Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3d1f30f3-7714-3fc8-9b10-2ba6b981f1ca.roa
File:                     3d1f30f3-7714-3fc8-9b10-2ba6b981f1ca.roa (raw, json)
Hash identifier:          f1JqyC3IXShM5ApqnRC0yPD7pRzPel/bATWOd5v+uGQ=
Subject key identifier:   CB:BE:4D:88:B5:5A:99:44:9D:6A:66:CB:60:55:D7:5D:CF:05:B0:3C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EA799D376D7C1F4C5F8B87AC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3d1f30f3-7714-3fc8-9b10-2ba6b981f1ca.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     398781
IP address blocks:        172.120.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:d3:76:d7:c1:f4:c5:f8:b8:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8ee58fba-97ea-47ff-b53d-2afac4e4717e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:af:41:3d:d9:79:cc:bb:bd:c6:16:74:67:10:
                    cc:11:37:ec:86:f4:00:5d:b0:36:29:5c:65:3b:b7:
                    46:fe:9d:58:33:dd:a0:d6:48:9e:5c:69:39:d8:ef:
                    ac:22:30:36:6e:6b:73:bc:58:9b:36:2e:14:f8:6d:
                    2a:62:53:f5:0f:90:8f:6f:2b:68:7e:d2:24:cc:5b:
                    94:da:30:9b:15:95:3e:f4:1d:a1:7b:0a:d6:e5:5b:
                    f7:37:54:dd:e6:4a:15:42:ad:ea:f0:b5:f5:63:7a:
                    22:39:a5:c3:e3:f3:27:d3:04:a6:c9:e7:31:f4:c9:
                    1e:8e:ea:4a:ad:ef:42:2a:c1:49:48:ff:0a:c9:56:
                    6d:e0:57:72:28:24:cd:8a:31:10:ee:17:94:ab:c1:
                    94:46:9a:8c:34:12:57:50:af:eb:a8:91:ef:00:e8:
                    47:25:6f:ff:4e:b7:1c:b0:70:82:19:2d:94:ff:da:
                    a4:fa:d9:78:89:4a:f0:f7:c6:d1:75:4a:9e:6a:4e:
                    9a:8f:c2:03:51:00:fa:08:62:21:31:d7:63:d0:06:
                    ec:4a:ad:dc:d2:b4:93:ed:f4:84:47:25:4b:20:d8:
                    bf:1e:bc:06:bc:3a:cd:13:98:1a:06:de:6b:71:08:
                    82:11:07:80:84:54:54:20:6f:c6:53:cd:a6:91:ca:
                    e7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BE:4D:88:B5:5A:99:44:9D:6A:66:CB:60:55:D7:5D:CF:05:B0:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3d1f30f3-7714-3fc8-9b10-2ba6b981f1ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:fc:fd:90:dc:25:5e:92:25:29:20:06:1f:01:7d:5a:60:9f:
         50:8c:bc:56:87:1b:74:a5:47:2a:4b:89:bb:b9:d8:6f:bc:b5:
         35:c5:32:c7:63:66:c0:74:f4:fd:f7:47:df:89:6f:21:3e:79:
         f5:ac:dd:ef:3a:17:6a:b9:16:86:83:0f:4e:f6:ff:4c:29:cf:
         8b:8c:2b:1f:d0:ff:44:6e:9c:86:7f:40:3d:48:c5:49:b3:8d:
         65:1e:38:4f:f7:1d:76:d7:ad:81:3d:25:49:38:6c:86:bf:9b:
         59:a1:c1:1b:cd:c9:45:ee:9e:0a:7b:59:78:36:d0:84:da:b7:
         56:36:f3:4f:d4:f3:5f:86:69:10:65:40:52:57:16:07:54:8d:
         9f:54:e7:f3:96:be:5f:45:59:06:fe:8f:7a:0d:36:e6:24:eb:
         dd:8e:72:86:93:0b:51:10:c9:dc:2b:1f:1d:0c:ea:6f:be:58:
         f8:2c:23:09:0f:ad:81:5d:38:fa:f5:8d:d5:0f:7d:bf:a9:e3:
         ae:70:a4:91:e5:e4:79:36:eb:f4:e8:20:c4:03:18:b7:e2:f4:
         ab:27:7c:4f:1a:40:d1:f3:6e:8b:2c:87:ff:a8:68:1f:e1:d4:
         b7:75:ef:fa:91:ec:3f:b5:38:42:65:4c:5d:16:fa:98:30:fb:
         55:3e:4a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:15:11 2026 by rpki-client