Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec74eda1-21fe-35a9-ba20-7702ca29ed06.roa
File:                     ec74eda1-21fe-35a9-ba20-7702ca29ed06.roa (raw, json)
Hash identifier:          0YNrBJlIpHCGbXmQFcDCQ80U8Hb7UYmAPJiWhujDMAI=
Subject key identifier:   31:CF:CE:EA:87:EB:C5:F2:09:12:0F:EE:68:5B:EF:EA:15:7E:CB:5A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EA799D41D4CF2E57264728580
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec74eda1-21fe-35a9-ba20-7702ca29ed06.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     398781
IP address blocks:        172.120.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:d4:1d:4c:f2:e5:72:64:72:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3caf506a-3edd-4fce-8a86-e034da74ecbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b3:fe:e8:7c:ed:46:60:3a:53:e1:bc:42:c9:
                    6f:65:e3:8a:ee:63:81:7f:64:8a:f7:8d:e3:2a:12:
                    24:63:7b:4a:25:25:ea:26:e1:4e:19:54:af:b8:73:
                    cd:92:b2:3b:cd:84:66:2b:dc:e0:5c:77:61:6c:a2:
                    f8:1a:76:9f:89:69:fe:0b:ae:28:9d:fa:cc:08:b7:
                    f9:22:15:53:da:57:5e:ca:56:1e:c0:1b:4e:60:50:
                    82:2c:3f:c0:92:0a:74:0f:d9:a5:37:1c:3e:4d:44:
                    40:61:4d:94:f1:66:44:66:49:a0:86:7b:40:16:0a:
                    3a:74:e8:fd:8c:2b:db:ed:37:7f:8b:1f:fc:e7:f7:
                    bc:54:0b:a7:aa:41:93:87:db:12:6f:02:14:c9:ad:
                    c4:a1:52:5f:3d:f4:3a:56:7f:ab:bd:43:52:69:a9:
                    e7:d6:36:70:91:55:84:cd:57:26:8e:c8:c4:39:ea:
                    52:63:d0:1f:18:db:6a:3c:43:00:66:a7:57:f0:b2:
                    26:c4:de:29:a8:da:98:2f:50:b4:ae:46:2c:ca:f0:
                    a1:aa:b9:30:41:fc:b9:af:2f:d5:ee:6b:bd:cb:2d:
                    8f:13:81:ff:4c:aa:19:3b:ed:32:26:c5:40:00:84:
                    be:1b:7f:a8:c3:b0:ca:c5:7a:1c:bb:88:48:49:c2:
                    e2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CF:CE:EA:87:EB:C5:F2:09:12:0F:EE:68:5B:EF:EA:15:7E:CB:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec74eda1-21fe-35a9-ba20-7702ca29ed06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:0e:a9:5f:22:56:36:d8:fc:07:2e:7d:db:75:ac:69:75:6f:
         6f:c1:41:77:ab:93:63:46:c0:b8:dc:ed:d0:a5:7f:30:b9:b5:
         e9:15:bf:fd:81:76:ea:24:78:4e:5b:8c:fe:c3:4d:74:df:ef:
         7d:35:1b:25:61:fb:47:7f:4b:99:9f:a8:90:55:c5:25:8d:79:
         20:bf:14:c6:12:63:75:e4:8e:c0:76:1f:58:e5:c2:2e:60:94:
         60:37:37:29:8a:94:fa:d5:80:e4:8b:8f:79:b5:19:26:90:6d:
         56:14:54:34:5d:e2:ca:f1:2f:27:90:c2:be:13:ae:52:b2:95:
         52:33:a5:44:d4:88:aa:4c:32:26:32:1c:22:56:bc:65:7e:71:
         ff:4e:11:66:e3:6c:eb:30:0e:81:84:4d:7e:04:88:fb:7f:07:
         5a:b7:32:c6:33:e8:9d:6a:5e:d9:28:d0:5e:2c:80:5a:b6:37:
         d2:7e:21:99:15:de:af:fb:84:da:af:9f:3e:74:91:37:31:ca:
         02:0a:07:54:fc:b0:76:6a:fa:a4:60:ff:cc:1b:b0:17:10:dd:
         18:84:a2:e2:1e:72:ee:1f:82:b1:e8:98:67:c0:e2:2e:72:85:
         35:78:7c:0f:28:7d:8f:cf:74:f0:a0:bc:21:ee:af:31:5e:fe:
         1b:56:5d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:16:38 2026 by rpki-client