Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/27ab5c59-a003-3993-81c9-6f1f08be60ae.roa
File:                     27ab5c59-a003-3993-81c9-6f1f08be60ae.roa (raw, json)
Hash identifier:          pgWlAj/ouZF4hjzXlR50Yq7MmcU83ylu1gVbzeHwfUs=
Subject key identifier:   BD:2D:CB:CF:BA:C9:53:8D:06:88:47:4A:58:5C:90:B4:49:60:24:02
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EA799EA3DB2C22A039FB88580
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/27ab5c59-a003-3993-81c9-6f1f08be60ae.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     398781
IP address blocks:        172.120.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:ea:3d:b2:c2:2a:03:9f:b8:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=cff25ebd-fc9b-43d0-bc04-2a89bd9e5f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0e:ad:42:23:b5:fe:48:a3:ed:e3:91:80:e8:
                    0b:d3:b3:d1:aa:ca:a8:98:02:ad:f7:80:1c:27:8b:
                    e0:7e:00:5b:37:0d:f1:d0:0f:d8:71:76:c7:f8:52:
                    99:5b:d5:34:a9:14:ef:bf:2a:1b:08:92:8d:75:72:
                    71:2e:25:33:ba:20:c7:04:56:0a:32:9b:bb:6d:be:
                    04:04:4f:97:f3:8e:f1:75:9f:59:5a:2f:2b:d2:b3:
                    08:a5:8e:1d:10:5f:9c:67:30:dc:b7:1e:72:65:6b:
                    1b:3c:1f:cf:71:89:01:3b:79:c7:14:0c:5c:0c:53:
                    53:a0:25:34:f2:f1:0e:68:4b:5d:41:31:8b:5f:52:
                    00:91:b1:42:f7:52:18:25:8b:c0:c0:cb:54:47:1d:
                    eb:dc:0f:f9:1f:09:ed:e4:68:65:29:23:0e:8c:d7:
                    6a:11:3f:e4:ab:7f:26:0b:29:40:c1:c7:fc:27:15:
                    9e:2d:0c:0d:a9:d2:90:77:79:c7:da:4c:72:a5:57:
                    68:c7:c5:85:a0:50:69:73:c0:62:8e:fd:c5:11:ce:
                    06:c6:97:a8:fd:15:a5:7f:77:4c:44:bb:4f:1b:ae:
                    c2:0e:85:ee:7f:99:14:61:59:3a:ac:8a:dd:9d:06:
                    b7:0c:61:66:4f:48:a1:a6:07:5a:06:17:61:31:1a:
                    52:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2D:CB:CF:BA:C9:53:8D:06:88:47:4A:58:5C:90:B4:49:60:24:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/27ab5c59-a003-3993-81c9-6f1f08be60ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:15:2b:84:80:34:f0:2a:35:09:da:74:73:3a:75:9a:0c:60:
         e9:bc:a4:4a:71:20:56:6a:f8:fe:74:3f:7f:f4:87:21:8a:11:
         13:03:47:cc:2e:24:f9:86:ef:98:8b:72:75:dd:d7:ae:99:3f:
         1d:9c:f5:7a:30:a2:1b:f2:ca:01:14:84:5b:09:6a:28:48:57:
         50:d5:c0:aa:9b:2d:b3:33:35:7b:a7:01:96:d0:21:fa:7c:ab:
         15:86:c4:a7:e6:e8:8e:29:5e:ba:22:e8:63:9f:74:ae:99:f6:
         43:56:d9:45:80:d0:2d:e8:46:1a:53:f3:ee:95:f7:91:78:a6:
         c5:0b:dc:b2:97:00:45:2b:12:85:be:87:70:3b:23:a0:48:fa:
         5e:fb:2a:b8:25:98:e4:90:84:94:93:72:1d:3e:db:68:02:ec:
         68:8f:0a:64:d7:ee:b8:cf:24:6d:58:f4:f5:5c:ec:d3:0d:e4:
         ea:63:56:10:77:9b:8e:40:f0:fa:b6:a6:c4:6f:71:0f:5d:8d:
         65:24:cd:d6:b7:86:7a:62:d3:b0:a3:43:3f:f2:18:53:f3:f2:
         7d:03:d0:30:a4:04:2a:3e:ab:a7:bd:46:79:0a:db:2b:43:22:
         4e:aa:fa:f3:51:1c:0c:12:ca:81:44:c8:9d:48:c6:b5:08:b4:
         96:c4:db:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:18:52 2026 by rpki-client