Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/4165bfa9-bcad-3306-ad9b-3e539ede1d16.roa
File:                     4165bfa9-bcad-3306-ad9b-3e539ede1d16.roa (raw, json)
Hash identifier:          8CXnbcYQpUvINYKkws4WecJ7b9dtRJF/pN2LZMVPw5I=
Subject key identifier:   93:78:0F:E0:52:DE:7C:6B:D1:DD:38:61:F8:93:69:EF:F4:E3:BC:8A
Certificate issuer:       /CN=af121a54-266e-447b-8176-bfcd1dc7867c
Certificate serial:       010D0C9F4328584EED5220A9C35C4CE3AAAD25A0
Authority key identifier: 32:75:5C:C5:49:C0:69:09:D2:34:6E:3D:E4:13:8B:5C:5F:FC:E5:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/4165bfa9-bcad-3306-ad9b-3e539ede1d16.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     152117
IP address blocks:        80.73.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:20:a9:c3:5c:4c:e3:aa:ad:25:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af121a54-266e-447b-8176-bfcd1dc7867c
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=b2225ce1-5efd-4055-a6eb-5159096167c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a5:1f:b1:b6:13:fb:c8:9a:c5:42:2b:c5:c9:
                    b5:5c:cb:5f:97:46:e8:e9:74:7a:77:ed:d5:1b:91:
                    bf:e4:0b:35:54:28:40:52:cd:5c:2b:90:f2:60:d1:
                    9e:17:56:08:48:d0:e2:06:b0:25:20:43:5e:0f:e4:
                    ac:29:0d:5d:cc:e9:9e:a3:41:8e:c1:90:3d:7c:3c:
                    75:ca:30:ab:73:76:d4:82:b3:34:d7:8b:60:c1:ad:
                    76:79:f1:f6:3e:ef:db:c8:f4:21:b3:74:c7:df:6f:
                    72:cc:5b:1a:54:61:39:05:82:a7:04:c1:de:66:c3:
                    87:a8:ea:c5:aa:e3:db:e5:6a:2b:81:8b:89:d9:bf:
                    9a:33:91:6d:96:85:51:d6:51:7c:b9:58:87:3d:8c:
                    79:c5:95:a5:ab:7f:18:d8:7d:d4:d7:41:3b:85:c6:
                    4c:8b:3b:37:d4:3f:65:04:9f:40:d0:cd:7c:8d:a2:
                    52:e5:2a:3b:2e:66:78:da:ad:5b:44:f4:f8:d5:65:
                    e9:29:8d:ff:06:55:e8:fd:1f:94:4c:9a:5c:2d:47:
                    05:de:66:17:40:25:d4:05:3a:48:1d:f3:04:e9:06:
                    81:6a:c8:39:f8:1c:fc:0f:6c:0c:99:7a:14:46:dd:
                    83:34:ea:9e:3e:8e:99:d9:ea:62:61:64:ac:e7:ac:
                    f0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:78:0F:E0:52:DE:7C:6B:D1:DD:38:61:F8:93:69:EF:F4:E3:BC:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/4165bfa9-bcad-3306-ad9b-3e539ede1d16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.crl

            X509v3 Authority Key Identifier:
                keyid:32:75:5C:C5:49:C0:69:09:D2:34:6E:3D:E4:13:8B:5C:5F:FC:E5:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.73.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:aa:70:be:88:fa:72:52:68:f8:0f:98:84:90:a1:f2:a2:d8:
         0a:a0:d9:c6:2c:07:50:ba:ba:33:8c:6b:db:6d:ec:0d:e7:4f:
         f6:97:54:de:a3:a9:17:23:f7:8a:92:a3:93:4b:9d:bf:23:47:
         cf:1c:8e:58:bd:5f:29:13:9a:95:cc:e3:24:b8:37:ea:74:22:
         80:4f:05:40:b2:8e:52:ba:db:8f:22:14:f8:47:37:ea:4f:ab:
         36:49:f6:2b:b6:f3:fc:90:47:7d:4e:02:a7:a9:4a:b7:99:c5:
         21:a1:4b:ae:29:7b:c4:9a:bd:e8:8a:de:18:f9:02:a7:ef:ff:
         c5:67:63:ec:48:7a:83:8f:34:1a:d4:e2:95:94:b9:f4:39:b5:
         60:0f:62:86:3a:26:77:8e:b7:47:ec:b4:19:6a:fd:1a:2b:00:
         65:0b:3f:66:45:f5:19:9f:61:fd:af:56:78:c1:11:df:ff:c8:
         bb:f3:f9:cb:c5:f7:fe:ce:d9:f8:c7:a8:97:ff:70:f0:06:ac:
         f9:11:f6:ed:2a:00:62:fa:fb:f8:c0:88:ad:24:b3:bb:55:2b:
         4a:7b:a2:df:d5:61:20:c7:92:e5:c2:24:d5:4c:c5:f0:57:a8:
         a1:5c:6a:8f:ae:a6:d3:4d:93:0a:9a:db:c8:6c:11:b3:5a:5e:
         52:08:10:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:01:58 2026 by rpki-client