Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/29ab62d2-6056-366f-b4df-413541538fe8.roa
File:                     29ab62d2-6056-366f-b4df-413541538fe8.roa (raw, json)
Hash identifier:          HF9MlBehm9A+5bb53Fxlz39LuNkrMJ4uIV6T9C//36g=
Subject key identifier:   82:06:03:7E:6B:5C:C1:D5:0C:9B:A0:9A:15:85:B6:82:76:B1:B8:8D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AB6510625C1AB891865EB3FC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/29ab62d2-6056-366f-b4df-413541538fe8.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     397423
IP address blocks:        172.120.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:51:06:25:c1:ab:89:18:65:eb:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=645a36d8-732a-4725-b913-5a760cccca7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:66:b7:6b:af:b9:d8:f3:10:f4:82:67:49:a2:
                    04:2b:f8:8d:b2:23:c0:27:c6:8f:c4:4a:98:10:40:
                    87:0e:4c:be:e2:33:fd:77:bf:2e:6b:be:75:a0:14:
                    03:18:f3:8b:05:dd:2b:70:64:c7:0b:ef:b6:6a:3e:
                    70:fe:98:b6:0f:95:1b:58:9f:84:e7:60:bd:9d:a9:
                    60:58:67:b0:15:72:37:70:a1:a8:7f:58:9a:0b:9f:
                    b5:30:f7:12:1a:5e:c6:ee:cb:85:0b:48:4a:2f:c8:
                    50:e3:67:4a:81:c9:cc:3b:f0:ca:cd:8c:52:a1:90:
                    b4:42:4d:ef:1e:82:c1:08:42:12:b4:f1:b9:2b:e0:
                    94:08:5b:85:40:76:6b:f0:1b:6f:42:4e:e4:39:be:
                    60:8f:e3:4f:35:f3:05:2f:72:95:f1:ad:8c:f9:b3:
                    ef:61:60:2e:21:a2:07:95:52:7f:56:f7:6f:8d:ad:
                    b5:64:88:49:81:05:52:8b:09:0d:97:a8:82:8b:b4:
                    48:f2:9c:c4:1a:55:c6:89:63:42:ca:c2:dd:2f:f5:
                    84:d5:35:60:4e:9e:05:8d:4e:50:3f:53:cc:60:13:
                    ec:50:44:9a:90:fc:7e:b6:c6:1e:c6:6e:45:a9:7d:
                    5e:98:cb:a0:94:3a:bd:10:98:ef:35:e6:54:a7:46:
                    61:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:06:03:7E:6B:5C:C1:D5:0C:9B:A0:9A:15:85:B6:82:76:B1:B8:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/29ab62d2-6056-366f-b4df-413541538fe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:b3:b0:c9:32:1d:fe:58:c6:1e:64:82:19:72:eb:61:91:28:
         99:dd:3a:e5:8a:0e:e8:8e:fd:ea:d4:58:87:3d:4d:0f:a9:10:
         c3:6c:64:d4:20:2e:fe:1a:f1:a4:e6:f1:8e:1a:9a:8c:0f:2f:
         8b:3b:c9:31:16:81:1f:44:4c:85:fe:46:4f:a0:8b:e7:e4:fa:
         4e:ee:2b:27:ea:a6:06:a5:41:24:80:e6:1f:7e:79:5a:c4:5d:
         41:bc:ab:fd:1b:70:00:42:35:79:32:51:3e:f4:a4:df:d2:a2:
         bc:e7:17:2a:3f:5e:b8:5e:fb:d4:88:4c:a0:ea:25:8e:a7:90:
         43:71:da:51:4c:97:a0:e9:23:46:b9:63:08:3c:bc:f2:4d:37:
         ea:68:fd:59:fd:eb:25:ee:64:cd:0a:52:5f:71:ee:84:39:18:
         ff:e5:3f:d1:6e:4f:2d:3d:66:50:b5:b0:56:28:b6:29:71:a0:
         7c:3d:d8:b6:ea:39:5a:67:e0:a5:32:eb:e4:a2:05:b5:1e:35:
         d1:d5:7e:be:aa:aa:6f:96:30:bc:80:2d:8e:b7:9a:e9:d4:de:
         7c:5b:a7:ca:e9:e8:8e:ba:4d:56:2a:3d:a1:c7:de:4a:ed:b9:
         8f:aa:31:64:b1:a8:d2:4b:18:df:99:b5:b4:d9:8d:28:9b:9c:
         b8:d3:77:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:55:44 2025 by rpki-client