Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f825b671-bf03-3096-94b8-084952f21f01.roa
File:                     f825b671-bf03-3096-94b8-084952f21f01.roa (raw, json)
Hash identifier:          +9PcCv9jzC18g8LJnaYbDq/DmpPeZi3yi61rnSwR788=
Subject key identifier:   62:A3:05:17:5F:35:32:37:44:8B:D5:6A:8D:51:13:40:66:DF:1C:57
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D343A27CA8BEAEF0745A04300
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f825b671-bf03-3096-94b8-084952f21f01.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     212238
IP address blocks:        172.120.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:27:ca:8b:ea:ef:07:45:a0:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=cd97bc37-278d-4f07-9888-eeb2999560ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:67:98:92:ea:d8:ee:4a:94:c7:44:26:15:f0:
                    c3:10:b7:88:d5:8b:34:31:18:15:3d:36:d0:61:93:
                    cc:9d:73:26:85:9d:3b:b5:3c:75:b4:79:26:1e:1a:
                    86:a7:11:b4:fe:b1:9c:06:d8:35:bc:fc:7f:94:a2:
                    01:0f:03:9d:8f:12:b5:39:6f:8c:63:ca:b6:e6:74:
                    c0:06:a3:bf:e7:4e:09:91:6e:0a:13:e6:41:b1:5c:
                    df:bb:44:ef:fc:8f:86:e8:ee:d8:79:65:3d:e0:0f:
                    2c:af:c2:1b:3e:bb:61:c9:4b:6e:77:16:8e:e6:63:
                    06:6b:40:cb:49:de:e1:87:98:21:8a:73:2f:81:ce:
                    40:28:94:da:8c:14:f7:5a:48:a7:6a:54:93:0a:c1:
                    ee:fe:81:8c:07:ba:e7:3a:54:46:b4:9b:b5:37:69:
                    62:fb:d7:6c:02:9b:47:4c:dc:b8:6b:78:bd:33:0a:
                    7a:1e:b5:8d:24:36:bc:c4:9f:27:3b:a2:87:db:11:
                    93:9c:75:67:0e:1c:a1:d6:8b:e4:58:9d:42:06:73:
                    1d:a0:ca:6f:72:b3:db:3a:9b:88:33:db:0a:49:8f:
                    35:2b:e0:ee:82:f6:37:75:70:12:8a:e9:cd:cd:2a:
                    96:57:7d:0b:69:ad:bc:2b:5b:1a:29:02:1d:5c:57:
                    c1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A3:05:17:5F:35:32:37:44:8B:D5:6A:8D:51:13:40:66:DF:1C:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f825b671-bf03-3096-94b8-084952f21f01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:cb:14:bc:6f:79:6b:49:88:a3:a9:93:37:07:c5:0e:50:a6:
         46:18:d0:e4:a8:eb:7b:60:64:0b:78:09:5c:08:a9:43:63:27:
         3e:6d:c1:e1:1b:f6:de:6d:80:f1:ba:cc:38:88:8e:9d:c1:3f:
         ec:f0:18:28:e8:d8:02:be:2a:d5:f8:bc:bc:9d:f7:8a:be:a5:
         02:c6:90:05:86:4e:09:e7:38:7d:f5:65:c7:04:0e:cf:e7:13:
         b2:36:1f:27:9b:7b:f6:1a:6d:d7:1c:02:6b:2d:7c:96:ee:7b:
         31:37:aa:f6:91:3f:9f:d2:44:a9:f9:60:df:27:1a:b7:e2:07:
         0f:87:2c:02:13:0b:12:79:0b:82:62:11:1d:7e:1c:eb:7f:82:
         c4:75:39:c3:97:bb:11:88:6e:37:60:4b:77:ef:c5:74:29:5c:
         2b:94:81:76:74:5f:a3:9c:d2:3c:a3:cb:e4:00:f9:d6:1b:85:
         f1:f5:db:f2:9f:a7:fa:7d:77:87:fe:b1:62:3d:62:0f:80:19:
         0d:b4:84:3f:37:85:a4:08:79:64:9a:03:7b:93:67:5f:0d:1f:
         ed:dd:99:d6:61:47:73:f9:3d:28:90:65:d3:12:89:d0:f2:51:
         05:53:f8:e0:d5:0e:41:9c:45:49:4b:a6:39:d1:39:fd:33:53:
         b8:4c:e2:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00OifKi+rvB0WgQwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk
Y2Q5N2JjMzctMjc4ZC00ZjA3LTk4ODgtZWViMjk5OTU2MGVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmeYkurY7kqUx0QmFfDDELeI1Ys0MRgVPTbQ
YZPMnXMmhZ07tTx1tHkmHhqGpxG0/rGcBtg1vPx/lKIBDwOdjxK1OW+MY8q25nTA
BqO/504JkW4KE+ZBsVzfu0Tv/I+G6O7YeWU94A8sr8IbPrthyUtudxaO5mMGa0DL
Sd7hh5ghinMvgc5AKJTajBT3WkinalSTCsHu/oGMB7rnOlRGtJu1N2li+9dsAptH
TNy4a3i9Mwp6HrWNJDa8xJ8nO6KH2xGTnHVnDhyh1ovkWJ1CBnMdoMpvcrPbOpuI
M9sKSY81K+DugvY3dXASiunNzSqWV30Laa28K1saKQIdXFfB5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGKjBRdfNTI3RIvVao1RE0Bm3xxXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZjgyNWI2NzEtYmYwMy0z
MDk2LTk0YjgtMDg0OTUyZjIxZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABvLFLxveWtJiKOpkzcHxQ5QpkYY0OSo63tgZAt4CVwIqUNjJz5tweEb
9t5tgPG6zDiIjp3BP+zwGCjo2AK+KtX4vLyd94q+pQLGkAWGTgnnOH31ZccEDs/n
E7I2Hyebe/YabdccAmstfJbuezE3qvaRP5/SRKn5YN8nGrfiBw+HLAITCxJ5C4Ji
ER1+HOt/gsR1OcOXuxGIbjdgS3fvxXQpXCuUgXZ0X6Oc0jyjy+QA+dYbhfH12/Kf
p/p9d4f+sWI9Yg+AGQ20hD83haQIeWSaA3uTZ18NH+3dmdZhR3P5PSiQZdMSidDy
UQVT+ODVDkGcRUlLpjnROf0zU7hM4nU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:50:36 2026 by rpki-client