Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/a2a2fca6-4c51-39b2-8737-a4ac98592acb.roa
File:                     a2a2fca6-4c51-39b2-8737-a4ac98592acb.roa (raw, json)
Hash identifier:          Ox8pZfbQE7nJnG4IVZVwBObLPrGaUljUVYPYSXMcNZM=
Subject key identifier:   4E:8B:B2:CC:77:C9:3E:EE:0D:F7:46:D2:F3:7B:46:B2:FA:C8:0B:9A
Certificate issuer:       /CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
Certificate serial:       010D0C9F4328584F497656F6B8D2B04904B18200
Authority key identifier: DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/a2a2fca6-4c51-39b2-8737-a4ac98592acb.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14579
IP address blocks:        167.80.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:56:f6:b8:d2:b0:49:04:b1:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d6a94364-ad27-41e1-8f9c-346f63d528e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:93:6e:5a:b2:04:28:ff:19:5c:15:eb:1d:c6:
                    aa:08:f7:a4:5a:02:c0:8f:c0:5a:72:fb:43:86:23:
                    48:11:77:0b:52:b0:fe:a6:da:30:8e:ed:24:1e:fb:
                    ee:bb:c8:ea:40:4f:cd:78:7a:1c:45:83:3d:98:0d:
                    65:0c:fc:a8:0a:a4:98:f3:a2:ec:c0:b6:9e:d5:9d:
                    a2:f9:41:62:60:9c:cd:4b:46:24:43:e4:20:c3:96:
                    de:dd:10:10:ce:c1:69:d1:4b:23:bd:87:70:64:24:
                    b3:59:9d:78:0c:b1:e0:91:c0:d9:02:6f:a1:d1:77:
                    23:5c:3f:e2:f2:54:bf:91:cc:ca:98:b7:4d:8a:94:
                    bd:30:58:3d:bd:7d:6f:0b:51:bb:1e:28:7a:6c:06:
                    9a:3c:67:33:18:ae:38:5a:df:2b:aa:c8:4c:ea:2a:
                    34:ea:aa:4d:f2:92:20:79:45:3c:33:05:c1:df:a6:
                    89:9a:d5:48:5a:7d:71:5a:80:a3:81:6a:f1:f1:69:
                    39:13:e5:c1:a6:27:1d:cb:f5:db:84:98:f4:b6:b4:
                    0c:a8:5d:0b:c7:55:5b:74:b6:27:30:0a:45:fc:8d:
                    75:94:2e:e6:b1:59:3a:c8:9f:ce:91:ee:63:ff:93:
                    75:14:dd:5a:b5:8f:26:08:8a:c3:f7:f4:40:f6:5e:
                    33:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8B:B2:CC:77:C9:3E:EE:0D:F7:46:D2:F3:7B:46:B2:FA:C8:0B:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/a2a2fca6-4c51-39b2-8737-a4ac98592acb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl

            X509v3 Authority Key Identifier:
                keyid:DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.80.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:07:30:3c:2a:d4:c8:7d:3f:89:36:ae:8c:f6:bc:e0:2c:49:
         3d:49:d1:77:a8:19:23:b5:7a:e3:90:13:92:1c:17:ca:05:08:
         99:b4:ee:20:d4:0d:68:7d:81:74:f7:24:bb:a4:94:32:d7:ab:
         48:f3:af:bb:e1:76:dc:77:1e:93:41:c7:70:ce:7f:05:af:35:
         d9:64:dd:2a:14:1b:bf:27:80:5e:b0:43:b3:26:d4:91:6d:f4:
         8e:cf:a9:5a:f1:53:37:61:bb:e0:2c:40:da:67:bb:8b:61:57:
         ee:6f:69:72:e7:b6:ea:86:89:e8:ee:db:08:f8:d0:46:16:d2:
         71:43:59:85:9b:16:a6:1f:40:3d:df:69:1f:46:4b:89:59:a9:
         8c:bb:06:33:20:ec:e8:53:47:cb:e6:b9:93:ba:3f:74:f5:04:
         07:5d:22:40:8b:01:fd:36:6a:d3:6d:25:41:71:b0:2d:12:ed:
         44:ab:d7:42:34:f5:27:82:c6:bb:6b:7c:ce:04:2e:13:76:74:
         38:13:cb:b6:d4:e6:dc:02:2b:73:7c:44:f7:01:4b:3e:c8:fc:
         fa:6a:15:2e:21:ad:86:11:4f:db:25:37:1f:fd:ba:02:e3:48:
         1f:91:bb:80:a7:22:f4:4e:dd:a0:f1:b9:7c:a3:d5:81:0f:e1:
         da:3d:19:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 06:45:51 2026 by rpki-client