Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/effe56ba-2944-3288-ad63-d29af3b01145.roa
File:                     effe56ba-2944-3288-ad63-d29af3b01145.roa (raw, json)
Hash identifier:          z/uKJUMik4K0bHGmg61WHPIH4RdwzAG1rbEraGPg5oU=
Subject key identifier:   87:60:A5:F9:CB:38:26:DC:25:57:48:1D:0C:7C:8D:1B:7B:4B:86:1A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584DFD3B253391A396DBA30A0700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/effe56ba-2944-3288-ad63-d29af3b01145.roa
Signing time:             Fri 29 May 2026 01:00:10 +0000
ROA not before:           Fri 29 May 2026 01:00:10 +0000
ROA not after:            Thu 27 Aug 2026 01:00:10 +0000
asID:                     398781
IP address blocks:        172.120.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fd:3b:25:33:91:a3:96:db:a3:0a:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 29 01:00:10 2026 GMT
            Not After : Aug 27 01:00:10 2026 GMT
        Subject: CN=4eabb33c-fb6a-4353-becf-c897ded1f31c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:a3:7b:22:80:0d:77:bb:57:c0:82:0d:c3:
                    d3:bd:76:66:91:b4:90:fe:0c:73:66:f5:f5:69:98:
                    57:d2:07:0f:7f:69:95:19:5f:4a:40:29:c6:36:4a:
                    e9:3f:7b:ef:77:40:47:09:85:af:9e:04:f9:fd:fc:
                    06:47:bb:45:b4:11:cf:96:7f:db:a5:6f:61:1e:ce:
                    d5:9e:5c:b9:e6:e4:0a:77:d8:95:5b:5c:96:8f:a3:
                    b3:93:94:49:c2:37:1f:3d:74:97:02:f7:ad:74:44:
                    df:16:24:f6:b9:4d:25:60:24:f3:b9:84:f5:26:55:
                    08:cb:cf:ed:df:89:0d:92:71:2c:78:a5:1b:24:05:
                    af:24:c8:05:61:23:12:4f:29:ee:8a:98:43:40:ef:
                    8d:0b:83:61:c5:a3:09:f4:49:f6:8a:52:78:ad:82:
                    47:e2:a5:f8:99:d7:a9:77:a9:2f:71:11:ae:3d:cf:
                    7f:ef:7a:6f:34:42:35:f5:e4:7b:51:5e:70:be:89:
                    62:a7:0a:a9:76:49:cd:4a:fe:8e:33:9c:73:da:2d:
                    18:70:cf:17:e0:ed:f6:bd:ad:71:2a:fb:cd:f6:71:
                    76:15:2d:cc:58:e1:14:c6:a5:a5:27:8e:b8:37:8b:
                    88:76:fb:5e:a8:fe:07:3d:4e:fb:0c:54:c1:ba:22:
                    39:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:60:A5:F9:CB:38:26:DC:25:57:48:1D:0C:7C:8D:1B:7B:4B:86:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/effe56ba-2944-3288-ad63-d29af3b01145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:3b:da:8d:cd:eb:af:fe:31:8e:b4:2f:b0:1c:34:bb:9b:ed:
         75:ec:b2:06:3d:1d:cd:98:e4:03:98:89:17:b9:76:09:19:7d:
         74:4f:bb:b1:e2:8f:4d:b3:9a:d7:42:84:66:1d:19:15:8c:be:
         6f:3e:fc:05:4f:36:5c:a6:ff:39:2d:80:6e:e5:c2:9b:65:db:
         9a:28:92:43:ea:07:4f:62:6a:a3:b1:1b:08:63:57:64:41:f0:
         c5:ff:54:5e:8e:ff:cc:e5:42:df:91:7d:fa:26:58:8a:f5:26:
         27:da:c2:c4:38:58:85:66:69:78:e6:4b:9e:48:11:64:ff:7d:
         db:77:ba:e2:fb:7c:87:1b:80:6f:63:cf:97:f4:42:6c:ae:ed:
         6b:ed:c0:dd:56:a7:47:06:93:04:62:2b:31:a6:c9:21:d8:92:
         ff:e9:53:70:24:f2:57:32:f7:c8:b4:99:6c:a8:89:b8:09:8a:
         2c:24:09:99:93:c0:84:fe:22:6a:73:ad:e9:c3:2e:76:77:3f:
         32:3c:06:0b:91:31:06:2d:0a:84:6e:2d:c6:8e:f7:f0:26:3f:
         da:b7:56:0c:cf:34:dd:ea:f1:01:d2:da:10:6d:2e:ec:3a:db:
         65:53:62:f2:50:5e:3f:a9:89:ac:c3:b0:58:72:aa:95:9f:f1:
         40:0e:52:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:06:18 2026 by rpki-client