Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f4488841-470a-35ca-b505-8a8e2fd26888.roa
File:                     f4488841-470a-35ca-b505-8a8e2fd26888.roa (raw, json)
Hash identifier:          3ev5U2QhuP5pgXEdq3QZi6ts959WnOc29BDxdWSUTBs=
Subject key identifier:   3C:BA:B6:23:21:A7:E8:64:EE:C1:20:44:7B:D9:CD:DE:1F:94:30:8B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D300A92116A7B677ADDC0CFF0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f4488841-470a-35ca-b505-8a8e2fd26888.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     44893
IP address blocks:        172.121.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:92:11:6a:7b:67:7a:dd:c0:cf:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=74d92a59-dce6-42a9-85b2-322096010905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:71:af:ee:63:9d:79:ca:36:af:76:32:18:69:
                    42:5c:d4:44:65:39:7f:00:8c:21:45:30:18:c4:78:
                    1a:77:bc:ad:1e:c7:b5:96:01:4e:fb:30:7a:fa:cc:
                    96:87:55:cc:93:8d:9f:0a:03:5d:db:a3:90:d8:4b:
                    91:cc:be:c7:22:26:4e:3a:26:d3:01:dd:94:5c:69:
                    59:8f:e1:7a:99:04:09:d4:40:3c:e1:65:8f:b1:a7:
                    6b:e6:84:d5:d1:42:8e:e7:19:f8:bc:d6:99:22:b6:
                    52:14:23:dd:0b:22:09:31:cb:3d:6e:f7:00:3f:a9:
                    98:8c:dc:f4:b0:b9:c6:99:df:5a:cb:73:b0:2c:cc:
                    88:cd:0e:6e:20:bf:37:ca:11:69:cf:66:16:6e:4b:
                    75:d6:a2:1e:47:47:47:c6:ff:90:56:a2:41:cc:14:
                    a9:db:5c:45:69:e0:1b:65:a2:94:4a:b7:ed:33:58:
                    a1:b4:3a:7e:57:d7:28:99:ec:ab:a8:5b:b3:2e:5e:
                    46:d8:93:e7:92:b7:df:2c:b8:8c:2c:69:48:c7:49:
                    e9:bc:ae:c2:65:e1:59:64:74:b4:42:8a:b8:d8:7e:
                    08:f4:9f:31:76:7c:bf:da:ff:f0:90:b1:e7:58:68:
                    ba:96:7b:95:92:8f:78:25:1c:32:a5:50:c1:8f:72:
                    1b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BA:B6:23:21:A7:E8:64:EE:C1:20:44:7B:D9:CD:DE:1F:94:30:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f4488841-470a-35ca-b505-8a8e2fd26888.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:6d:33:01:2e:15:33:50:ea:5a:ab:bb:2d:a0:8f:cb:d9:0d:
         f3:5a:33:f8:7f:8b:7c:0f:46:4d:59:ca:b4:b0:b8:1e:bd:eb:
         8e:2b:f0:0b:f8:4a:76:81:50:55:b2:f6:17:35:a4:c8:7c:68:
         d2:03:e4:5c:48:16:ce:5d:37:4a:23:cf:c0:45:ce:7d:77:04:
         3f:f0:79:cc:99:07:a7:1c:36:25:bd:22:d7:0e:6b:53:a2:a7:
         e6:cc:c8:6a:03:7a:ff:33:5c:5e:71:ad:ac:35:ae:1b:da:91:
         f8:12:a2:f5:60:82:4e:3f:a9:ee:26:1f:86:b6:0d:b8:2f:9a:
         90:90:df:a7:51:83:01:fc:9e:17:81:7b:6f:66:79:2e:a7:f0:
         1f:d3:f2:86:36:ae:d2:78:33:3b:14:c4:84:4c:e1:84:5f:8c:
         65:74:cd:94:4a:3f:21:f1:9f:d6:42:9a:38:f8:55:ed:95:61:
         1b:a0:68:99:df:de:b1:27:9b:e5:ad:1f:c5:c8:4c:32:3f:d7:
         3d:61:31:7e:97:ad:6d:82:93:57:5a:a9:ef:99:a1:81:1b:e4:
         c1:fb:ce:ba:41:3c:84:7c:5a:01:7a:8e:88:72:31:e2:f0:1c:
         c2:12:51:f1:03:60:e8:09:24:25:5d:41:e6:4d:50:92:92:63:
         7b:fb:d0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:46:25 2026 by rpki-client