Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7c4cae3a-cb3b-37c5-bf9f-71661fc1f865.roa
File:                     7c4cae3a-cb3b-37c5-bf9f-71661fc1f865.roa (raw, json)
Hash identifier:          hrrTG6liHd7PMURThAs505Pn9Nx5KMjJluOdFlC4XYc=
Subject key identifier:   45:85:6A:49:66:AA:D8:F9:C8:C7:16:02:61:5F:84:5E:A0:09:7B:E3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AECAD7A62FAE5C1538ED5F660
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7c4cae3a-cb3b-37c5-bf9f-71661fc1f865.roa
Signing time:             Thu 21 Aug 2025 00:21:04 +0000
ROA not before:           Thu 21 Aug 2025 00:21:04 +0000
ROA not after:            Wed 19 Nov 2025 01:21:04 +0000
asID:                     834
IP address blocks:        172.121.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:ad:7a:62:fa:e5:c1:53:8e:d5:f6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 21 00:21:04 2025 GMT
            Not After : Nov 19 01:21:04 2025 GMT
        Subject: CN=abc4e82a-e5b4-4093-b0e8-8db664fbaea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d9:35:05:64:c5:db:17:cb:58:f1:6e:b9:4c:
                    a3:ef:46:74:20:96:b4:db:5a:ec:cf:8f:38:ee:d6:
                    a5:f4:e4:b4:c7:bd:23:3c:a9:91:61:2d:97:ae:55:
                    bb:2b:f8:d7:06:52:71:a7:86:14:3f:ce:75:6f:45:
                    bf:30:3a:0e:d4:f4:87:9a:2d:d8:de:e6:23:c1:e8:
                    20:65:e6:ff:52:e5:50:1e:34:ef:23:1c:77:e6:b8:
                    6f:ff:9b:7e:97:24:99:bb:05:fd:81:21:94:48:d5:
                    fa:47:e4:9e:5b:98:e7:77:bd:f7:64:0f:5d:59:78:
                    93:69:6d:d7:4c:d7:25:74:90:da:99:aa:94:3c:52:
                    06:03:92:45:82:f6:6f:42:f2:2f:ec:c6:db:ce:18:
                    96:69:a0:7b:8b:56:05:aa:17:4e:0a:8a:6e:68:62:
                    ce:99:cd:c5:f5:c0:21:ff:c7:f6:ea:42:ec:79:e2:
                    f0:4b:cf:cb:1c:b5:4f:c7:3e:48:6c:b9:ee:29:67:
                    ab:e7:81:89:a0:89:74:a1:d9:ee:c4:3f:55:d7:24:
                    c0:a6:09:ef:b9:8d:b2:34:a7:77:4f:7b:b0:7d:31:
                    17:4d:d6:6f:fc:37:fd:ae:2e:8c:eb:f8:7a:8e:86:
                    75:1f:15:21:07:47:f9:33:01:35:44:20:6c:c8:95:
                    44:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:85:6A:49:66:AA:D8:F9:C8:C7:16:02:61:5F:84:5E:A0:09:7B:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7c4cae3a-cb3b-37c5-bf9f-71661fc1f865.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:46:25:ab:63:cf:c3:bd:38:b7:bc:ca:fd:59:30:a9:47:75:
         b7:67:53:65:d4:78:0d:64:3a:0f:54:ba:df:09:d4:d9:1d:7d:
         e5:af:27:cf:5c:d0:85:49:4e:aa:3a:6b:b5:9d:23:16:7d:de:
         63:2a:01:59:bf:6a:70:45:bf:68:82:a1:be:ae:c7:f9:6d:d6:
         e1:2e:c5:d9:54:36:ef:9c:e5:7d:ff:ed:8c:c1:2c:33:24:a3:
         7a:28:55:76:56:82:bb:b0:01:6b:2c:cf:a8:56:db:18:50:ed:
         03:fd:86:22:ff:41:e8:5b:62:75:34:d5:42:7b:8f:8e:cf:68:
         48:a1:75:00:38:e7:19:d4:ff:27:78:66:91:0a:94:7b:44:2a:
         0c:67:eb:d5:ef:fb:10:75:27:d5:53:b4:96:fd:97:44:be:f8:
         c1:08:a0:08:d5:87:31:ae:db:b9:f6:07:30:b1:6d:da:22:37:
         d7:18:f9:1a:6a:62:ef:f2:e6:d3:af:75:8f:59:9d:d1:ed:83:
         ab:ab:0d:2f:8d:ea:49:65:90:08:74:a8:41:c2:25:96:20:d7:
         5f:a0:43:a1:24:23:7a:f3:3b:a5:2c:77:a8:7d:77:1d:bf:94:
         0b:1c:72:eb:48:2b:57:8e:02:d7:5a:09:25:77:b8:40:c5:a0:
         b6:16:5f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:18:14 2025 by rpki-client