Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec5f5c85-ee9f-3b3c-a369-77d3faec96c8.roa
File:                     ec5f5c85-ee9f-3b3c-a369-77d3faec96c8.roa (raw, json)
Hash identifier:          vVXPXMNcHb3+S0VT9tGA4EBTWC6KCAc+xkgDbg6aEQA=
Subject key identifier:   B3:40:42:8D:F8:6A:BD:F8:55:34:D3:C4:EB:92:E2:0D:FC:41:2C:17
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D1F4A64D5517A76BA700C7CC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec5f5c85-ee9f-3b3c-a369-77d3faec96c8.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     3257
IP address blocks:        172.121.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:64:d5:51:7a:76:ba:70:0c:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=187bc25d-66f4-4959-b0d0-5801da854e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f8:22:fc:3c:01:53:00:ce:22:cf:26:5a:14:
                    ec:6c:e8:0f:a0:8d:46:0c:ea:cc:fc:76:5e:ec:4e:
                    d8:c4:e5:c8:4e:1d:2a:49:d6:cd:89:d8:16:c4:96:
                    bb:d0:f9:28:7c:e3:e1:e8:09:ad:6e:8d:bc:7c:5b:
                    85:75:9f:85:33:2a:34:a3:45:62:d6:8d:be:e9:10:
                    c1:4f:d3:37:fb:57:82:ad:64:e8:f3:55:8c:d8:02:
                    66:d7:63:2d:81:1e:03:e1:9c:b6:49:92:81:8a:ed:
                    c7:d3:03:1c:28:ef:d8:ee:b9:b9:61:30:98:ac:51:
                    31:e9:5f:50:3b:63:17:77:40:6b:a7:ea:c8:3d:8f:
                    61:64:10:39:c2:2a:6e:4b:52:9a:ae:11:87:ca:61:
                    03:6b:0b:3a:ce:7f:4f:3a:31:43:27:6f:4c:b8:48:
                    f9:40:06:f0:b6:28:50:8e:9d:53:fe:f4:67:55:5e:
                    e0:5a:8a:ef:1c:00:90:e4:63:64:20:9f:b3:6f:6e:
                    41:00:1f:c1:f8:8b:7e:6c:14:fe:24:db:4c:4a:83:
                    8b:d0:f3:95:e7:06:fc:77:1b:95:51:88:72:ae:5e:
                    3b:eb:53:02:08:34:5a:1a:73:94:73:57:31:e7:36:
                    e1:ac:9d:ed:85:05:6b:ea:9a:f5:ce:9c:e2:e3:dd:
                    53:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:40:42:8D:F8:6A:BD:F8:55:34:D3:C4:EB:92:E2:0D:FC:41:2C:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec5f5c85-ee9f-3b3c-a369-77d3faec96c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:19:44:0a:f9:a4:af:17:62:2f:8a:eb:20:60:75:5f:81:2f:
         72:34:8e:5e:2f:16:9c:40:f3:c5:8c:22:e6:7f:6d:6d:2e:09:
         d2:89:57:7f:8e:6b:05:d4:c7:69:1c:fc:ec:27:16:84:8a:11:
         2e:64:7c:79:cb:43:6e:13:b6:f6:4c:dd:5e:f4:fa:78:79:3d:
         6b:3f:af:a9:97:19:2a:19:28:ae:58:a4:7a:d5:2b:f4:49:2d:
         4c:df:78:80:03:a3:cc:eb:33:0b:84:3b:06:37:fe:7d:61:41:
         e4:03:ea:ad:a1:9c:0a:24:c1:ea:1f:4d:e5:d0:ba:99:72:eb:
         fe:92:05:17:32:6c:6d:26:83:9c:97:3e:99:8d:21:6a:8c:a9:
         c4:83:57:73:d7:0d:2e:7c:15:c4:96:dd:a7:f4:b4:62:b8:11:
         ab:79:7f:29:df:89:e7:1c:d8:f0:b3:bb:20:e3:1c:95:29:fa:
         2e:e9:c7:18:60:4e:d5:c2:b9:ce:87:f1:54:72:ea:00:99:26:
         12:98:06:50:30:78:21:4d:37:12:64:24:24:a6:c0:31:b7:bd:
         03:e4:93:e4:1f:17:76:b5:cc:85:62:bf:dd:0c:88:b1:45:6a:
         93:db:9b:0e:e6:ec:34:68:d8:93:9a:0e:c9:a2:1c:09:49:29:
         bb:1b:93:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:44:07 2026 by rpki-client