Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d2fc2ee6-1e17-3810-a75f-d370e9889e3e.roa
File:                     d2fc2ee6-1e17-3810-a75f-d370e9889e3e.roa (raw, json)
Hash identifier:          QD4F+mA6CIcvtvdeC5ujK+IZBkrP7Z1wLeTBYvIrKpU=
Subject key identifier:   F4:2C:79:91:3D:60:5D:94:26:31:01:42:17:C3:4A:A5:54:60:03:E3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A8DC1ADCAD7E38A995321E160
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d2fc2ee6-1e17-3810-a75f-d370e9889e3e.roa
Signing time:             Fri 18 Jul 2025 00:19:59 +0000
ROA not before:           Fri 18 Jul 2025 00:19:59 +0000
ROA not after:            Thu 16 Oct 2025 00:19:59 +0000
asID:                     6939
IP address blocks:        172.121.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:c1:ad:ca:d7:e3:8a:99:53:21:e1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 18 00:19:59 2025 GMT
            Not After : Oct 16 00:19:59 2025 GMT
        Subject: CN=fbc3c528-c30d-4635-a403-f280c561ec39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:03:9d:a4:00:d8:1f:3d:24:1b:81:15:58:d0:
                    46:a3:40:c1:d0:27:70:10:d2:d2:92:fb:7f:ea:1b:
                    9d:a6:39:45:34:83:9f:c5:90:46:5c:fd:45:85:68:
                    e5:27:09:05:17:57:6d:5d:46:f8:c6:56:09:c8:88:
                    22:fb:bc:b5:53:22:32:55:b6:ee:10:83:0a:1c:8b:
                    18:00:d0:40:ff:ed:ad:95:84:73:6f:a7:9d:9c:05:
                    2e:d5:0b:4d:a9:c1:b6:3a:18:bb:30:be:9a:44:ce:
                    8f:51:02:b3:e2:f3:db:aa:67:6c:33:e6:27:62:2a:
                    ed:64:2c:df:1a:71:dc:cb:b5:68:f4:ef:59:1c:88:
                    b1:60:2c:62:f1:8d:9f:97:5d:69:07:7d:fb:33:23:
                    44:17:7f:8c:13:c8:69:e5:f9:b7:89:70:69:d7:be:
                    32:8f:57:4a:49:9b:c4:52:fe:f2:5e:6f:9a:0b:22:
                    da:06:12:d5:15:fd:45:66:a1:1b:fe:92:1b:cd:6a:
                    6c:e8:87:d7:66:65:1b:22:6b:fd:a8:6b:d9:47:47:
                    88:84:97:29:a3:71:8a:69:2f:88:f5:4d:af:37:58:
                    b8:1b:2a:12:82:fa:69:08:9a:fe:66:e5:a0:90:11:
                    07:28:1a:fc:a5:12:e2:26:bc:10:fb:e1:d4:d9:1f:
                    6c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2C:79:91:3D:60:5D:94:26:31:01:42:17:C3:4A:A5:54:60:03:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d2fc2ee6-1e17-3810-a75f-d370e9889e3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:24:b8:31:e5:7b:93:19:a6:cb:98:e4:a7:e8:4e:aa:14:be:
         80:58:97:bd:49:78:d8:7c:5b:d7:3d:25:8f:ca:1f:69:a3:8c:
         29:88:ce:44:bf:46:f5:9b:fa:34:35:a8:62:f4:99:db:22:33:
         15:8b:73:4e:d2:7c:72:e9:ce:86:63:bf:cb:b8:7e:65:22:d4:
         fd:1d:de:d4:41:a4:86:4c:54:55:5a:2b:a8:80:8d:d6:e5:40:
         eb:b7:2c:3a:12:fe:20:73:07:ee:5b:69:e1:e1:88:a7:52:cb:
         ce:bd:fb:c4:95:c9:5c:c7:5c:73:2e:27:c0:a0:80:c2:a6:a1:
         88:1f:3f:28:eb:e9:b1:f6:cd:40:b2:60:59:bc:9f:2c:27:4e:
         6c:ea:43:5d:86:4b:b7:5e:56:9a:91:0e:2f:2d:27:30:c9:89:
         0c:1d:5a:a4:9b:e0:55:d4:4c:a6:08:09:ee:e6:10:f3:d3:e3:
         f9:53:75:8b:f3:7d:f8:5e:49:c9:76:e6:21:29:5c:7b:fa:38:
         13:cf:69:d4:ba:75:f8:5d:ad:4f:71:dc:83:c3:b3:a7:43:52:
         dc:4e:f4:df:aa:f6:88:08:23:f8:ba:06:0d:4a:1e:7c:06:84:
         40:e1:ef:61:80:03:b9:b9:b2:f4:09:4b:9f:54:5d:8a:f8:02:
         74:14:fe:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:38:49 2025 by rpki-client