Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf3ac50c-dea7-3183-83e5-bec20ee35a81.roa
File:                     cf3ac50c-dea7-3183-83e5-bec20ee35a81.roa (raw, json)
Hash identifier:          l4g4hRz8BpNimcPM50dNQ8xTH5NQ1Ri9/iny1bDOB9o=
Subject key identifier:   BC:03:E2:B3:8A:09:67:98:EF:56:93:3E:81:AA:B9:00:49:5F:4F:6D
Certificate issuer:       /CN=cf1b758d-53cd-4b34-8f1e-86f4156d959a
Certificate serial:       010D0C9F4328584AEBD65647AD560793FC983C60
Authority key identifier: B5:55:E2:75:50:CD:19:41:A0:96:47:44:29:A2:9D:B9:1A:F7:81:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf3ac50c-dea7-3183-83e5-bec20ee35a81.roa
Signing time:             Wed 20 Aug 2025 17:07:35 +0000
ROA not before:           Wed 20 Aug 2025 17:07:35 +0000
ROA not after:            Tue 18 Nov 2025 18:07:35 +0000
asID:                     399928
IP address blocks:        167.234.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf1b758d-53cd-4b34-8f1e-86f4156d959a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf1b758d-53cd-4b34-8f1e-86f4156d959a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:d6:56:47:ad:56:07:93:fc:98:3c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf1b758d-53cd-4b34-8f1e-86f4156d959a
        Validity
            Not Before: Aug 20 17:07:35 2025 GMT
            Not After : Nov 18 18:07:35 2025 GMT
        Subject: CN=86f67a57-2dcc-43e5-a34d-dca61c39b0d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e2:56:2a:56:5c:72:76:e8:41:ea:65:05:96:
                    5e:c2:39:f4:95:34:3e:a8:33:55:ea:3a:db:23:16:
                    b8:ae:5f:7d:f9:41:41:93:c6:96:de:c2:01:4a:6c:
                    9e:e4:af:09:18:1e:18:5b:6a:3e:b0:1f:17:b1:8c:
                    6f:be:bc:d3:f0:86:5e:c7:c4:b8:3e:b4:be:95:be:
                    b4:7a:3a:f2:b1:a2:69:7c:2a:c9:36:f3:93:a8:b0:
                    42:4f:c6:e7:87:50:92:e8:a7:2f:25:13:b0:5a:54:
                    3c:ad:b1:2e:9b:e6:99:8b:81:f6:21:16:29:7c:17:
                    b2:70:cd:58:80:08:ec:d0:78:93:68:d6:44:4d:72:
                    27:ba:7c:e0:7c:5f:f2:02:d2:81:ff:9d:ae:37:43:
                    13:6e:ac:c7:ee:58:b0:a3:10:98:de:27:95:8f:6d:
                    09:28:37:2a:53:7b:39:fd:46:39:a0:4a:20:eb:dc:
                    ad:95:13:4a:30:16:45:d2:15:a8:75:e7:6d:39:bf:
                    6c:dc:d0:71:2f:6e:88:b3:64:64:f8:73:e0:87:9b:
                    ab:d3:16:83:93:dd:03:66:14:62:28:ee:be:ce:50:
                    07:5b:c0:ab:80:26:74:43:f8:a8:6c:6d:df:67:30:
                    51:8f:58:0a:21:6c:b1:d0:37:32:0f:3e:b0:61:bb:
                    f5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:03:E2:B3:8A:09:67:98:EF:56:93:3E:81:AA:B9:00:49:5F:4F:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf3ac50c-dea7-3183-83e5-bec20ee35a81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf1b758d-53cd-4b34-8f1e-86f4156d959a.crl

            X509v3 Authority Key Identifier:
                keyid:B5:55:E2:75:50:CD:19:41:A0:96:47:44:29:A2:9D:B9:1A:F7:81:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.234.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:c3:85:ce:4a:76:54:93:6f:9e:8a:3d:cd:54:b0:3e:ad:98:
         2d:df:f0:9f:d5:3b:26:1b:06:86:1b:3d:23:73:de:d9:da:68:
         b9:04:a7:2c:95:20:bd:d1:3b:a4:04:ff:7a:ea:74:9c:cf:be:
         5d:2e:7e:4c:7a:53:c1:c6:39:43:63:5e:e6:08:40:bc:fa:b6:
         24:ef:72:9b:68:c4:62:b8:e4:13:b6:59:5b:66:a5:79:96:c0:
         2d:90:ef:9a:36:5b:c3:4c:1e:9d:b6:80:9a:3e:11:86:37:6e:
         b2:f5:fe:ba:9e:bb:13:d8:64:0e:8b:22:11:a9:9c:43:22:d5:
         a8:92:a6:b8:a8:9b:da:09:34:50:61:51:4a:b9:f6:1a:28:c3:
         06:3d:24:07:38:ac:d6:8e:16:b4:8b:15:8b:58:5e:a9:03:dc:
         64:d1:a1:67:3e:7b:e2:64:04:19:92:0e:ed:2f:30:e5:bd:d7:
         07:60:ca:f2:91:ff:01:52:e5:97:ad:72:16:71:47:aa:d5:15:
         72:fd:6b:0e:b1:3a:45:cf:83:39:0c:70:dd:2f:87:92:50:b4:
         51:01:31:33:b1:e2:d8:2f:99:d3:1f:08:3c:e1:3f:46:d1:34:
         76:da:cb:a0:6e:8d:b6:cb:ba:60:46:65:a0:68:9e:6e:a4:a4:
         d4:14:74:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:55:30 2025 by rpki-client