Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2a7b1ac6-aa14-36fc-a0f8-1bb7bcec26b4.roa
File:                     2a7b1ac6-aa14-36fc-a0f8-1bb7bcec26b4.roa (raw, json)
Hash identifier:          8R5+DYPQGW1eTLisuvr08QtdcYHS8ahN1nelHdTOtRQ=
Subject key identifier:   4E:B9:8C:F4:F5:05:6A:B2:2C:37:7C:56:BF:C1:A1:28:FC:1E:00:92
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B4A47159CFFA51A5C6626AD00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2a7b1ac6-aa14-36fc-a0f8-1bb7bcec26b4.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     18779
IP address blocks:        172.120.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:15:9c:ff:a5:1a:5c:66:26:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=52d69ad5-b248-4b6b-b608-bd79b1450c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:77:65:cd:c9:cc:b8:20:b3:02:18:e3:6f:b7:
                    fe:34:c5:e8:70:10:f7:58:26:5d:0e:76:04:5e:cb:
                    e6:a6:4c:c5:0d:75:31:3c:0b:c4:01:da:a0:3e:b2:
                    61:2c:ec:c6:89:f7:f8:aa:db:50:26:9a:50:5a:42:
                    ef:9c:bb:54:91:ab:b8:ed:af:2c:e6:64:1d:25:e0:
                    5a:5f:67:8c:48:c4:71:28:27:11:9e:87:3c:a0:4d:
                    9d:e1:10:85:3a:87:91:e2:ba:83:2f:a1:12:c9:5b:
                    0c:2f:4d:33:d2:92:fb:bd:c8:94:e4:d1:75:1f:04:
                    dd:11:61:ad:b0:4d:2f:cc:d0:d4:b0:18:88:21:34:
                    f6:bb:dd:ee:18:e9:76:bd:72:6a:b0:b8:37:ce:d1:
                    13:80:c3:b6:c7:14:31:97:19:48:b9:50:54:b3:63:
                    83:17:d7:f0:7a:dd:88:c4:f2:68:a3:60:85:04:c9:
                    d7:32:0f:7f:3e:f3:86:14:fb:61:fc:6c:93:ea:12:
                    82:cd:1d:2d:e9:28:4a:0b:ce:5e:c4:32:98:6a:b8:
                    20:0b:aa:3b:59:32:8f:91:6b:9b:67:c7:e0:eb:c3:
                    38:84:42:38:5e:2f:b4:da:12:ab:4e:77:2f:07:75:
                    a3:6e:4e:11:47:c8:9d:80:6a:75:f5:fd:4b:0f:2a:
                    87:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B9:8C:F4:F5:05:6A:B2:2C:37:7C:56:BF:C1:A1:28:FC:1E:00:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2a7b1ac6-aa14-36fc-a0f8-1bb7bcec26b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:b0:11:04:84:d2:31:04:0a:0c:e5:8b:48:82:10:c0:f6:eb:
         44:7a:aa:ce:46:8f:f7:54:83:69:3e:1f:da:5e:0e:a9:cd:a9:
         c0:3d:29:f5:e4:44:20:35:6c:cf:fc:af:91:4c:e2:97:3d:01:
         ac:f3:45:3f:b8:26:be:73:0f:4a:47:af:68:2b:14:1b:7f:89:
         ea:c5:be:84:8a:72:37:1c:1e:21:6d:31:93:a9:8e:fd:90:a0:
         9d:4c:e5:5f:1a:db:a7:36:34:23:1a:8a:59:ae:d0:99:09:7b:
         c1:20:46:83:62:23:05:1c:b4:2d:e7:81:fb:3f:c4:14:6e:68:
         7e:51:9c:0e:ac:d8:ff:70:49:3f:cc:e8:4a:fa:8a:f7:fb:5f:
         90:b6:e1:44:94:65:9b:55:26:f0:7f:3e:87:6b:09:f5:71:a8:
         ee:9a:3c:da:fa:47:2c:0d:7a:4b:1e:b9:ec:4f:a5:75:1d:cb:
         3e:5d:71:20:d5:da:7b:62:63:c7:bf:19:73:92:47:56:b7:b2:
         b2:36:b2:9e:6e:72:89:b8:74:0a:9d:88:e3:cd:93:a8:e6:a2:
         9b:e6:10:f0:f0:36:ef:65:0d:50:a8:1c:c0:25:6a:b7:91:97:
         3c:fa:a8:88:9c:b9:da:de:59:10:50:8b:0e:69:47:51:29:43:
         3c:d1:30:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:48:45 2025 by rpki-client