Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59/d3fd4873-72b4-3afd-ad28-fb9d1ee7c2a6.roa
File:                     d3fd4873-72b4-3afd-ad28-fb9d1ee7c2a6.roa (raw, json)
Hash identifier:          pe4LGszm7fi0W/7Ag9iYdxD9D5nsZ5xccT6DAQ/VPG0=
Subject key identifier:   72:3F:54:40:C8:C2:0C:0F:4D:2D:72:AD:F3:55:32:99:09:83:00:D7
Certificate issuer:       /CN=4049ac35-71e1-42c8-878b-af94c9280b59
Certificate serial:       010D0C9F4328584F49733223F8794B44508E4AC0
Authority key identifier: 21:AD:BC:8B:E8:48:AA:89:BE:73:88:CD:98:85:32:CA:A8:AA:6C:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59/d3fd4873-72b4-3afd-ad28-fb9d1ee7c2a6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     8075
IP address blocks:        164.47.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59/4049ac35-71e1-42c8-878b-af94c9280b59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59/4049ac35-71e1-42c8-878b-af94c9280b59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:32:23:f8:79:4b:44:50:8e:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4049ac35-71e1-42c8-878b-af94c9280b59
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=65145939-8d69-4c89-aeed-741c84384477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:34:30:25:d6:79:01:11:92:c0:f8:25:da:85:
                    81:99:e2:84:2b:62:b0:a1:72:d0:3c:71:a0:f0:17:
                    bf:e8:31:9b:fc:ee:6a:a7:b4:8a:13:a8:7c:18:c9:
                    6d:1a:df:43:5c:62:ec:f6:cb:a3:ee:a9:78:7b:0f:
                    17:ae:21:08:bd:63:21:1d:52:73:df:ef:10:a4:11:
                    8c:47:e3:70:4b:8f:14:31:aa:c0:f1:43:87:d6:53:
                    84:f8:5d:29:aa:8e:c5:da:51:2f:6e:9a:78:98:b9:
                    fc:84:7d:94:6f:8f:75:48:9f:fc:fa:be:a9:7a:b8:
                    e0:ad:f6:8a:f9:ef:7a:4a:d0:40:35:f1:eb:5a:eb:
                    3e:af:94:02:3c:ca:9b:f9:7c:da:26:9e:f3:1e:51:
                    2a:eb:bc:e4:d8:04:d8:41:fb:58:0d:d3:5e:69:eb:
                    5a:3b:1b:93:2a:7a:ca:80:b2:d8:a8:a2:17:3f:c9:
                    de:19:08:f7:d7:0a:32:4e:66:7b:a6:4a:5c:7b:59:
                    83:ef:4e:cc:cc:a7:63:f9:bd:2e:f2:b6:78:c5:42:
                    7a:3e:7a:d6:37:1f:42:08:b7:c3:d5:52:d1:bb:3d:
                    88:01:0f:42:f1:d7:2b:d5:48:16:8d:fd:c4:6a:de:
                    c4:44:96:8f:70:f1:cc:ed:ec:35:72:c2:b8:2b:64:
                    e0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3F:54:40:C8:C2:0C:0F:4D:2D:72:AD:F3:55:32:99:09:83:00:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59/d3fd4873-72b4-3afd-ad28-fb9d1ee7c2a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59/4049ac35-71e1-42c8-878b-af94c9280b59.crl

            X509v3 Authority Key Identifier:
                keyid:21:AD:BC:8B:E8:48:AA:89:BE:73:88:CD:98:85:32:CA:A8:AA:6C:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4049ac35-71e1-42c8-878b-af94c9280b59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.47.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:eb:47:3c:26:42:38:1c:15:5d:cc:68:47:4a:48:06:fc:a7:
         25:a4:6f:67:51:b1:e0:a1:2f:56:53:51:3b:35:59:25:2c:13:
         a2:1c:0a:f0:5f:de:26:e4:42:7e:84:55:5b:b6:63:9f:31:bc:
         e4:1b:e5:aa:3c:7b:f9:5f:36:11:a1:54:3f:54:06:73:93:bf:
         68:ea:05:c5:0c:49:99:87:7e:94:ff:43:8f:bb:1b:fd:c5:52:
         b4:94:fb:8e:94:a8:da:5b:0c:5c:db:05:a9:24:de:20:5d:f0:
         49:62:03:9a:46:8a:8b:93:06:50:c9:73:c3:b8:d6:53:39:d5:
         63:2e:53:0b:be:4a:fb:8e:69:bf:d0:ba:7e:55:2c:c3:ec:fe:
         05:91:85:47:e5:a6:c2:d4:cf:48:82:d0:67:cd:68:c4:7f:1b:
         ea:7e:3e:f1:fc:93:62:ef:94:f8:22:d5:00:de:dd:59:bf:02:
         3d:62:29:62:2b:bf:74:22:98:56:14:90:47:aa:ed:35:54:22:
         fb:b2:25:27:5c:94:23:66:9b:a5:c0:bf:88:78:a4:5e:05:c4:
         2f:93:00:32:cc:74:03:b6:a4:c3:ae:ee:04:a3:6a:0f:05:3f:
         c9:ea:cc:bf:0a:e2:5d:fe:e3:ad:96:b7:51:dd:d1:35:f7:61:
         4a:ee:86:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:17:33 2026 by rpki-client