Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ff3c214a-d8fd-389a-9f01-7acb79894ba2.roa
File:                     ff3c214a-d8fd-389a-9f01-7acb79894ba2.roa (raw, json)
Hash identifier:          N7Q81sUKjAIpWZj6u/Aetg/zFjqMW/Y7TGd18dvuEcs=
Subject key identifier:   CD:13:8D:8E:D0:3F:1C:C8:1C:C8:2F:6B:CF:BA:62:0A:4A:F1:D3:80
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EA795D1E106AA7873205BFB00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ff3c214a-d8fd-389a-9f01-7acb79894ba2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     212238
IP address blocks:        172.120.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:d1:e1:06:aa:78:73:20:5b:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0a4d5427-b1c4-4c36-8c0c-16f1576b76e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b2:e8:02:b2:43:cb:4f:ae:2b:9a:99:4d:c3:
                    f3:bf:f3:ca:4c:2d:f5:df:78:fd:63:3e:94:4e:bb:
                    b8:18:95:b7:ca:36:54:01:19:ea:53:e3:ad:a4:cc:
                    8e:9d:10:f3:19:49:5c:89:83:f4:73:1c:85:6b:bc:
                    d9:83:e1:a6:05:9a:3c:a1:88:01:7c:c7:78:12:fc:
                    6f:c4:67:19:54:4b:91:28:85:2c:79:89:45:7f:b4:
                    78:f9:b4:04:15:b1:3e:66:8b:2a:46:ed:cf:91:5c:
                    8d:29:e9:09:b0:46:de:b0:a3:00:1f:ee:20:88:7d:
                    80:c3:98:65:e4:2a:59:ee:33:bf:0d:61:51:14:d0:
                    63:a1:54:73:d2:e4:fa:93:78:7f:39:40:c5:c8:c5:
                    8f:49:ad:fb:ea:f6:f1:ec:50:f4:15:e1:3e:a1:7d:
                    68:d3:09:1b:e8:26:6b:af:97:7f:ed:c7:a6:44:e0:
                    88:5d:7a:77:8b:2c:de:56:7f:af:17:97:61:f4:45:
                    76:b1:49:f2:ca:1a:27:64:a8:e1:91:ef:b1:74:2b:
                    8a:21:0e:ba:01:33:71:fc:1b:bb:5e:2d:65:5d:07:
                    3d:93:51:27:9f:e4:8e:e4:4e:d3:b1:15:51:d0:7c:
                    72:cf:a9:5f:6f:31:9f:fe:d3:a3:69:75:c6:f8:9d:
                    e2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:13:8D:8E:D0:3F:1C:C8:1C:C8:2F:6B:CF:BA:62:0A:4A:F1:D3:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ff3c214a-d8fd-389a-9f01-7acb79894ba2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:84:73:3c:73:ae:a2:6a:91:1e:fb:80:96:0f:bd:e6:f3:b8:
         fc:d5:47:25:d3:bf:66:2a:e4:5a:b1:79:f1:1b:f4:fd:5c:4c:
         0a:94:09:35:f4:38:78:5b:1e:90:5e:02:56:2b:6d:91:d0:55:
         b7:bf:5b:61:5b:ed:44:47:41:a0:be:e7:62:44:16:3a:f6:6e:
         46:36:40:b7:c0:06:02:7c:32:30:eb:61:8f:93:88:10:03:b4:
         1f:45:c1:b5:ba:48:73:3a:a2:e6:08:c5:b9:e0:f5:d6:ee:6a:
         7f:bc:33:1c:bd:0e:0e:80:c0:5e:8e:d6:72:75:79:a4:67:c4:
         20:e7:79:4e:ad:1e:bb:d2:12:20:68:7b:d1:16:95:61:2b:03:
         be:07:fd:52:26:34:1e:38:aa:a5:0b:3d:88:70:09:9e:e6:e1:
         f6:1d:01:6a:8e:17:af:42:53:c9:6e:68:d9:ba:b2:eb:ec:ee:
         08:ea:2d:05:47:39:c2:86:e0:b0:3a:61:a0:40:8b:f3:43:6b:
         0c:93:1d:ba:c6:13:29:4c:9b:cd:e6:9d:5b:b0:d4:2e:52:f3:
         1b:19:a2:13:43:56:86:29:5a:68:de:92:f9:6e:f3:c4:3f:2a:
         a0:37:14:ec:e6:11:75:eb:94:ee:7e:32:83:ec:61:40:e1:a5:
         cb:49:bf:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:15:59 2026 by rpki-client