Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c4c5115f-9f6d-3366-8f7a-245b88ae5c6e.roa
File:                     c4c5115f-9f6d-3366-8f7a-245b88ae5c6e.roa (raw, json)
Hash identifier:          xr1DGPaQgOdqhLOFWU8foy+ToIBdGXKG6WwCKtaJASA=
Subject key identifier:   BF:8A:EF:4F:0C:E3:F8:77:07:6A:A7:36:7F:EA:9C:FC:AB:A5:A0:E3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A94D0ECB11A8573CBFDF418C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c4c5115f-9f6d-3366-8f7a-245b88ae5c6e.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     212238
IP address blocks:        172.120.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:ec:b1:1a:85:73:cb:fd:f4:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=e073b363-c741-4766-828b-2d2811cebf74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:20:9b:71:68:d0:b3:42:9b:5c:df:64:29:25:
                    f1:73:5d:13:4b:8a:f6:68:c3:b1:3f:d8:ea:76:40:
                    ee:9f:c4:d2:fc:8a:c1:3c:93:98:92:e3:41:39:6f:
                    33:a5:ac:71:d5:f1:e0:09:ff:36:64:07:88:3c:9c:
                    a3:f3:dc:ea:9b:20:5c:77:ee:05:f1:b6:e2:d1:73:
                    bb:e4:2f:f9:2b:33:b6:ef:4f:49:f2:34:77:8f:5c:
                    1c:fa:0d:4b:eb:a1:f9:aa:b1:53:7a:7a:89:c3:d8:
                    27:37:b6:26:8e:dd:9c:45:08:a5:19:9f:3a:2b:74:
                    0e:19:57:47:38:7a:32:44:82:6c:49:3c:f6:0f:44:
                    d3:91:95:ea:3f:ea:a0:35:fb:87:59:7f:fb:68:1e:
                    b1:bd:05:e8:99:c6:04:e7:e0:8b:d7:06:73:29:49:
                    8f:7d:53:49:8b:6b:d2:93:80:8b:9a:04:a5:cb:ca:
                    e4:34:85:70:90:6e:21:6d:a3:f9:dd:ae:82:58:47:
                    b5:0c:aa:ec:c0:2f:e2:30:a0:99:cd:8c:89:fa:fb:
                    0b:f8:46:1a:5d:1d:28:19:04:ca:13:3f:3b:8f:39:
                    fb:85:9b:ee:92:50:2a:f5:21:5b:a1:af:3b:7a:66:
                    d8:cb:37:6a:bd:3f:c5:70:dc:11:e1:ef:89:70:05:
                    f9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8A:EF:4F:0C:E3:F8:77:07:6A:A7:36:7F:EA:9C:FC:AB:A5:A0:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c4c5115f-9f6d-3366-8f7a-245b88ae5c6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:f7:23:50:e7:98:db:41:40:47:ba:5b:b2:1c:6d:a6:d3:5f:
         c4:ea:4b:67:9b:73:99:2f:be:ef:0a:1e:5e:5c:31:59:7d:39:
         46:2e:de:e3:67:3d:a8:af:c2:8b:f6:03:de:a1:18:1d:7b:46:
         db:73:89:b3:77:4e:e2:28:1d:b3:9f:69:e5:38:29:79:e1:78:
         cf:02:9d:5c:76:a2:2b:2c:f0:10:4d:cb:fd:92:b7:fd:74:a5:
         61:d2:ad:b1:c2:f8:f7:e2:cd:3d:cc:1b:2a:40:1d:ff:55:4a:
         06:73:57:c9:1d:ed:fa:22:4e:bd:b6:a7:11:d5:c0:36:e2:61:
         2d:7f:ec:bd:31:60:46:69:fb:a3:28:23:a9:38:8d:ac:00:67:
         7d:d0:04:70:05:37:4d:1d:bd:0a:f0:0e:84:4b:1a:d9:f0:bf:
         1a:d3:1f:59:98:ee:13:b4:b3:5e:2e:5a:6c:86:65:a3:e0:5a:
         51:3a:cb:6e:8a:c2:aa:20:dc:31:f2:cb:57:82:86:de:52:f2:
         6e:26:78:66:11:6a:b4:cc:22:c5:07:0f:8d:a0:06:19:f5:04:
         a0:fb:ec:ae:79:43:36:60:24:a7:0e:92:71:c8:14:f3:01:8f:
         cf:ad:e5:28:55:89:73:d9:64:4f:aa:75:da:42:6b:a5:10:0e:
         ee:66:06:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:21:35 2025 by rpki-client