Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c670d66c-7449-3dff-acb0-0de810ab1e90.roa
File:                     c670d66c-7449-3dff-acb0-0de810ab1e90.roa (raw, json)
Hash identifier:          51Xi6OXtZ8LWVu37YwP+/cTtgSifrFGRuLcb78eN8b8=
Subject key identifier:   50:24:13:31:C9:7C:EA:C5:71:51:AA:91:47:22:77:A3:2C:7B:D1:4E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EA799D6FE897DB23E4CCA7F00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c670d66c-7449-3dff-acb0-0de810ab1e90.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     398781
IP address blocks:        172.120.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:d6:fe:89:7d:b2:3e:4c:ca:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c17f09d6-128a-4aae-af1c-dac07a7038c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8e:73:7a:ad:c3:1c:1f:02:f2:fe:4e:35:b5:
                    c2:6c:85:18:7c:71:3a:7a:bd:43:65:e3:81:85:cb:
                    d2:51:69:3a:83:1f:fe:b9:d2:2c:eb:8c:32:a0:20:
                    38:61:a9:59:e0:58:db:51:c6:49:50:ae:25:c0:4a:
                    7e:f3:52:84:6b:c9:aa:74:f6:b8:cf:d4:42:52:7b:
                    1a:e6:1a:24:c6:ff:73:78:b8:e5:f4:ab:62:f4:09:
                    9c:65:02:1f:7d:91:23:4a:27:80:b2:95:1a:ec:4d:
                    9b:f3:17:de:ce:92:a9:4c:0c:26:39:96:b8:a3:ee:
                    c0:33:a6:1f:34:15:f3:ff:74:b6:5b:4b:97:0f:7c:
                    92:7a:00:ab:5c:58:ca:1e:53:5f:11:e0:13:a7:85:
                    21:f8:2f:5f:c6:ab:61:0e:98:20:5c:3f:2a:59:8c:
                    a7:f5:d9:35:53:55:1b:d9:65:dc:b0:25:e7:fa:9d:
                    65:29:f4:4c:39:5c:42:0b:b9:2a:ef:4e:3a:e8:d0:
                    33:2a:44:f8:c2:db:ff:fd:b6:a4:61:d2:72:27:f1:
                    dd:68:84:77:3c:3d:65:51:7d:80:e9:4d:0a:73:d3:
                    66:9c:07:4a:e8:d2:46:8a:fb:b4:91:ee:19:d4:3b:
                    2d:8b:cf:45:c4:3a:3e:aa:bf:6e:18:25:da:cf:da:
                    94:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:24:13:31:C9:7C:EA:C5:71:51:AA:91:47:22:77:A3:2C:7B:D1:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c670d66c-7449-3dff-acb0-0de810ab1e90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:5a:2d:b7:74:d1:4f:15:2a:a8:c9:c5:21:5d:b2:76:30:d9:
         4e:a0:8f:f8:27:90:23:0b:90:8c:ff:78:93:52:0b:d7:05:e6:
         f6:73:75:c2:4d:3a:d1:33:4a:60:c8:cf:f2:60:78:b7:42:5a:
         14:d1:31:e3:95:ae:2b:6c:5d:a0:d1:69:84:0d:ad:f6:63:01:
         ac:5c:e3:df:bf:f1:54:89:82:8b:1f:73:7d:dc:c8:e7:cb:01:
         01:7c:17:dc:e8:7e:99:10:35:bb:40:30:9a:e1:35:df:27:17:
         2a:18:9a:2c:3e:73:68:50:29:6b:92:14:63:6a:88:18:c5:1a:
         d3:a7:c8:2c:21:bd:20:22:c0:a4:bc:65:b4:1c:29:4c:d1:7a:
         de:87:00:53:99:87:78:f5:c6:8d:8a:de:cb:5d:a9:c9:a9:e4:
         da:81:b9:74:60:05:6c:94:f0:bd:94:8b:4f:f3:5e:e1:45:60:
         5d:a5:d0:d4:a8:11:69:c9:fa:fd:2f:24:8a:28:37:3f:55:7d:
         f3:91:33:91:3e:1b:34:d4:9d:49:53:d3:86:3e:cf:cd:6b:69:
         15:63:3d:24:41:6b:24:75:52:12:62:d3:05:8b:ea:d1:8e:d8:
         d6:b1:fd:13:e5:39:b6:41:2f:de:e8:7a:6d:88:63:66:ef:c9:
         cd:2b:07:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmdb+iX2yPkzKfwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YzE3ZjA5ZDYtMTI4YS00YWFlLWFmMWMtZGFjMDdhNzAzOGM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgo5zeq3DHB8C8v5ONbXCbIUYfHE6er1DZeOB
hcvSUWk6gx/+udIs64wyoCA4YalZ4FjbUcZJUK4lwEp+81KEa8mqdPa4z9RCUnsa
5hokxv9zeLjl9Kti9AmcZQIffZEjSieAspUa7E2b8xfezpKpTAwmOZa4o+7AM6Yf
NBXz/3S2W0uXD3ySegCrXFjKHlNfEeATp4Uh+C9fxqthDpggXD8qWYyn9dk1U1Ub
2WXcsCXn+p1lKfRMOVxCC7kq70466NAzKkT4wtv//bakYdJyJ/HdaIR3PD1lUX2A
6U0Kc9NmnAdK6NJGivu0ke4Z1Dsti89FxDo+qr9uGCXaz9qU4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFAkEzHJfOrFcVGqkUcid6Mse9FOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYzY3MGQ2NmMtNzQ0OS0z
ZGZmLWFjYjAtMGRlODEwYWIxZTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHiDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJNaLbd00U8VKqjJxSFdsnYw2U6gj/gnkCMLkIz/eJNSC9cF5vZzdcJN
OtEzSmDIz/JgeLdCWhTRMeOVritsXaDRaYQNrfZjAaxc49+/8VSJgosfc33cyOfL
AQF8F9zofpkQNbtAMJrhNd8nFyoYmiw+c2hQKWuSFGNqiBjFGtOnyCwhvSAiwKS8
ZbQcKUzRet6HAFOZh3j1xo2K3stdqcmp5NqBuXRgBWyU8L2Ui0/zXuFFYF2l0NSo
EWnJ+v0vJIooNz9VffORM5E+GzTUnUlT04Y+z81raRVjPSRBayR1UhJi0wWL6tGO
2Nax/RPlObZBL97oem2IY2bvyc0rB3Q=
-----END CERTIFICATE-----
Generated at Wed Jul 29 18:17:44 2026 by rpki-client