Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9ef8105d-753d-3b58-b206-26de38b477ea.roa
File:                     9ef8105d-753d-3b58-b206-26de38b477ea.roa (raw, json)
Hash identifier:          ixZTffG6IliItT0n0Bmo7lPKsunF0yOvTYdr88vQuBI=
Subject key identifier:   69:4E:6B:D5:D9:16:63:BA:47:71:C5:ED:1D:EA:3F:F4:AA:A4:CC:37
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A7E7B7DE9AC95B76D9AECF500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9ef8105d-753d-3b58-b206-26de38b477ea.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     3257
IP address blocks:        172.121.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:7d:e9:ac:95:b7:6d:9a:ec:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=b4d91c5b-644b-4ebb-8b27-dcad61a81379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7e:86:66:2e:21:74:05:c0:d5:12:fb:a4:de:
                    db:eb:ad:2f:01:a8:ad:f1:55:f1:2d:b5:78:b4:24:
                    a5:3f:9f:79:8b:6e:aa:2b:02:98:6d:80:32:d5:c4:
                    f0:e1:58:6c:9b:2a:b3:8d:1f:42:68:42:7b:8d:14:
                    79:31:3d:d4:1f:55:4b:44:89:b6:1c:32:ae:b3:9a:
                    fe:1d:82:bd:26:a5:e5:6f:dd:b3:01:a6:0a:a1:fa:
                    68:55:2c:ed:d5:3d:80:49:f2:db:01:03:0c:87:ab:
                    15:7d:8b:8b:ef:d0:fe:78:7c:67:24:42:14:de:64:
                    84:52:cd:21:a7:c2:4f:07:31:8a:d8:df:bf:65:43:
                    be:c6:90:73:fc:3d:a9:b0:ee:32:28:0c:36:f0:b1:
                    9c:96:bf:ca:af:04:42:2d:b4:4b:41:b4:e7:52:3f:
                    d3:03:80:35:3d:15:ca:3b:1d:3f:f8:0e:bf:db:76:
                    ba:a8:a9:a1:a0:b3:a9:2f:19:2b:1a:25:7f:4f:3c:
                    6c:9b:d5:b4:fe:e2:06:12:0c:fa:e5:b7:ac:db:f8:
                    a8:da:58:b2:cc:1a:fe:87:5c:c5:9a:fd:6d:9e:e9:
                    34:0c:7a:47:35:83:62:07:c2:3d:dd:de:30:4e:9c:
                    26:84:85:b3:1c:a7:3a:dc:18:f4:46:35:54:10:ec:
                    15:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4E:6B:D5:D9:16:63:BA:47:71:C5:ED:1D:EA:3F:F4:AA:A4:CC:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9ef8105d-753d-3b58-b206-26de38b477ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:92:14:33:26:7d:11:2c:ab:f6:39:d3:41:c8:dc:ad:43:1f:
         ad:28:8c:fe:77:93:2b:fc:74:48:9c:96:4a:be:d8:86:8b:3a:
         8e:c3:9e:eb:5c:37:bf:c4:2c:b8:26:6e:19:f9:6d:3d:ea:43:
         ff:4f:9f:d2:fa:6d:20:f1:60:92:ad:6c:e3:3e:6d:e7:9a:3c:
         99:22:bb:30:94:d8:53:b4:1f:56:b4:26:35:bc:0e:dd:1a:37:
         cf:bf:45:53:68:04:24:56:4c:7a:3d:7c:c0:2a:36:cf:7d:d9:
         4f:15:a0:67:f1:83:60:2f:46:c1:81:9c:56:9c:0b:bb:fc:fa:
         54:4e:a9:29:e2:43:e7:58:16:57:ba:87:02:7f:30:ab:18:b5:
         1a:f0:1b:88:2b:2f:44:f3:3b:15:9e:ae:cc:fd:81:f2:f3:1d:
         c7:f3:c6:92:1c:ed:06:0e:54:b8:a4:0a:da:2f:96:38:fa:2f:
         2e:57:99:3d:ca:5b:59:7a:75:f8:13:19:20:04:d7:e3:6e:59:
         05:1b:d6:5e:0c:4f:0b:c4:b8:4a:33:b7:b2:5b:34:1f:d1:4d:
         ba:2c:f4:c7:03:30:ea:cc:92:aa:25:a0:03:fa:c0:67:98:d9:
         57:eb:b4:55:a6:4b:93:e2:93:43:45:9d:f6:83:b8:fd:38:12:
         6c:22:92:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:17:43 2025 by rpki-client