Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/68e735aa-93c8-3acd-9009-8d92be4264fb.roa
File:                     68e735aa-93c8-3acd-9009-8d92be4264fb.roa (raw, json)
Hash identifier:          vyF/dA5wTXwQstuEqX8H4axG4od9UbOM4aBPxBKrgHQ=
Subject key identifier:   77:9F:E4:0C:5C:8E:B9:57:11:EC:D7:35:22:D1:71:68:43:F2:F7:27
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584E17472E45A21B9D5A43A87700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/68e735aa-93c8-3acd-9009-8d92be4264fb.roa
Signing time:             Sun 07 Jun 2026 08:55:31 +0000
ROA not before:           Sun 07 Jun 2026 08:55:31 +0000
ROA not after:            Sat 05 Sep 2026 08:55:31 +0000
asID:                     62240
IP address blocks:        172.120.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:17:47:2e:45:a2:1b:9d:5a:43:a8:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun  7 08:55:31 2026 GMT
            Not After : Sep  5 08:55:31 2026 GMT
        Subject: CN=e0c8044f-b75b-4eed-976a-416dca841aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1b:13:96:a5:22:34:e1:81:db:01:d0:a4:e6:
                    f9:d6:ff:2a:b4:2e:a6:ac:d9:a5:76:63:bb:98:31:
                    70:e6:fb:31:2e:c4:35:dd:28:85:c6:25:08:25:85:
                    72:8b:3a:3a:00:0e:fd:0a:dc:8e:a4:0b:d8:83:26:
                    64:3c:50:68:98:47:e3:9d:0e:58:1d:4f:cd:98:98:
                    5d:33:aa:38:fe:83:3d:3b:c3:c0:37:d2:7a:bc:51:
                    39:21:48:7b:6e:c7:91:31:04:3f:85:22:c9:16:b3:
                    e5:0e:0a:07:dc:4c:ca:0f:53:32:52:50:83:79:f2:
                    d9:33:d6:93:af:bc:79:c7:da:50:31:b0:64:39:46:
                    9a:f3:2e:cc:18:89:71:ac:91:15:8f:fa:7c:d5:52:
                    f1:74:b2:d5:e0:99:5e:5c:23:6b:6b:28:2d:02:f6:
                    2b:08:55:71:ef:80:df:fb:5f:01:b2:bc:bb:19:52:
                    5a:52:f4:88:9b:55:9e:c5:bb:55:70:36:47:69:30:
                    ce:be:e9:90:ee:33:b2:80:a7:69:2b:3f:ba:c6:ac:
                    6c:e0:e2:11:f5:ee:0a:66:5a:d9:d1:15:92:db:4d:
                    fa:3d:ec:94:37:20:81:36:ab:3b:c1:1d:87:39:0b:
                    4d:47:7f:74:21:c1:75:c1:06:47:ed:7a:9f:ae:ed:
                    26:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9F:E4:0C:5C:8E:B9:57:11:EC:D7:35:22:D1:71:68:43:F2:F7:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/68e735aa-93c8-3acd-9009-8d92be4264fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:cf:4d:70:ea:da:87:08:a9:c5:cb:cc:c3:1e:4d:47:96:af:
         69:41:04:6b:ee:56:64:c8:dc:d9:50:fe:3a:bc:e3:94:5d:15:
         24:f7:4c:1e:e0:d7:29:22:f6:89:80:1b:9e:36:dd:63:6e:73:
         4b:c3:03:cf:0e:1c:eb:60:54:56:ac:00:35:4a:98:86:78:75:
         4f:e8:8e:5a:83:00:6d:1c:7c:f5:13:b8:de:45:21:47:4e:6d:
         e3:48:5e:ed:4a:e8:b2:9b:c3:28:60:5f:e3:d0:8d:5a:f0:79:
         7b:7f:f8:0f:8b:24:18:55:4b:c7:6a:d5:1c:35:2f:1f:ef:33:
         52:7c:e7:ef:ce:46:e6:51:31:ed:39:8a:b7:71:5a:71:21:36:
         89:71:33:d6:eb:e9:82:ad:bf:98:10:36:c1:78:02:bf:97:9a:
         71:f3:ba:01:ee:6f:d0:f1:00:11:06:ad:7e:6c:4d:a0:05:33:
         b6:3b:b4:6c:24:63:f9:1a:8e:5d:fe:ef:b5:20:4b:97:9a:f5:
         54:1e:9c:38:2f:31:fe:87:a3:5b:f3:95:24:02:6c:89:e8:37:
         82:5a:65:fb:d5:ae:df:dc:9b:45:1b:e9:f1:20:94:6d:a1:7a:
         af:a1:78:2d:f7:7f:49:ec:ec:0f:fd:3c:2d:62:b7:2e:06:90:
         56:96:9b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:42:14 2026 by rpki-client