Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/25e75c48-903f-35e8-ae3a-7b2201875aea.roa
File:                     25e75c48-903f-35e8-ae3a-7b2201875aea.roa (raw, json)
Hash identifier:          hucP+VjMW8v/wNROqbumQDQPSiDu9YM4BzSMSLa4rvY=
Subject key identifier:   53:13:BD:F6:D2:E1:A4:29:90:3F:8D:81:88:04:6B:9F:EF:1D:22:64
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AF0F152F100EC81F84ADC8B80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/25e75c48-903f-35e8-ae3a-7b2201875aea.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     7018
IP address blocks:        172.121.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:52:f1:00:ec:81:f8:4a:dc:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=783db908-a757-4894-a38e-3633455d58ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a9:04:98:40:94:28:f5:e2:f9:7f:dc:8a:3f:
                    9e:33:35:5f:95:4a:f4:29:66:38:04:72:5a:0e:78:
                    b5:b6:7a:cb:d3:18:b3:b8:c8:37:42:4b:9e:38:f7:
                    0a:96:eb:32:bb:97:cb:d1:cb:6d:95:bb:26:67:bf:
                    96:01:72:4a:91:d0:aa:5b:9b:4e:b4:05:07:29:6d:
                    e0:9e:b4:27:0a:dc:ce:d2:6e:cf:1b:02:fd:00:a9:
                    3a:d4:66:0f:05:bd:23:00:09:03:7b:a4:53:ba:89:
                    e6:3d:f3:7b:64:95:55:45:bf:ee:d6:a9:dd:f0:97:
                    f2:ab:ab:28:4d:33:fa:02:c8:f6:21:c2:43:35:48:
                    fa:f7:29:ae:64:fc:42:b5:d5:26:5f:79:15:81:11:
                    14:95:c9:56:d6:bd:5f:0a:25:cc:9b:6b:4d:b1:db:
                    a4:c2:eb:5c:8f:c3:9a:b2:13:15:7d:9a:7c:e4:d7:
                    3b:14:ab:76:ff:72:58:ec:e4:4e:5e:58:d9:3a:e4:
                    dd:8b:5f:75:fb:27:93:74:ad:d2:a2:4c:1b:7f:b7:
                    41:69:b8:76:61:ac:c8:64:90:68:6f:65:28:79:4a:
                    ad:c7:9a:ac:da:d9:e4:8a:ae:b7:07:c9:62:70:1c:
                    7e:7f:66:6a:a8:6f:55:6b:40:48:e6:44:e5:b0:f6:
                    71:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:13:BD:F6:D2:E1:A4:29:90:3F:8D:81:88:04:6B:9F:EF:1D:22:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/25e75c48-903f-35e8-ae3a-7b2201875aea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:74:8d:27:2f:33:19:fd:d4:fd:dd:95:fc:a1:2f:1d:6b:3d:
         11:39:10:98:73:bf:30:2d:02:99:08:05:89:94:ed:64:ca:4a:
         3c:7e:a9:72:8f:7d:40:df:24:92:90:c9:9c:92:bb:02:c4:d9:
         6e:eb:26:bc:b5:51:98:13:f3:dd:d7:bf:26:13:84:f4:55:3c:
         83:b3:83:44:da:d4:93:6d:42:56:5b:7d:0e:40:95:94:16:ac:
         cf:d8:03:f1:d2:d9:6a:9d:2b:ca:6c:c1:98:9c:87:af:aa:1f:
         76:54:17:31:0e:ad:d9:81:96:2b:a0:3a:8f:c4:c3:db:cf:16:
         f8:1b:17:41:98:15:08:b1:22:2e:dc:22:74:de:f1:34:09:a3:
         93:68:f1:ac:c1:09:31:88:14:72:f4:06:13:a8:15:10:16:28:
         3c:3f:8c:8d:79:66:5e:0f:e0:d0:79:d0:b0:51:e6:35:a5:4c:
         e4:90:a7:bc:d6:ab:1e:87:64:6d:f0:43:ff:27:b8:19:8e:5c:
         85:ce:25:8d:9c:a6:c4:fe:a3:20:7d:86:33:49:b0:bc:cf:24:
         84:c7:c4:ce:7b:af:56:c9:0a:c4:67:4e:7a:bd:58:d0:69:96:
         71:5c:6e:78:e6:5e:5a:e7:73:df:1b:98:c7:59:c6:1e:18:c8:
         3c:86:10:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:56:40 2025 by rpki-client