Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/394c3db6-6a1b-32c1-9027-a122bb2287b4.roa
File:                     394c3db6-6a1b-32c1-9027-a122bb2287b4.roa (raw, json)
Hash identifier:          vtV2DoJBQYz5Hm3yuCWjxTREql6nSgaGZbOmlnV0QI0=
Subject key identifier:   02:32:53:05:3D:2A:2B:7A:5A:CF:D4:FF:00:1F:74:9A:55:A1:67:D0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AF0F12CB5E541659FDBBA3460
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/394c3db6-6a1b-32c1-9027-a122bb2287b4.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     55201
IP address blocks:        172.120.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:2c:b5:e5:41:65:9f:db:ba:34:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=0f1489a7-56f6-4a70-94f7-038e66e65161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3d:1a:7b:0f:df:ad:66:18:4b:7f:d8:45:85:
                    30:16:52:23:68:09:13:86:13:26:00:f6:b0:8f:d5:
                    15:46:c4:f1:d6:9c:5b:e2:2b:b0:cd:78:1f:9f:e9:
                    ba:be:cc:68:e1:ab:92:44:59:15:b2:f0:c3:ab:99:
                    ee:c2:16:da:31:31:99:5f:da:f0:2f:b2:13:f4:f8:
                    b3:d6:5e:5b:71:05:cc:ae:2a:ac:ef:47:06:62:f2:
                    ef:d7:c6:6a:d6:b5:23:59:90:c7:e7:e8:c2:34:3d:
                    e5:c9:7b:62:54:05:31:e3:4a:60:b8:c7:08:38:14:
                    9d:8a:82:80:eb:6f:e5:b8:c5:da:e4:a3:f0:88:01:
                    e1:7c:e2:87:57:16:10:4d:58:ac:52:20:df:8f:d0:
                    9f:d7:7f:15:92:9f:28:be:1d:8c:e6:78:54:12:c0:
                    d9:ce:d4:bb:43:bc:e3:47:70:2f:c0:7c:17:82:20:
                    6c:84:70:f5:7e:1a:39:17:90:04:98:0f:3c:90:d6:
                    88:b9:aa:06:88:cf:c1:8e:9f:99:56:9a:42:be:95:
                    fa:33:e0:13:7d:b8:dc:36:86:c9:63:c8:e1:dd:7f:
                    4e:99:31:7b:af:bd:ed:42:a3:50:09:52:90:6d:78:
                    65:e8:ec:c3:a9:00:ed:a6:45:67:2c:7d:60:be:c4:
                    a8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:32:53:05:3D:2A:2B:7A:5A:CF:D4:FF:00:1F:74:9A:55:A1:67:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/394c3db6-6a1b-32c1-9027-a122bb2287b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:e5:27:6c:97:e8:92:3a:4c:61:60:2d:20:43:46:67:6d:e1:
         da:94:4c:84:b4:d6:3d:7a:76:74:82:bf:bc:c4:e5:8c:ca:c3:
         9e:99:29:a5:1d:28:7a:c1:07:ee:b3:2f:87:0d:7b:33:2e:68:
         3c:1e:ab:f7:b3:8b:e8:fa:1d:09:1e:3d:24:69:26:9a:31:03:
         9d:2b:f1:08:b6:a3:7b:4a:77:1f:e5:16:3a:20:67:06:04:3a:
         70:27:2f:db:01:38:e0:d3:86:fb:be:63:1b:66:26:b0:c3:cb:
         8c:af:d6:bb:22:3c:cb:e6:9a:9a:a9:20:c2:78:bf:7c:f6:5c:
         47:fa:66:a4:0b:63:20:e0:bd:88:91:6f:5f:bf:23:f8:aa:b8:
         64:68:d7:0d:93:3b:c4:f9:81:19:d3:1f:51:6f:e3:bc:0c:b9:
         08:df:96:b2:5e:30:0d:d7:d0:49:8e:46:c5:19:e5:65:87:3b:
         64:d3:3e:d0:2d:7b:e4:4a:0f:35:41:d5:7e:90:66:5f:11:22:
         d7:27:5d:31:72:83:db:10:1f:28:0f:8a:ba:44:d3:24:09:47:
         4a:74:be:ac:b7:af:d5:8a:c6:90:25:94:df:a5:28:dd:0d:47:
         ca:c6:7d:51:34:16:ff:5b:f5:a5:e0:b5:34:70:aa:22:98:2a:
         79:e7:6c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:29:32 2025 by rpki-client