c9:af:d8:04:0b:72:2b:
                    4f:7d:dc:ac:34:ed:17:b3:21:4b:61:bc:de:06:6b:
                    c9:83:00:0e:cc:4c:86:99:41:76:ca:d6:9f:c5:e6:
                    de:33:7b:92:eb:52:25:cf:e2:f4:cf:c4:ae:96:f8:
                    da:40:26:e0:4d:50:e0:8c:11:33:1c:9f:58:1a:a6:
                    5f:9c:b7:8d:cc:03:bd:89:78:8d:25:7c:13:e5:81:
                    24:3d:e4:cb:4c:40:56:ef:e5:0f:e0:d7:01:99:70:
                    87:e1:9a:9d:4d:6d:29:1c:cd:c6:34:7e:bf:5f:b5:
                    d5:f2:ce:f0:38:cb:d4:77:8a:e2:5a:15:e1:3f:ae:
                    b5:9a:ef:20:87:77:85:f2:10:0a:a3:ad:b9:05:be:
                    bd:75:26:bf:7b:c0:36:af:bc:ea:69:f0:3b:2a:fe:
                    1f:a1:d3:ac:a8:e2:d3:fa:08:54:01:05:a8:39:82:
                    48:b4:ff:21:c1:83:2e:80:3e:76:34:1e:fb:ab:cb:
                    02:9b:fb:d1:2e:fc:55:bd:5a:9e:35:25:8b:0a:26:
                    dc:e0:5d:21:9a:0c:66:cc:e1:92:5c:bb:06:76:8c:
                    5d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:99:5B:85:34:32:32:B7:57:6B:27:FC:AA:44:5E:65:27:52:09:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/245af5f8-1aa4-3c9b-ab6d-ac0cbaba8268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:12:06:66:eb:97:ae:a0:13:1b:85:f1:e7:96:0e:25:f4:89:
         ef:82:5b:e0:ce:a0:2c:72:2b:f7:67:a5:1c:fa:58:7e:93:44:
         e3:e4:15:8f:aa:bf:b4:cf:8e:9d:73:19:98:1f:dd:f5:d3:c4:
         a6:fe:eb:f3:f8:b8:eb:c6:da:0c:6e:af:cb:4f:38:27:8b:02:
         65:5f:61:d0:46:5e:75:04:84:aa:53:b2:9f:f5:dd:92:fb:74:
         3f:62:43:82:e1:31:0c:3a:6f:8a:73:ff:5d:cd:f6:74:d8:a1:
         78:34:60:a5:b3:11:36:ec:64:fb:80:89:47:77:d6:a7:ac:ff:
         ac:2c:45:40:f2:6f:33:21:ed:4f:bf:0e:bf:9a:79:a1:1d:ca:
         e4:2e:2b:4f:7f:b6:a2:2e:a3:f4:1b:34:34:53:c8:15:8a:64:
         c6:b8:b0:37:bc:07:24:c7:29:39:75:37:dc:3a:88:bd:87:8c:
         a6:da:b3:79:3b:0c:be:38:b4:e5:6e:87:1d:22:c6:45:a2:b2:
         ee:09:27:d5:e3:89:97:d2:09:d0:a3:f1:aa:be:ce:01:18:63:
         4b:59:a5:c1:26:d0:25:d6:d3:2f:72:ab:70:3b:20:a1:e3:f5:
         71:01:7c:83:97:81:c8:40:9b:9a:1e:7d:80:28:d8:90:30:37:
         7a:c7:da:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:16:41 2026 by rpki-client