Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/ec8ade42-f384-3872-bf6b-790c544fbeca.roa
File:                     ec8ade42-f384-3872-bf6b-790c544fbeca.roa (raw, json)
Hash identifier:          rpE6tldXlhYwomLxJEIDbyPBC2qZQTUYzCxIBKFtzCE=
Subject key identifier:   49:B1:6D:24:0C:EC:D4:B8:04:E6:17:BB:B1:0F:56:C1:BE:5B:A3:E0
Certificate issuer:       /CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
Certificate serial:       010D0C9F4328584E54B4A00F3B645844481AE560
Authority key identifier: DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/ec8ade42-f384-3872-bf6b-790c544fbeca.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     14579
IP address blocks:        167.80.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:a0:0f:3b:64:58:44:48:1a:e5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=2fd728e3-7a6b-4da8-a960-148f134da3e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f4:90:a3:50:3a:de:f6:4d:2c:a4:a3:da:55:
                    2d:a0:98:c9:b3:00:4b:14:63:e6:99:4b:cd:01:0c:
                    72:76:fc:d1:07:a9:03:38:d7:0b:0a:c3:67:18:df:
                    be:f0:db:c6:34:62:0b:b1:d9:90:6c:05:10:eb:d3:
                    a6:24:be:5f:84:70:5b:22:9c:e6:2e:d5:10:74:6b:
                    79:9d:5e:83:7b:e3:e5:31:18:b5:20:e3:b8:7d:06:
                    b0:31:ee:c8:d8:16:22:dc:2a:15:ff:dc:48:97:97:
                    f1:5d:2b:bc:72:f0:9f:b0:12:c6:4c:e5:26:7c:d3:
                    eb:06:1b:40:97:a4:08:4d:1f:08:2e:12:09:10:94:
                    1d:97:7f:c7:31:af:6a:28:e0:98:fb:f0:44:7a:fc:
                    61:b4:5f:0e:8f:41:71:db:78:d2:80:19:a1:b7:69:
                    67:07:b4:77:3c:08:b9:2e:fd:20:08:ab:44:df:f6:
                    a8:5d:2b:ae:54:71:87:ce:fa:ed:ad:9b:d7:69:d2:
                    b6:1c:ca:3c:e1:b0:bc:d0:2a:50:eb:3f:fe:39:00:
                    c5:d5:3c:c9:44:25:d3:ee:20:20:a9:10:3c:c9:a8:
                    73:ff:9d:e9:fc:bc:67:4d:4a:e8:2e:4f:36:ba:fc:
                    8c:12:75:9b:27:e6:e8:20:a9:7a:28:cf:fb:f6:7d:
                    61:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B1:6D:24:0C:EC:D4:B8:04:E6:17:BB:B1:0F:56:C1:BE:5B:A3:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/ec8ade42-f384-3872-bf6b-790c544fbeca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl

            X509v3 Authority Key Identifier:
                keyid:DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.80.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:df:ae:81:e3:4a:25:c6:09:5a:b8:1a:32:bf:39:56:f9:8a:
         73:46:86:06:ca:c5:aa:24:df:0b:cb:10:cf:90:47:38:67:09:
         a6:9f:bf:8e:00:3e:30:2e:68:b3:41:fb:62:d2:65:ad:88:6b:
         8e:00:b4:50:46:3f:6b:33:2e:25:2e:64:11:84:a3:3a:42:d3:
         87:17:28:b7:05:0a:2b:f9:47:5b:97:cb:c0:5b:4d:37:cf:4c:
         82:23:e4:91:40:07:ca:44:7c:b4:71:ad:92:e4:7e:9b:d8:b2:
         d8:46:38:f6:b5:91:ba:3e:91:cd:5c:f6:ff:a7:f2:b3:41:be:
         b3:5a:af:42:30:39:4f:50:24:23:ae:5a:a8:6b:5b:e3:74:c2:
         77:1f:c9:77:7f:ff:34:db:40:07:aa:52:4c:d7:dd:b0:33:86:
         a4:cb:e6:51:c4:86:f3:16:34:33:27:c8:e8:52:0a:9f:fb:15:
         5f:5b:bd:5d:a6:17:75:22:6a:a9:34:1d:c7:2d:9c:71:67:6f:
         19:64:28:b2:28:d1:cb:f9:93:45:ee:90:41:4a:34:25:98:d0:
         8f:a8:61:26:2b:bb:97:1a:d1:cf:33:80:e6:04:45:50:9a:84:
         48:cb:74:3c:0a:2c:b6:0d:77:f6:c7:b6:56:1e:dc:d1:e2:bb:
         88:27:aa:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:00:37 2026 by rpki-client