Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7d9e9ff0-bd62-3787-946d-5888b8ab89d5.roa
File:                     7d9e9ff0-bd62-3787-946d-5888b8ab89d5.roa (raw, json)
Hash identifier:          jfLlK/aLto+xJ/xl5ylkAqBZCGHU6FW1+gcAmHOg1OU=
Subject key identifier:   E4:48:AA:7A:59:0F:1C:E0:F3:D7:7A:DC:A5:6D:92:78:99:35:07:38
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D7A052705CFF5F181D9B81240
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7d9e9ff0-bd62-3787-946d-5888b8ab89d5.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     214238
IP address blocks:        172.121.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:27:05:cf:f5:f1:81:d9:b8:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=78411f52-bcaa-4302-b238-3ffd24cf8505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8a:2b:0d:66:c0:eb:aa:a4:be:27:91:fb:64:
                    0e:a8:1c:a8:c9:92:1c:8e:d7:70:14:ad:f8:c7:7f:
                    78:20:07:f6:a3:9a:e5:bc:67:48:26:02:85:2c:94:
                    69:52:a2:19:63:f2:31:51:66:8f:9f:fa:50:48:75:
                    10:67:7a:31:91:87:14:b3:fa:11:fb:a6:46:b9:de:
                    d7:5f:69:8e:70:fc:ee:a6:e3:20:f2:bd:c6:81:b3:
                    e5:89:83:91:55:3c:82:62:76:b7:9d:6e:97:3e:e3:
                    45:cc:d7:bd:fa:82:75:69:da:64:a3:f5:a5:ca:41:
                    05:2e:fa:b8:f6:1d:d2:2e:85:47:39:55:20:d5:a5:
                    9f:be:70:ea:0d:70:76:9e:19:59:cb:1b:1d:21:39:
                    8f:6e:a2:ef:89:af:f2:cc:c8:86:5a:69:94:2c:45:
                    52:b7:da:b4:4b:fd:76:f3:78:6d:56:4e:3e:5b:2d:
                    16:f9:ab:4e:3a:3c:0e:7f:03:cb:c9:95:cc:1a:aa:
                    50:62:dd:fb:b6:e7:4f:6e:ca:78:33:1a:36:bb:9c:
                    a0:05:3a:d1:0c:9e:8d:cf:fe:a9:a9:04:45:fd:b1:
                    35:56:05:8a:a8:b5:de:31:e7:b0:f1:2d:50:88:53:
                    98:e7:9f:d6:40:2d:6b:8d:ce:a9:e0:1a:8d:0c:e3:
                    17:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:48:AA:7A:59:0F:1C:E0:F3:D7:7A:DC:A5:6D:92:78:99:35:07:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7d9e9ff0-bd62-3787-946d-5888b8ab89d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:d1:e5:1d:f0:4b:8c:4d:32:84:c1:ff:1f:a5:d1:39:d7:4e:
         73:14:c3:64:1d:14:fd:95:06:be:8b:2c:e8:aa:5a:a4:0c:bc:
         c3:45:d4:b8:2a:7f:a7:65:a1:0d:ce:ad:24:33:55:54:13:0f:
         92:92:ae:1f:c3:39:61:50:42:17:40:00:12:66:9f:1a:b8:84:
         e6:40:ba:45:e9:3b:37:5f:6f:d5:ad:57:93:2c:a6:e8:43:aa:
         7b:f4:15:70:64:43:54:23:62:4c:ac:8d:92:a8:17:d2:10:41:
         18:bf:bb:c9:59:14:76:e1:9a:12:24:61:5b:e6:22:b7:a9:38:
         6f:7b:c6:75:c3:c7:9e:0a:5a:dd:9b:13:3f:e6:85:40:e4:16:
         04:98:0f:27:aa:1c:eb:0a:5e:32:1d:34:0c:d5:22:60:0d:44:
         5c:ff:06:f4:6c:8c:6a:43:e9:be:4c:9c:b6:f5:15:54:c9:5a:
         4c:24:7c:45:1f:f7:f7:05:e3:65:31:4b:4b:25:27:8b:45:3c:
         33:a5:a3:9b:56:ce:14:17:36:af:b4:6a:e8:bd:cf:45:f9:58:
         ff:74:b5:a9:da:ff:c1:8c:1a:9c:23:0b:d4:dc:53:5d:62:eb:
         6e:e7:57:ae:81:f3:15:81:d0:d7:ee:3b:f4:2c:74:71:4d:9b:
         fd:41:58:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:33:34 2026 by rpki-client