Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7de9e23a-7a10-3317-8d07-6a1f97f79ceb.roa
File:                     7de9e23a-7a10-3317-8d07-6a1f97f79ceb.roa (raw, json)
Hash identifier:          5wrSl6rnwCeW3D+pGC20Y+YPET42C+5K4YD92/mq1LA=
Subject key identifier:   A1:AE:C5:17:17:0F:C6:0F:B5:BC:FF:25:AA:9A:AD:6C:E0:7A:A2:3B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EA7923E0CC3A950BF4AB34A4C
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7de9e23a-7a10-3317-8d07-6a1f97f79ceb.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     9009
IP address blocks:        172.121.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:3e:0c:c3:a9:50:bf:4a:b3:4a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e5c0a6b4-8766-400b-8692-50dc112684d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f3:ce:15:c8:54:b2:9b:ac:c3:e9:8b:20:98:
                    b6:09:e8:20:54:16:9b:e1:de:67:b9:af:d2:a9:54:
                    b9:67:a0:72:8e:85:d5:08:e5:37:2f:4f:8b:38:84:
                    19:a6:89:05:91:12:0c:c1:f5:97:be:5f:9e:d4:a3:
                    ba:41:af:3e:f7:a9:74:30:83:a3:30:7e:fc:b9:e8:
                    bc:16:0d:bd:a3:02:1a:73:0d:77:43:57:3b:8b:fa:
                    8f:05:f7:e8:3c:e1:8e:18:8b:d8:bf:44:f8:14:5c:
                    d0:97:bb:a2:a5:b4:fc:a2:e0:38:b4:40:0d:cf:46:
                    58:ec:04:ab:e4:45:fb:0c:20:32:ff:4b:a6:22:09:
                    af:02:0f:bb:bb:3d:1a:6f:84:ec:2f:64:f0:de:14:
                    d8:1e:8e:d7:0c:ce:f8:2c:2d:af:d9:a5:5c:4e:05:
                    03:e4:e8:72:fa:ab:60:1d:73:72:84:38:f9:1c:33:
                    9c:04:69:54:ec:1b:81:c0:cb:58:14:8a:2c:8e:db:
                    c8:35:94:17:52:15:f9:4e:42:ba:27:74:93:cd:e9:
                    f2:8c:d3:43:b9:58:e2:22:8c:20:ce:f0:7e:a4:d7:
                    3e:f6:68:ec:cd:50:a3:47:da:b5:5e:ca:12:50:ba:
                    ef:39:27:e9:46:f6:e2:04:72:a0:80:20:b3:ad:f3:
                    f7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AE:C5:17:17:0F:C6:0F:B5:BC:FF:25:AA:9A:AD:6C:E0:7A:A2:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7de9e23a-7a10-3317-8d07-6a1f97f79ceb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:47:c5:6e:bf:9b:cd:87:6c:c1:41:46:79:e7:31:59:fc:c8:
         a6:bf:e6:31:4e:b3:0f:48:a3:83:47:1c:f5:d4:5e:53:ec:57:
         8e:19:9c:fd:00:aa:01:65:f8:c5:a9:1e:8e:72:57:18:be:d5:
         e0:3c:6b:ae:7e:4d:72:a4:31:68:8c:e7:07:32:cb:6f:f6:e5:
         34:26:3c:f6:7b:be:f9:18:fb:a7:be:ea:3e:be:64:db:c3:08:
         2f:25:03:1a:0c:5b:3c:51:12:79:42:d6:47:8a:06:4a:60:d6:
         81:68:e1:b4:c9:92:e4:d8:20:15:c0:04:1a:bd:e1:ae:45:e6:
         06:1c:30:c1:2a:d6:eb:f8:63:38:52:ec:11:c5:6c:fa:d5:b0:
         23:50:59:c1:ac:1f:f0:2f:de:97:b9:25:74:d8:ed:09:29:39:
         78:50:f0:9c:76:8c:4d:c7:80:ff:58:8b:72:a7:cc:5d:81:19:
         64:20:cc:97:62:49:12:e8:b5:bc:cf:33:bc:a0:5a:99:74:3a:
         1b:12:c2:d2:bc:4f:db:6d:14:0b:d1:83:3b:b9:54:8f:c9:1e:
         55:5a:b5:85:e9:80:e0:02:9c:f3:6e:0b:a0:53:c4:95:a1:54:
         0e:dd:95:a0:ba:c8:ee:81:46:01:95:8c:b2:79:95:08:f8:f2:
         5f:b3:2a:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkj4Mw6lQv0qzSkwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZTVjMGE2YjQtODc2Ni00MDBiLTg2OTItNTBkYzExMjY4NGQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/POFchUspusw+mLIJi2CeggVBab4d5nua/S
qVS5Z6ByjoXVCOU3L0+LOIQZpokFkRIMwfWXvl+e1KO6Qa8+96l0MIOjMH78uei8
Fg29owIacw13Q1c7i/qPBffoPOGOGIvYv0T4FFzQl7uipbT8ouA4tEANz0ZY7ASr
5EX7DCAy/0umIgmvAg+7uz0ab4TsL2Tw3hTYHo7XDM74LC2v2aVcTgUD5Ohy+qtg
HXNyhDj5HDOcBGlU7BuBwMtYFIosjtvINZQXUhX5TkK6J3STzenyjNNDuVjiIowg
zvB+pNc+9mjszVCjR9q1XsoSULrvOSfpRvbiBHKggCCzrfP33wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKGuxRcXD8YPtbz/JaqarWzgeqI7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvN2RlOWUyM2EtN2ExMC0z
MzE3LThkMDctNmExZjk3Zjc5Y2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHk8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGRHxW6/m82HbMFBRnnnMVn8yKa/5jFOsw9Io4NHHPXUXlPsV44ZnP0A
qgFl+MWpHo5yVxi+1eA8a65+TXKkMWiM5wcyy2/25TQmPPZ7vvkY+6e+6j6+ZNvD
CC8lAxoMWzxREnlC1keKBkpg1oFo4bTJkuTYIBXABBq94a5F5gYcMMEq1uv4YzhS
7BHFbPrVsCNQWcGsH/Av3pe5JXTY7QkpOXhQ8Jx2jE3HgP9Yi3KnzF2BGWQgzJdi
SRLotbzPM7ygWpl0OhsSwtK8T9ttFAvRgzu5VI/JHlVatYXpgOACnPNuC6BTxJWh
VA7dlaC6yO6BRgGVjLJ5lQj48l+zKkM=
-----END CERTIFICATE-----
Generated at Wed Jul 29 18:15:27 2026 by rpki-client