Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/ec8ade42-f384-3872-bf6b-790c544fbeca.roa
File:                     ec8ade42-f384-3872-bf6b-790c544fbeca.roa (raw, json)
Hash identifier:          xmQqbUlJPwYHs+horwk4R8Zop4ALOo4XvrPR17UbgWM=
Subject key identifier:   8D:0C:2B:CD:34:7F:A1:FC:11:B5:64:66:63:00:0F:06:39:DB:CC:BB
Certificate issuer:       /CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
Certificate serial:       010D0C9F4328584EF7176BD84C513B5A09198880
Authority key identifier: DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/ec8ade42-f384-3872-bf6b-790c544fbeca.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     14579
IP address blocks:        167.80.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:6b:d8:4c:51:3b:5a:09:19:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=b3a72c72-dc50-4d80-8b4a-2e7c49fcad24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fe:88:27:eb:b5:9a:d1:3e:e1:58:87:94:94:
                    2a:e7:d8:79:36:bb:1e:6a:89:d4:24:0b:91:40:cb:
                    3b:92:43:64:0d:dc:44:73:05:0e:24:bb:d3:40:67:
                    69:b8:be:01:85:5c:3e:b6:3e:fa:33:4e:fb:94:77:
                    61:b9:09:cc:58:b6:01:ae:7c:7e:88:57:9d:a6:91:
                    cb:ec:97:6e:c5:89:98:3f:47:91:9e:07:30:0a:99:
                    c9:b8:35:b6:e0:49:eb:7c:59:60:3a:50:b8:2f:28:
                    5d:d2:67:ce:ed:ff:f2:bf:6e:d4:a7:e0:d2:64:38:
                    80:55:10:5d:1f:e4:af:69:0f:83:2e:d4:72:ad:8f:
                    97:41:d6:d3:a6:d5:4b:71:ea:4f:87:13:ac:05:a0:
                    16:13:dc:6c:f3:47:4c:12:65:6d:26:05:2f:fb:0f:
                    48:db:e4:fa:14:2f:99:8f:c6:d7:9f:14:46:9f:68:
                    6d:99:ae:d9:e0:07:4a:51:ce:a8:06:b8:22:a3:27:
                    19:73:9b:b0:57:66:55:4c:5c:4f:de:4a:96:b2:4c:
                    7e:ea:c8:09:a2:76:62:ed:65:b9:f1:06:18:ef:41:
                    69:6c:a7:2e:80:b5:84:7b:8a:00:1a:61:5e:1f:60:
                    ce:64:86:69:51:c8:10:4a:0e:b6:1d:05:80:6b:88:
                    41:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0C:2B:CD:34:7F:A1:FC:11:B5:64:66:63:00:0F:06:39:DB:CC:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/ec8ade42-f384-3872-bf6b-790c544fbeca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl

            X509v3 Authority Key Identifier:
                keyid:DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.80.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:3f:ba:c4:7d:cd:75:98:a1:d4:4f:20:55:3c:26:f6:75:4e:
         21:ca:93:bd:91:86:d1:a0:97:c6:2d:3e:0c:22:91:c9:88:22:
         27:20:10:dc:98:1c:b1:b0:f9:68:76:3d:a7:d2:88:97:06:a2:
         aa:47:11:4e:2a:5c:90:9d:64:fb:9f:f9:ce:16:82:67:55:c5:
         34:88:db:86:24:bd:13:41:b8:bf:6a:c1:fc:d5:d2:4a:74:59:
         73:68:20:94:bf:c1:b4:b9:28:fe:a8:ac:35:fd:fe:37:ad:3c:
         e2:5b:38:d7:0c:8c:eb:02:67:a5:2d:c6:08:fa:8a:9b:c0:0c:
         11:7a:67:e5:93:c3:97:8d:1a:18:be:b8:15:35:79:2c:9d:5c:
         7d:fa:e2:c9:91:d2:af:8d:81:51:6a:5e:24:a2:e3:db:92:6f:
         09:4b:61:28:aa:3d:97:39:ec:1a:2d:93:8b:e1:dd:73:d6:a5:
         d3:c7:ea:74:87:7a:e3:ce:86:4d:73:1b:51:98:4c:5b:16:b5:
         40:1c:8f:5e:06:df:56:c9:37:f5:44:46:63:d2:76:c0:46:ec:
         c8:8a:c4:19:2c:a4:4e:78:4f:c9:bc:24:44:14:b0:3e:fc:3d:
         10:7f:e5:9e:08:ab:de:ae:31:d5:85:01:59:cc:ac:b7:3c:b8:
         d6:14:7f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:10:22 2026 by rpki-client