Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bc34b4ea-800d-3180-8e15-6f4d03be0d22.roa
File:                     bc34b4ea-800d-3180-8e15-6f4d03be0d22.roa (raw, json)
Hash identifier:          gwgPnEiwo/KvzYL86d/Xub6LpOKndorNU6Tovb+V1XQ=
Subject key identifier:   B5:B2:49:33:68:55:83:2E:D3:EF:0B:ED:B4:89:20:C9:7B:B3:05:0E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D38041ECE28B323D1B2BCF780
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bc34b4ea-800d-3180-8e15-6f4d03be0d22.roa
Signing time:             Thu 19 Mar 2026 09:35:09 +0000
ROA not before:           Thu 19 Mar 2026 09:35:09 +0000
ROA not after:            Wed 17 Jun 2026 09:35:09 +0000
asID:                     150293
IP address blocks:        172.121.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:04:1e:ce:28:b3:23:d1:b2:bc:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 19 09:35:09 2026 GMT
            Not After : Jun 17 09:35:09 2026 GMT
        Subject: CN=ce43ef26-93c4-41f6-9eef-ed3e1f0ea161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2d:a9:f1:26:f4:0c:89:09:d9:fd:78:35:f8:
                    67:09:8c:02:0e:66:98:08:c7:8e:de:63:8f:c0:39:
                    d1:a1:ba:1b:06:f3:f2:a3:b8:58:90:2f:28:c5:27:
                    2b:f3:1e:0e:6f:c0:d9:28:d2:79:a8:cc:f7:a3:7a:
                    4e:7e:44:75:d2:5e:0a:b5:53:b7:44:4b:fb:9d:5f:
                    78:0c:e0:df:c3:ec:78:97:59:57:6f:e8:f2:e9:78:
                    8d:30:04:93:83:f5:65:97:ee:11:94:eb:49:3d:2c:
                    71:e3:8c:f4:c5:5a:7e:c9:7c:a4:0c:9a:c2:db:2e:
                    e4:4a:64:64:90:de:f4:20:44:55:a2:34:c5:5a:d5:
                    b0:bd:c6:a5:df:41:66:c9:ca:46:c6:9b:ec:47:12:
                    f4:3c:d0:1d:4e:73:3c:44:37:62:09:76:5e:1e:b1:
                    fa:f6:aa:48:a9:df:07:a6:51:14:db:df:0d:ba:18:
                    1f:be:9c:b1:de:35:2e:50:f1:c0:97:7e:15:47:70:
                    ed:b1:b8:6c:5d:2c:3a:7a:df:29:48:5e:35:b4:e1:
                    a9:56:71:c0:19:50:a8:4c:62:06:75:4c:d1:6b:9b:
                    40:14:16:38:1b:b9:91:3b:b4:4d:1c:a8:6b:02:ad:
                    8d:73:fc:df:5d:e1:dd:15:11:db:92:5b:f0:73:d0:
                    c3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B2:49:33:68:55:83:2E:D3:EF:0B:ED:B4:89:20:C9:7B:B3:05:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bc34b4ea-800d-3180-8e15-6f4d03be0d22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:6c:10:ec:e0:61:c0:fe:6d:9a:86:39:06:84:ee:99:d5:04:
         87:99:f6:e3:8a:4e:32:d9:8e:f0:c0:51:d0:4f:39:0b:c5:98:
         a6:3e:df:b1:68:93:a7:31:32:fe:15:89:50:6f:a7:d8:0b:ef:
         c2:1c:a3:e0:de:5a:f3:9d:a0:ce:94:1c:1e:fd:bb:ce:bd:5f:
         de:45:42:aa:7b:e4:04:4a:4c:73:f3:11:1f:70:f4:c7:57:14:
         51:0c:49:b8:20:bd:88:c3:cb:44:c1:2a:eb:d9:f1:1e:8b:a8:
         e0:6c:d6:87:fd:98:4b:ce:23:9a:25:28:27:dd:12:79:05:fd:
         60:e1:11:3a:97:45:65:0f:0a:74:de:86:de:6a:0f:0f:e6:1f:
         0b:93:be:d4:77:7a:71:32:04:97:6d:66:c5:4d:f5:ee:d9:da:
         8c:a8:75:34:4e:83:b6:74:a7:7c:0a:71:6e:c5:aa:24:99:ab:
         10:f7:b7:30:4a:5c:eb:c9:09:6d:bc:0b:2d:2b:7f:71:f5:bb:
         0a:73:6a:03:4c:70:db:1f:ba:bc:d8:81:d7:32:89:1f:07:1a:
         fa:ed:eb:db:39:66:90:d9:2c:33:43:6b:e1:1d:4d:33:d7:2c:
         11:18:b3:30:93:75:dd:3d:5d:79:13:db:84:c8:a0:c5:e6:41:
         d0:63:e9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:53 2026 by rpki-client