Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fd1cb9b0-eb5c-3eca-8600-331e750557aa.roa
File:                     fd1cb9b0-eb5c-3eca-8600-331e750557aa.roa (raw, json)
Hash identifier:          SaRq81EJloLs2hs4TR+mPEpTsUI9lK0oR6FSGo4AJdM=
Subject key identifier:   4C:20:E3:6F:24:03:FE:E0:6F:EB:FD:3E:84:9F:19:3C:C3:2D:E4:CB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B64CE6AA4FEF157DC643A6800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fd1cb9b0-eb5c-3eca-8600-331e750557aa.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     44559
IP address blocks:        172.120.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:6a:a4:fe:f1:57:dc:64:3a:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=7fd12d59-f360-4f5b-ac32-4a5ed8f10962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2b:4c:88:dd:e7:c3:63:b4:cc:84:14:3e:8f:
                    ed:ce:a5:8b:51:7e:08:25:35:33:b1:d6:2d:a3:1a:
                    3c:15:a0:ea:c0:81:88:15:8e:5a:95:c0:04:ce:73:
                    d7:61:a2:5f:1f:3d:14:e7:54:df:a2:57:89:e3:5c:
                    b9:88:a2:7f:85:64:bb:84:32:cc:77:74:f7:8a:0f:
                    0c:b4:b6:82:0c:94:f8:20:02:3a:02:3d:19:18:f3:
                    ec:35:4b:c8:be:62:e6:55:c3:e5:af:50:8c:9d:06:
                    e2:a3:1b:8f:b5:18:44:13:c9:ca:84:d3:46:42:67:
                    12:ea:f9:e6:89:4b:e9:75:e7:e1:d6:be:86:f8:ed:
                    f7:11:f7:72:31:b9:89:4d:d3:3a:2c:59:c9:17:ac:
                    9f:e2:41:e3:87:d5:fd:26:74:2e:1b:f4:b4:28:85:
                    ba:ac:9e:4e:06:0e:09:8a:2a:a6:fa:d6:61:72:11:
                    05:5c:59:86:cb:22:b5:69:ba:15:95:58:83:b0:36:
                    14:b3:9e:43:0d:71:04:91:b6:10:65:2e:09:c2:c0:
                    e9:6b:f2:60:31:43:41:80:b0:04:2b:26:42:e9:8b:
                    b4:88:dc:61:b2:2f:2c:44:52:b1:79:78:fb:a4:65:
                    df:60:77:7a:7d:4c:6a:0c:bd:84:89:2f:f2:38:2a:
                    82:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:20:E3:6F:24:03:FE:E0:6F:EB:FD:3E:84:9F:19:3C:C3:2D:E4:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fd1cb9b0-eb5c-3eca-8600-331e750557aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:4f:a2:a3:4b:6a:09:f6:03:8d:7b:e6:34:04:fb:7e:87:6a:
         2a:b4:9d:19:b9:f4:d1:57:62:e7:00:23:91:46:4e:a3:91:6f:
         14:d8:df:bc:db:f4:33:2b:e5:2f:cd:7d:3b:bd:7c:51:23:02:
         4e:fb:ab:7a:a2:5e:8f:8d:5a:b9:fb:67:ff:30:15:93:25:84:
         cc:75:75:2a:bf:eb:cb:e3:cd:93:b0:35:d7:83:91:9f:a4:f1:
         9e:a6:8a:56:17:03:df:d9:10:56:74:89:19:d0:1b:ad:af:dc:
         f1:fb:87:b5:e6:4c:a9:54:95:8d:60:07:30:d4:36:ec:26:3e:
         3a:8e:b1:a9:91:51:8d:28:c6:ed:6e:39:70:4c:b4:ce:0a:c5:
         04:52:8e:65:03:12:b7:73:27:da:1d:78:63:d8:41:cf:ca:04:
         b2:b8:d6:99:ac:8c:fa:7b:bb:d3:bb:fa:57:f7:76:12:1d:a7:
         cb:77:49:16:9f:89:26:89:ca:ba:8e:fb:54:ba:ef:69:7d:22:
         9a:21:ed:11:54:9e:df:e9:db:0c:ef:40:d5:3c:d6:89:f6:cf:
         a3:3b:91:aa:67:6f:98:c2:01:60:b9:9a:ed:0c:b3:0b:ca:20:
         3f:b7:ec:63:28:48:0b:9d:57:e4:45:9b:da:ed:ac:4f:63:aa:
         f8:68:fc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:58:23 2025 by rpki-client