Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ede7163f-0f0d-37af-83c4-1697a6f661e8.roa
File:                     ede7163f-0f0d-37af-83c4-1697a6f661e8.roa (raw, json)
Hash identifier:          my4mp5WlpxlCBZM/qWew+AXmtukwrBFvKCXhaJO4lGc=
Subject key identifier:   F0:99:33:DF:1B:4E:22:BD:E0:98:5F:71:C2:12:13:6A:7A:A1:88:D0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A7E7B7DB858A3F06F3807E500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ede7163f-0f0d-37af-83c4-1697a6f661e8.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     3257
IP address blocks:        172.121.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:7d:b8:58:a3:f0:6f:38:07:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=3f637982-41b7-428f-9e05-fff320c344ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:99:54:82:2f:3d:c3:cb:0e:4e:e0:dc:5c:27:
                    ab:9a:b0:80:3e:24:26:4d:a1:05:df:63:36:39:0a:
                    7d:6c:1d:a6:75:ae:aa:b1:3d:48:94:f3:ef:bf:27:
                    8b:03:06:8b:42:6d:7d:5a:9d:28:e0:1a:9f:ec:45:
                    b6:7b:73:9a:67:ab:71:0b:5f:29:68:e0:c0:33:c5:
                    25:7f:76:e0:0e:ca:ba:ee:74:2f:7d:d7:f4:3c:22:
                    8b:1b:cf:bb:e1:3e:84:81:aa:12:f6:61:01:62:2a:
                    bf:a2:25:2b:2c:fb:b2:36:fd:5f:77:8a:76:ad:54:
                    02:5c:dc:72:8e:b5:c3:e9:d1:37:b2:8f:d8:e1:ea:
                    09:54:d3:b4:aa:da:e9:c8:3b:84:27:5b:cd:f4:b0:
                    76:68:5c:d7:aa:b9:c7:51:36:47:11:7c:03:4c:c7:
                    14:b4:20:9e:da:4a:34:3c:7b:01:f4:97:e3:fa:97:
                    9d:75:20:54:26:71:20:d2:ba:58:f8:04:2c:e0:2b:
                    11:58:90:bc:05:1e:6b:6c:c2:45:ba:44:57:85:b9:
                    f9:d1:7f:d3:74:f8:02:89:b4:ee:09:15:de:58:dc:
                    31:f2:1f:e0:e2:f3:a5:2e:81:58:3c:ea:7b:67:f0:
                    63:82:95:20:a3:29:39:1f:37:17:06:2a:f4:15:ff:
                    91:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:99:33:DF:1B:4E:22:BD:E0:98:5F:71:C2:12:13:6A:7A:A1:88:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ede7163f-0f0d-37af-83c4-1697a6f661e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:04:50:3f:a6:66:3e:ca:76:90:a5:c5:a2:e0:bd:84:af:c9:
         a6:d1:32:d9:a5:53:ce:6c:7f:09:01:ec:ad:13:79:e6:d2:74:
         d0:f0:ef:56:86:0a:a5:9b:33:c1:3c:69:ab:41:c0:64:1d:b3:
         5f:35:57:cf:34:72:9f:8f:54:90:43:8f:be:12:92:bf:eb:c6:
         fc:70:ad:c2:d9:d9:99:01:51:e9:f0:e4:fe:e6:72:11:ea:a9:
         95:33:b7:0c:40:31:60:00:7f:72:fc:4b:10:9b:9a:fd:cd:65:
         5e:ad:cb:d9:ea:c1:1d:18:bd:31:f9:99:af:49:0a:a8:1e:68:
         dc:08:3f:18:d4:a1:9d:8c:c8:45:97:9c:7c:b4:83:5d:fa:16:
         9b:c7:be:ef:10:d7:e3:ac:4a:4d:97:a2:b2:fe:ce:dd:61:73:
         df:14:b1:37:1b:f3:80:d4:cf:93:25:49:3a:38:21:1a:17:be:
         2b:ef:13:6f:02:24:6b:80:c3:0b:b8:d2:ea:27:10:11:18:09:
         62:59:b7:99:aa:db:ff:29:e3:df:36:2d:0d:ab:ba:2f:f2:16:
         b7:3d:9a:0e:72:1f:f8:ca:86:e9:4e:37:e8:45:53:75:66:9c:
         8b:42:17:a1:08:fd:b0:bf:a5:ab:f1:ab:a8:82:28:79:c8:fc:
         83:7e:e4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:31:45 2025 by rpki-client