Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bcd24e00-5a0b-301d-adf8-a0ae5f32cc74.roa
File:                     bcd24e00-5a0b-301d-adf8-a0ae5f32cc74.roa (raw, json)
Hash identifier:          F8mQXiqy0rnbC69Yt5BUUiJpOdqbzVu6fvXKftGAAcM=
Subject key identifier:   50:9D:52:FA:16:F3:7C:DB:BC:30:75:6B:0E:C8:67:DF:B6:0B:F9:98
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D86957337E4FF092687162D00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bcd24e00-5a0b-301d-adf8-a0ae5f32cc74.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     12271
IP address blocks:        172.120.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:73:37:e4:ff:09:26:87:16:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=7ab5bc84-42be-47c2-8a77-aa2a052bd051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bc:b9:a1:50:79:3c:0c:4d:d2:c8:e8:cd:ee:
                    8b:8b:c5:2d:2d:cc:af:32:49:b6:40:f2:6f:9f:05:
                    c5:b3:dc:b9:06:0e:0d:bc:d1:a6:d1:4b:0a:f4:26:
                    ab:d7:96:05:66:47:c9:0b:e5:e4:be:87:e1:27:ec:
                    81:b5:9d:da:81:7c:8a:be:9a:5a:90:41:48:6f:ef:
                    81:d7:1b:77:6d:d1:d9:b4:a9:a2:94:6b:ed:ed:ac:
                    0c:8d:3d:f6:8a:c3:4b:ad:59:10:27:e8:d5:8a:10:
                    41:37:69:9f:04:05:e0:67:f6:a2:b0:01:a5:65:86:
                    08:59:6a:67:ce:ca:5d:ad:f7:62:b9:ed:5f:ca:47:
                    82:19:a9:96:26:a4:61:a3:43:18:e1:3d:51:da:bb:
                    be:27:2f:1c:75:93:3a:4a:06:81:ca:b7:09:11:e0:
                    52:b5:74:05:60:c8:94:3c:19:3c:5d:ec:47:6a:22:
                    57:76:a2:9f:e9:fd:83:22:cf:4e:a2:1f:c3:94:af:
                    d9:40:81:bb:41:83:fb:81:e4:59:a4:0b:a1:14:ac:
                    c1:4a:af:dd:75:7d:de:1d:01:b9:e1:07:50:82:56:
                    13:ac:0f:ad:1a:bc:a2:38:2d:3e:21:ef:7f:a9:a4:
                    7b:22:26:55:5e:64:55:ff:5d:20:83:ed:08:27:c7:
                    11:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9D:52:FA:16:F3:7C:DB:BC:30:75:6B:0E:C8:67:DF:B6:0B:F9:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bcd24e00-5a0b-301d-adf8-a0ae5f32cc74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:53:0c:79:6e:b2:ba:6e:0a:a5:18:d4:ab:c7:21:8c:9c:5a:
         5e:68:d6:f4:81:48:4d:2e:cd:30:da:e2:08:6c:8b:e8:4a:ca:
         18:7e:82:0d:38:0d:bb:55:f9:54:7f:62:a8:af:8f:58:33:e6:
         bc:b9:90:bb:cc:ee:29:08:39:61:bb:b4:b8:0d:50:a5:18:d4:
         64:9c:1e:ac:6c:d7:4c:18:ac:ed:6a:64:67:06:41:f7:53:c0:
         29:68:9a:a5:bb:e0:69:d8:34:41:7c:f4:7e:66:6e:a1:c1:bc:
         89:79:b2:9e:5d:99:da:b4:0e:68:33:c9:76:8e:5e:aa:ad:8d:
         5c:2d:76:ff:65:32:a1:59:f8:d3:5c:5b:4c:96:4b:b8:5b:39:
         08:09:e6:ad:d1:20:ad:a9:41:89:f7:e9:b6:28:e7:9b:89:df:
         ed:f9:74:76:c8:38:2d:3e:e6:6a:eb:c0:26:c9:c3:cd:43:4f:
         62:aa:6e:48:79:98:b6:fc:a3:0d:3e:14:09:0f:fd:17:7d:59:
         ee:e5:de:70:b9:2c:15:34:ba:14:8d:da:0c:90:c9:54:74:f9:
         5a:ed:78:f4:59:d4:da:ac:1b:c4:df:46:73:23:fb:98:e2:88:
         84:3b:5c:26:0e:22:a8:b4:34:f1:ce:d0:fd:99:7a:81:0f:5b:
         07:a3:e2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:27:17 2026 by rpki-client