Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ac32a229-5be7-31e0-b74e-6882ec8d7fb8.roa
File:                     ac32a229-5be7-31e0-b74e-6882ec8d7fb8.roa (raw, json)
Hash identifier:          kdhwo4B0XKU4TroaGDYa0ZI6glb7npzzK6faTK/iOW4=
Subject key identifier:   DB:7F:54:D4:B6:DA:A5:D0:F8:A9:20:85:74:19:62:96:AD:D0:79:FF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F4C3D6C41A80E3F3E657F6A40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ac32a229-5be7-31e0-b74e-6882ec8d7fb8.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     212238
IP address blocks:        172.120.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:6c:41:a8:0e:3f:3e:65:7f:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=97831fb8-d2ab-4267-a967-319ba86075a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:66:49:0a:28:7b:85:fe:d7:be:6a:d3:12:87:
                    e5:8e:5c:f6:64:17:1a:72:9d:d5:e1:f6:28:c6:9c:
                    35:69:f4:00:ed:48:6a:55:56:77:5c:38:34:75:07:
                    5d:95:1f:99:39:29:3a:56:7a:02:1d:28:9f:03:b1:
                    1a:97:ba:c1:4c:71:9c:77:a1:c7:bd:03:89:f1:89:
                    e5:a9:e9:7a:c1:97:69:3c:af:04:f7:a6:87:8a:0d:
                    a8:43:e2:4b:aa:7f:c2:8e:e2:bc:f4:9b:ed:a8:d1:
                    aa:3e:99:21:9b:be:a3:0a:6e:07:6e:a6:13:85:b0:
                    72:62:19:bc:6f:f0:c6:e4:ce:95:78:83:8e:0e:92:
                    cd:fa:76:42:46:91:27:52:0b:41:f4:c3:d6:c8:2c:
                    79:f9:63:bc:e5:a6:6f:23:0f:ed:ff:49:48:6b:2f:
                    a1:29:c9:ee:c6:97:b5:94:cd:bd:cf:2c:94:18:9e:
                    d7:be:28:53:3e:9d:b1:8d:af:64:8a:05:3d:a4:95:
                    c3:13:4b:ba:41:d1:19:ed:d8:95:57:33:42:d0:fa:
                    1c:02:14:3d:dc:15:0e:6a:26:54:32:8a:f5:d9:c0:
                    88:40:d4:e9:2d:46:b2:17:05:6d:d1:70:38:df:f5:
                    36:cf:a7:0d:94:c3:b5:36:62:25:8a:76:62:13:f3:
                    30:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7F:54:D4:B6:DA:A5:D0:F8:A9:20:85:74:19:62:96:AD:D0:79:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ac32a229-5be7-31e0-b74e-6882ec8d7fb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:2f:08:36:2a:e4:02:d3:13:46:21:35:74:70:68:8e:20:73:
         d0:62:76:9a:85:08:e6:e2:d0:0c:1b:91:5f:55:63:a1:e9:19:
         24:6a:39:e1:38:5e:09:05:8b:94:5b:ff:46:0d:33:17:0b:30:
         4a:03:5f:03:8b:9d:ce:c8:1d:b7:81:76:c6:d7:e2:be:45:a1:
         4a:4d:03:b4:fb:07:e4:d8:40:fb:e1:45:96:52:26:91:08:5f:
         f8:15:27:12:20:c3:1e:01:d3:bf:b0:c3:ea:86:f0:b9:31:f4:
         54:16:c8:56:55:4d:ee:38:2a:cf:ad:a2:dd:4e:4a:1d:83:a6:
         49:ab:cf:81:20:a5:94:8e:d3:5d:5a:84:97:9a:90:b1:23:b2:
         53:b7:0b:63:f1:72:07:c4:4e:20:56:9b:46:24:47:8b:28:a6:
         1e:da:f3:59:87:3d:8e:3c:62:d4:d5:26:88:2e:bf:fb:6b:69:
         3b:41:a5:d3:0b:b4:32:39:fd:5e:d0:5a:c7:39:1d:37:ee:71:
         ed:69:5b:08:dd:45:8e:4d:57:93:02:3f:ec:f3:ff:8c:08:97:
         4a:c0:9c:d9:da:47:3e:bb:f5:74:e8:8d:35:39:75:0a:67:1f:
         13:5f:f7:87:17:3b:59:8f:d2:87:c6:dd:ba:14:06:15:0d:ce:
         78:69:2f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:58:59 2026 by rpki-client