Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/38ecac3b-ca84-36f9-82a6-375b32d4a931.roa
File:                     38ecac3b-ca84-36f9-82a6-375b32d4a931.roa (raw, json)
Hash identifier:          YrWUiehxg7PzzoHB0GxogKs+ZE2Pg73BdMSFAsWHLSE=
Subject key identifier:   AD:3E:6F:F7:26:55:C8:5C:37:8C:3D:B9:DB:FE:09:57:80:7B:13:09
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A03A550FCA24DD75849DFD7C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/38ecac3b-ca84-36f9-82a6-375b32d4a931.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     2914
IP address blocks:        172.120.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:50:fc:a2:4d:d7:58:49:df:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=ba43ea1f-6059-4ec9-90bc-ec214fd7f6e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d2:6b:0c:a5:74:9f:da:56:95:9d:be:ac:b4:
                    2b:ba:8d:85:dc:aa:02:89:85:2c:bd:2c:67:ad:d0:
                    46:2f:84:f5:cb:45:ab:32:06:8c:40:2b:c4:cf:b3:
                    44:c8:d5:2b:9b:a4:a6:6d:a7:69:7f:7b:e0:75:89:
                    f8:c7:82:70:b5:76:29:70:fa:cf:6f:82:8c:63:e2:
                    aa:61:86:65:44:d5:a5:5e:c4:53:25:db:e6:f2:8f:
                    58:bf:f4:64:0a:49:e1:3f:6f:7c:4c:3b:a9:da:90:
                    32:f3:45:75:cb:e1:57:cd:97:7e:60:fd:0d:69:08:
                    b4:ca:b4:41:a9:07:2e:cd:9a:fa:a7:8b:4d:09:89:
                    56:75:f8:6f:43:68:f1:fe:8e:20:5d:14:4c:a7:73:
                    06:26:88:dd:1c:d3:f9:31:1d:cd:ff:27:1a:c4:e1:
                    08:34:1c:03:0b:c6:58:62:53:79:22:1d:2c:b3:63:
                    ed:c2:97:2d:43:c2:f5:6b:08:6f:8d:b6:aa:98:ea:
                    88:07:a0:8e:b5:2c:fd:39:29:4c:21:b2:f2:ee:9c:
                    83:d7:39:0b:8d:a7:d4:fb:04:d1:59:4c:aa:bd:87:
                    2b:10:6d:2d:d0:e1:a2:c3:f2:6f:b3:65:e2:be:e2:
                    5e:44:c9:84:66:a3:7b:78:32:37:fe:c8:5d:23:d9:
                    b3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3E:6F:F7:26:55:C8:5C:37:8C:3D:B9:DB:FE:09:57:80:7B:13:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/38ecac3b-ca84-36f9-82a6-375b32d4a931.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:7b:60:2c:a3:43:fd:c3:96:44:d1:f2:92:b3:33:a5:de:69:
         3c:6e:ec:48:7d:27:2f:0d:10:f7:a7:b6:33:02:16:c2:de:9c:
         85:5b:1b:67:9b:aa:e6:e7:3f:23:8d:59:98:50:2b:f8:56:58:
         92:74:fc:4d:96:e2:2c:a3:74:67:8b:86:c3:12:61:62:fd:f1:
         57:35:c2:dd:36:0a:27:9f:d3:69:28:1b:23:05:11:1f:64:5e:
         41:01:7b:1b:15:8c:7f:85:01:b4:67:24:b5:97:af:69:aa:8b:
         08:d5:56:25:2e:84:b3:a7:61:bb:01:b1:67:39:a5:21:0a:a1:
         50:67:30:0e:f3:e7:91:88:23:a1:5a:22:30:df:36:ff:3c:8e:
         f2:c2:fc:b7:ff:81:8a:ff:4a:57:0e:7f:98:4b:33:5b:1c:6c:
         93:fd:28:f3:55:5f:59:53:96:f0:71:01:22:09:e5:b7:6b:50:
         a6:b0:b2:07:a8:ed:33:e3:27:0a:f6:56:37:3a:c5:54:71:83:
         df:29:df:2f:8a:dc:96:46:e6:79:02:b6:36:4f:03:1e:48:26:
         5a:2d:aa:d4:21:81:90:51:fd:58:f6:27:eb:5c:ec:93:b9:39:
         b2:56:f9:8a:6b:7e:09:41:d6:e6:73:ad:b6:4f:52:cf:2b:ce:
         ac:4d:82:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 02:01:52 2025 by rpki-client