Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4ffe75ca-52d1-3507-9dbd-68f71a3b2e14.roa
File:                     4ffe75ca-52d1-3507-9dbd-68f71a3b2e14.roa (raw, json)
Hash identifier:          ubknrB49L10Q/cV8iABhV7sYydW/iK/svtXXvYNrZKo=
Subject key identifier:   E8:BC:3C:98:1D:E7:57:19:00:1B:F7:16:C5:31:C9:37:D0:00:3E:1A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D91C00C2AA32017D298A597E0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4ffe75ca-52d1-3507-9dbd-68f71a3b2e14.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     55201
IP address blocks:        172.120.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:0c:2a:a3:20:17:d2:98:a5:97:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=6e022cc0-7609-4fcb-a3a8-0a02d1f4bfb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:31:08:3a:62:e0:e6:25:7a:9d:24:42:10:62:
                    ce:af:ef:42:6d:89:94:13:7e:2d:55:65:13:c4:a3:
                    59:44:a4:d1:a7:42:58:69:6b:75:62:54:66:c1:66:
                    37:08:5e:87:4f:89:a3:73:10:99:f6:7b:46:86:74:
                    2a:f1:2e:d6:83:42:92:97:0f:7e:ab:cf:ef:d1:0f:
                    1f:0c:ad:b4:84:d1:36:d3:08:91:09:e2:09:87:57:
                    0c:77:97:f2:0b:36:6d:e1:9a:00:d6:12:a7:02:b7:
                    b9:61:0f:5a:a3:93:2f:8a:ed:02:1d:6b:ed:60:86:
                    64:07:81:09:23:17:9c:1f:7c:09:3b:05:2a:bf:38:
                    24:07:8b:aa:66:5a:18:f8:f6:11:3b:7e:a8:07:24:
                    0a:a2:b4:dd:dd:31:3c:f2:b8:24:f2:99:9c:aa:88:
                    1a:32:5c:d6:af:e4:b7:a1:6d:24:e6:97:c5:8e:e1:
                    5c:6f:b6:8d:7f:87:cd:02:c5:b4:ce:6a:c6:ba:53:
                    f8:63:9d:11:02:39:80:34:9e:55:2b:a6:11:54:b1:
                    f0:90:bd:9d:71:4b:a7:c3:6c:62:d6:fb:f9:86:7e:
                    33:51:1f:a4:94:e8:36:44:71:ad:24:1e:0f:82:f7:
                    ff:e9:62:4e:f3:ce:fc:3a:60:ef:82:02:aa:f0:91:
                    7e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BC:3C:98:1D:E7:57:19:00:1B:F7:16:C5:31:C9:37:D0:00:3E:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4ffe75ca-52d1-3507-9dbd-68f71a3b2e14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:4f:af:2b:5b:eb:b9:f9:72:4d:84:9f:84:80:34:fd:7d:38:
         e7:71:6b:c8:22:3e:b7:3f:5a:38:db:22:29:4c:f5:3e:e7:23:
         b6:c9:37:a1:17:f8:b6:f5:a7:95:e7:42:7b:0f:b5:f0:b6:97:
         87:1d:86:15:0f:88:34:ea:5e:59:95:56:45:e6:ba:5c:63:46:
         14:e7:6a:d1:0e:09:99:06:ba:3e:24:e9:33:cf:22:20:18:4f:
         1f:8a:94:62:16:4a:55:37:46:ae:dc:2d:48:6a:c8:78:22:26:
         7b:e3:cc:93:21:ee:5f:ce:ba:02:83:b4:98:69:58:3a:4c:77:
         45:c5:e0:6f:cf:54:5c:38:a2:bf:f4:a4:0a:db:84:5d:77:3b:
         16:af:3a:3b:36:24:31:e2:83:38:9f:47:3c:f5:fd:f0:84:ff:
         c0:c1:3e:c2:c4:a1:21:7a:22:ec:ed:d8:6c:40:3a:09:db:b6:
         b7:a9:48:94:ff:ea:f8:ea:85:4b:a9:6b:f5:c8:c7:34:58:31:
         9a:ba:c8:b5:21:f1:70:a4:d9:7e:9d:d1:6e:84:23:be:d2:75:
         71:1d:00:68:02:c0:a3:b3:17:0b:e0:44:f4:c8:c8:4d:ed:2f:
         ee:27:3d:9b:74:d8:0a:d5:2a:3e:1b:32:e4:33:c9:6c:17:97:
         03:c3:f4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:51:29 2026 by rpki-client