Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3dfa865b-57ee-39a4-a7b1-dc3e750cd150.roa
File:                     3dfa865b-57ee-39a4-a7b1-dc3e750cd150.roa (raw, json)
Hash identifier:          Z4m69sOj5cbvv+UVROfT8qrOQsr0WiphfJjWDoMEdvI=
Subject key identifier:   91:35:EF:18:38:B2:E9:D6:3F:73:2E:FB:CA:FE:E0:CD:4B:00:0E:ED
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AF0F1534E3E15085B8B009D80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3dfa865b-57ee-39a4-a7b1-dc3e750cd150.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     55201
IP address blocks:        172.121.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:53:4e:3e:15:08:5b:8b:00:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=2b600a0a-4466-4ffb-b9f4-abc8a1551448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f5:83:07:82:b8:62:00:21:8f:d4:69:d9:36:
                    29:e4:2e:12:01:02:d6:35:3c:fd:82:46:c0:65:bf:
                    61:10:5c:1f:2f:4e:c0:43:c5:48:e4:ea:fe:d2:05:
                    0d:de:5c:a2:20:5c:2f:8f:69:c8:76:a6:7b:79:d9:
                    d8:f8:1d:49:5c:ff:68:7f:3f:43:5f:0c:b9:88:59:
                    08:3a:40:89:c5:cd:38:e3:d4:70:30:55:07:d5:95:
                    24:51:a8:ba:f0:8e:de:36:37:b0:19:15:47:47:9e:
                    57:3e:5f:4b:79:fb:ed:41:60:28:20:e9:53:79:fd:
                    5d:76:55:bb:35:99:29:08:99:05:cd:fd:37:3a:e5:
                    12:df:f5:3b:2d:af:46:b3:ff:46:c9:b3:45:5c:58:
                    81:44:45:79:2a:89:b9:27:4e:e0:35:6b:a9:41:85:
                    b4:c3:8f:96:e4:cf:54:96:cf:9b:72:8a:4a:c7:e5:
                    ba:74:52:bc:dc:55:72:8a:9d:d2:67:0b:43:81:36:
                    1d:53:e7:0e:a1:8f:24:8f:c6:90:fb:9b:f0:1e:ce:
                    54:6d:42:41:e0:ab:bc:2c:19:2c:bf:a9:4f:a8:44:
                    b0:1c:c5:45:c7:61:2a:2d:7d:57:3b:0c:54:e8:29:
                    be:2d:b7:aa:10:2e:b8:2f:5d:68:7f:ec:f1:f0:ab:
                    d9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:35:EF:18:38:B2:E9:D6:3F:73:2E:FB:CA:FE:E0:CD:4B:00:0E:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3dfa865b-57ee-39a4-a7b1-dc3e750cd150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:09:a5:dd:9b:f9:c0:2e:fe:ec:a0:bc:29:c6:d2:58:77:94:
         4b:ad:e3:ee:b8:1c:7c:c1:cf:33:29:48:68:f9:c1:39:a3:4e:
         52:59:54:7c:0a:3b:e0:db:60:d1:f6:b7:97:c4:48:c4:4a:a1:
         fa:e5:2c:48:ce:e3:1f:8e:f4:3e:8a:cb:52:e6:ed:7c:90:42:
         2d:7f:e3:1a:06:10:2d:35:8c:ac:e0:c3:9c:ed:4e:3b:97:05:
         53:1c:99:3b:8b:b1:47:ca:da:5d:c6:44:ad:98:c2:12:16:50:
         4d:73:a9:76:ac:0a:c2:ac:a7:62:5d:3f:e9:6c:fe:cf:c5:3a:
         80:ad:16:fb:d1:67:ba:c7:31:61:06:4e:3f:ba:93:20:11:24:
         30:ad:e1:6c:86:10:57:a1:15:77:88:c4:39:bd:e8:fb:3c:ae:
         fa:cb:cb:5e:2e:6d:58:75:21:ce:d3:e9:24:b1:65:f5:6b:f3:
         2f:f8:2b:5c:0c:9b:4f:61:62:22:cc:5d:99:48:1e:13:88:94:
         ae:2e:a1:56:4d:dd:3d:50:b1:c0:87:cf:6b:79:ca:6f:18:32:
         46:89:5d:ef:a4:18:9d:f7:ef:e8:49:72:c9:73:86:8d:33:44:
         a2:de:22:09:d8:11:c9:bf:9f:61:aa:8a:ba:20:50:e7:d0:1d:
         eb:ee:95:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:46:25 2025 by rpki-client