Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/1a3c3af4-895b-3354-94ed-3fa69d0fb95c.roa
File:                     1a3c3af4-895b-3354-94ed-3fa69d0fb95c.roa (raw, json)
Hash identifier:          dwTBRHFQft4KA5encwGeYy3L1n94DdRuA8CtTn40eWM=
Subject key identifier:   83:8A:0F:8B:E4:B3:06:FF:98:D7:C2:33:EC:5C:78:27:63:A4:E1:C2
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584EED52220DF28C273F2A02A180
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/1a3c3af4-895b-3354-94ed-3fa69d0fb95c.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     53508
IP address blocks:        142.79.80.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:22:0d:f2:8c:27:3f:2a:02:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=1d841d75-fe7c-4e57-a1c4-6ecb9c89261f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c0:96:b1:d1:83:d2:40:d0:3a:f1:ac:ca:47:
                    17:1b:b8:e6:7d:77:b2:b5:f2:46:e6:71:6b:dd:a1:
                    8d:bb:65:ee:a8:f8:05:21:46:84:6b:16:23:43:14:
                    38:a9:24:4a:04:65:c5:f1:ca:b5:ed:3a:fe:79:ea:
                    d9:54:be:34:e7:ab:a2:fc:7e:59:e5:ca:13:6c:b2:
                    da:3a:b5:8e:73:d4:27:ee:9d:63:6f:77:05:39:73:
                    6a:b7:f5:d5:c7:f5:f4:58:bc:7f:b8:f3:72:f4:01:
                    cb:84:29:6f:02:2a:b4:07:e6:39:e5:49:a2:54:d1:
                    b9:79:57:1e:d0:e3:ee:47:61:02:f0:dc:c6:d2:24:
                    c7:38:f2:9f:35:d9:dd:c3:11:06:71:6e:74:0f:14:
                    ae:97:69:12:40:85:0e:d7:cb:41:41:43:4e:25:a3:
                    1e:5c:22:c5:f6:eb:d1:1b:dd:bb:fc:3a:97:48:6d:
                    ba:16:5a:9d:cb:67:d0:dd:d1:05:b8:31:ff:6a:77:
                    53:21:60:f3:9b:3d:71:a5:bf:60:58:89:5d:7a:97:
                    d5:b0:4e:af:79:c8:cc:24:2b:57:45:14:09:c3:91:
                    d3:ad:e6:a4:a4:53:40:19:df:e4:f4:90:13:58:29:
                    1c:f9:b6:4a:60:d9:d3:4a:43:8e:9b:44:ff:6e:5f:
                    67:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8A:0F:8B:E4:B3:06:FF:98:D7:C2:33:EC:5C:78:27:63:A4:E1:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/1a3c3af4-895b-3354-94ed-3fa69d0fb95c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.79.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:80:06:f6:47:2e:78:fe:40:d5:4c:b5:4b:3c:e9:c1:c3:83:
         c4:fb:20:f2:fc:27:01:ed:27:08:90:26:5a:00:51:85:aa:0b:
         ab:aa:55:69:46:9d:79:09:86:8b:3a:eb:e2:2a:a8:84:32:af:
         84:d6:89:31:5c:f3:5e:5e:8c:2c:43:4f:c6:08:1d:bf:6d:4d:
         a5:b8:46:e6:aa:90:46:7c:e7:d9:ec:09:ff:73:ab:57:53:1e:
         e6:62:cf:6b:52:be:82:40:a7:7e:9c:38:01:60:e2:19:24:a9:
         a8:93:20:0f:9c:e1:09:74:78:52:52:61:ee:20:0b:fc:5d:e5:
         f0:52:3c:2a:12:18:94:0c:d0:55:24:4e:ca:1a:f2:00:1f:6c:
         bc:2a:bb:6f:4b:54:0b:36:bf:19:37:a2:b5:dc:87:f6:05:58:
         f0:f1:2e:a0:35:ee:15:26:70:09:32:ac:9b:11:7e:de:78:5f:
         50:91:f7:c9:e3:3d:ed:5d:17:1b:d6:b5:7b:4b:c6:f0:41:fa:
         cf:3a:d1:8a:63:67:63:52:7f:25:6c:fd:6b:f1:e7:24:ac:f1:
         fd:a1:f4:64:3d:56:0d:ec:88:cf:14:13:d4:e0:65:c3:b8:10:
         f0:12:23:e4:24:f1:b7:d1:fd:01:95:1a:f6:0f:9f:db:2b:f2:
         7a:b1:4e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:26:09 2026 by rpki-client