Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da757eca-5c07-390a-ad6e-b8c4921f2f80.roa
File:                     da757eca-5c07-390a-ad6e-b8c4921f2f80.roa (raw, json)
Hash identifier:          TWu7io2JVQOI9UeZjvVQNP5XPXSsbZRBiHG4DtZWaBg=
Subject key identifier:   42:EB:75:DC:03:F9:E6:65:E9:B2:E7:A4:40:89:1E:EA:F4:4F:E6:9D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A8DC18B9765536B149EB2CB80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da757eca-5c07-390a-ad6e-b8c4921f2f80.roa
Signing time:             Fri 18 Jul 2025 00:19:43 +0000
ROA not before:           Fri 18 Jul 2025 00:19:43 +0000
ROA not after:            Thu 16 Oct 2025 00:19:43 +0000
asID:                     6939
IP address blocks:        172.120.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:c1:8b:97:65:53:6b:14:9e:b2:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 18 00:19:43 2025 GMT
            Not After : Oct 16 00:19:43 2025 GMT
        Subject: CN=621cd02d-dfe6-408c-a2d6-cfdd5f3b4b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7f:38:a1:2e:33:0e:ce:dd:8d:d7:85:c0:2f:
                    75:c0:c4:07:a5:d4:02:e2:7f:52:3c:a9:4a:a6:7b:
                    01:1a:c9:fa:6c:56:2b:11:a0:16:59:cd:9d:36:80:
                    38:eb:26:76:b3:0f:ad:21:0f:e7:01:d6:31:75:45:
                    b1:a3:26:dd:ae:0c:be:2c:47:01:29:dc:b6:36:65:
                    0b:68:f4:5f:4a:e8:4f:37:52:e2:e9:4c:8f:db:8a:
                    9a:a8:be:9b:3e:3c:0b:ec:9b:be:bd:85:1a:39:2a:
                    17:2e:7b:ac:6f:bb:52:61:cd:37:d2:e2:d5:f2:9f:
                    02:80:87:c7:d0:af:28:a6:ab:e6:54:15:c7:54:78:
                    36:ed:e8:98:e8:70:9a:db:56:ca:29:36:cc:e5:d9:
                    57:75:f9:40:5e:1f:63:69:f4:a7:06:d0:b9:5f:87:
                    5b:7e:95:64:44:3e:1c:a9:91:d5:1d:e5:11:f6:fa:
                    42:ed:31:ac:77:97:65:4e:0f:ba:f9:87:60:67:41:
                    fe:0e:0b:e5:20:8e:13:47:5e:37:5d:e6:86:62:3d:
                    10:40:b2:de:48:63:3a:62:01:b7:3d:65:e3:7c:65:
                    e2:e4:ec:3c:ad:81:9b:cd:f8:d7:52:24:6e:e7:bf:
                    8f:98:8b:9f:60:b5:b0:fe:12:d1:96:4b:69:ce:04:
                    a4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EB:75:DC:03:F9:E6:65:E9:B2:E7:A4:40:89:1E:EA:F4:4F:E6:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da757eca-5c07-390a-ad6e-b8c4921f2f80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:d5:3f:1e:bc:0f:5a:6a:32:59:e6:4a:e3:c2:28:64:d7:cd:
         8c:d4:54:0e:66:6a:09:bc:5b:71:f1:2e:31:60:7f:f1:cd:ba:
         16:cd:12:be:81:75:f5:27:b1:da:a6:4c:c9:72:e3:f2:0a:35:
         ce:38:59:7c:6b:b2:04:31:b1:ae:52:a2:5f:92:96:da:dc:dd:
         c7:26:85:82:0b:21:6f:12:07:1d:85:bc:b5:1f:19:a4:34:5e:
         de:2e:fa:38:8c:82:99:12:09:62:62:c0:27:20:da:d4:25:84:
         93:97:56:27:9f:a0:79:f0:84:3f:0b:65:e7:e8:1f:63:20:46:
         4c:e5:e5:bd:dd:e5:6c:9e:57:6a:e7:1b:ed:9f:80:de:eb:83:
         d9:f7:78:be:60:e0:9e:99:96:49:03:76:b4:e6:13:6c:95:7b:
         1b:07:a4:0a:30:48:d8:a7:18:c7:9e:0c:2b:8d:af:9d:17:de:
         a8:82:57:8b:6d:61:62:14:92:4f:a8:2e:af:be:17:17:c8:63:
         48:79:d2:d3:fd:e8:dd:a9:64:ae:0e:b8:ff:83:f4:d0:5f:1c:
         ce:60:13:dc:9e:d9:82:14:6b:54:7a:b7:a0:52:12:bd:e9:77:
         ff:c1:5c:b0:32:88:b3:b2:21:51:33:e5:8c:54:f1:97:88:3e:
         84:45:ef:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:23:32 2025 by rpki-client