Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c6f8dd96-cfcf-3459-8aed-4a57242f9c93.roa
File:                     c6f8dd96-cfcf-3459-8aed-4a57242f9c93.roa (raw, json)
Hash identifier:          gYv0c5rMyCsF9GzQbyxNcASEwQJ8LxOfSgQRr3sTCd8=
Subject key identifier:   E5:4B:7A:94:91:AA:70:53:F3:E3:0C:98:ED:88:B6:CA:4F:57:8A:59
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A698B1CFE6365776D20F609E8
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c6f8dd96-cfcf-3459-8aed-4a57242f9c93.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     18779
IP address blocks:        172.120.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:1c:fe:63:65:77:6d:20:f6:09:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=46b5d97d-b938-4141-9bbf-0adb1d7d666b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:65:37:21:fb:2d:f1:00:76:83:ab:17:32:5e:
                    92:bd:79:de:5c:7e:06:ba:2a:93:a8:a9:5e:5a:68:
                    23:d4:75:e9:0a:d1:a9:a8:4b:ac:67:6b:23:8a:12:
                    23:ae:4e:b8:2a:6e:81:d0:1d:47:f0:3b:c1:2e:9c:
                    02:89:3d:f5:3a:3f:18:f4:1c:59:4f:f1:bf:07:9b:
                    18:58:23:41:e4:96:29:33:66:aa:e5:97:0a:26:c0:
                    49:6d:db:77:fd:54:8d:ce:7b:6e:ca:b9:bb:a8:4d:
                    80:66:e6:75:1a:43:c4:bd:b2:13:d6:80:23:58:e8:
                    38:fb:43:43:a7:2e:ce:90:2d:cc:12:08:5f:a7:e2:
                    73:b0:93:ff:96:73:a1:4e:d3:1e:94:a3:9f:44:3d:
                    ac:ba:7d:f0:81:25:54:e9:ff:05:18:e2:db:32:07:
                    78:c6:fd:33:c9:09:81:85:e7:85:65:ec:93:c2:2b:
                    2e:62:4c:87:e8:c3:dd:2e:de:84:97:90:5e:a1:23:
                    de:e7:9f:9f:92:f4:59:93:32:7b:c1:af:3c:8e:13:
                    0a:00:06:2f:6a:c9:ad:1f:7c:07:5d:3d:18:5e:a5:
                    a8:9a:a4:40:51:06:43:5e:e2:26:0a:f0:55:39:25:
                    af:ae:8e:19:8c:ec:a9:be:8a:13:d7:7d:80:d1:f5:
                    b3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4B:7A:94:91:AA:70:53:F3:E3:0C:98:ED:88:B6:CA:4F:57:8A:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c6f8dd96-cfcf-3459-8aed-4a57242f9c93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:e4:c8:8d:3c:33:d0:18:0a:32:9d:f0:eb:11:f0:78:4b:4b:
         46:6d:22:66:97:10:43:f7:7a:1f:9f:7d:c7:12:45:ca:9e:10:
         97:00:49:d6:97:31:d2:90:fb:2d:41:b7:dd:60:d5:fa:cb:f4:
         93:3f:0d:ec:bc:00:8b:0d:52:c8:2e:98:5f:5d:58:8c:c5:e7:
         e9:11:f2:e6:75:69:77:62:16:54:b8:54:75:99:e8:39:56:93:
         25:f4:c7:5d:3c:9b:7d:bd:89:33:44:19:78:9f:c0:ce:79:07:
         de:ec:ce:e5:84:e9:14:bf:f3:c7:39:14:d5:20:d7:ff:ea:86:
         c6:a8:de:b2:fb:66:62:c0:02:fe:56:80:aa:ee:29:fe:e3:e4:
         32:8d:8f:3b:b3:73:73:83:be:85:e3:9a:ec:9a:0d:8f:db:aa:
         7b:a0:26:0a:1b:a6:19:8d:2e:d8:07:ed:6c:e8:3e:e8:ed:6d:
         4d:c6:e6:a0:30:d8:76:bc:56:8f:11:53:4e:db:e2:1e:fa:05:
         f5:a4:14:5e:f2:59:9b:91:f5:4d:60:86:63:6e:c4:77:91:a0:
         78:34:1a:75:e0:d6:af:96:56:43:e5:89:35:9e:3e:5b:5f:83:
         dd:a6:10:1d:34:3c:40:15:92:11:93:0b:45:7f:f2:c9:2d:a6:
         ba:bb:0d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:25:42 2025 by rpki-client