Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/67a3affa-e0c5-3f7a-8142-8954f9ff3d83.roa
File:                     67a3affa-e0c5-3f7a-8142-8954f9ff3d83.roa (raw, json)
Hash identifier:          3CG3tf+OSKY+hHbBIZkJwAZ47QkkVR21YU04F3RdrXc=
Subject key identifier:   80:72:90:B5:20:BC:61:AA:A8:C3:C1:43:22:D9:B3:EF:8D:CF:18:99
Certificate issuer:       /CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
Certificate serial:       010D0C9F4328584EA01550773747E2CBE7F78030
Authority key identifier: DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/67a3affa-e0c5-3f7a-8142-8954f9ff3d83.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     14579
IP address blocks:        167.80.64.0/18 maxlen: 18
                          167.80.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:50:77:37:47:e2:cb:e7:f7:80:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=3d6b23d6-63fb-4a3c-8384-d18b5abfda1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c7:35:9f:88:e5:4c:56:c5:1a:a8:aa:de:92:
                    44:9f:41:df:5b:31:26:a4:b0:be:39:fb:9e:76:b3:
                    c2:94:43:6b:0e:84:88:d4:80:9e:0e:c6:6e:18:c5:
                    ad:d6:30:bc:f2:0b:b9:ca:c5:5d:ec:69:77:62:d3:
                    1d:a9:38:f6:51:4c:8b:1b:48:45:bd:57:13:1a:34:
                    21:e4:a7:4a:1d:2b:45:17:ac:98:3d:2a:23:16:ea:
                    76:82:8b:97:e0:2d:cf:90:a9:1c:f5:01:8a:2c:d9:
                    16:35:c8:b9:28:6a:fe:20:17:51:9d:ff:7f:6c:6b:
                    ba:ce:6a:f6:3c:b3:13:e8:a6:45:b4:79:97:6a:2e:
                    df:35:2e:ca:bd:06:61:54:27:96:12:6c:5c:54:40:
                    10:39:6b:d0:39:9d:9e:09:0b:82:30:a5:9b:ba:5b:
                    c1:f6:df:21:9f:12:2a:4d:70:ba:a9:2c:03:27:ac:
                    f1:72:c3:a8:f0:e5:f8:da:32:73:98:63:26:6a:74:
                    41:eb:b6:ce:91:4a:0c:cf:1a:47:1c:95:f7:bc:eb:
                    8f:f7:b6:f2:df:e8:76:bd:66:99:a5:32:b7:89:5e:
                    e7:ef:6f:3a:17:cd:86:ee:fc:db:3d:b2:6f:b2:60:
                    65:a5:e8:0e:5a:60:f4:ba:50:41:71:c9:9d:35:ae:
                    b9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:72:90:B5:20:BC:61:AA:A8:C3:C1:43:22:D9:B3:EF:8D:CF:18:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/67a3affa-e0c5-3f7a-8142-8954f9ff3d83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl

            X509v3 Authority Key Identifier:
                keyid:DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.80.64.0-167.80.191.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:29:c8:5e:20:fb:d1:31:5b:2a:84:f8:c5:2f:f8:fd:da:1e:
         da:ee:52:a0:24:2b:b6:2f:36:af:98:aa:35:22:ae:9f:66:56:
         1a:91:51:c1:93:4e:ca:67:ca:a3:09:95:4f:ea:e6:df:3b:5c:
         89:98:17:76:4d:ce:fa:71:10:51:3d:ac:0b:4f:4b:87:3c:64:
         2d:c3:9e:cc:5a:8d:d2:8d:7c:27:a6:86:8d:42:4e:91:59:06:
         6c:0b:42:6f:61:68:7b:9c:88:3b:c7:b5:98:9e:b4:c8:5b:41:
         b5:9a:0a:3c:1b:cb:26:25:c1:0e:0c:29:4f:6e:4b:ee:08:1b:
         c1:e3:84:66:4f:7e:64:ce:08:6f:b2:4c:26:1f:07:b0:29:d8:
         7d:02:dd:f4:af:3c:28:95:68:8e:64:7e:73:c5:ec:02:54:cd:
         0f:e6:00:c4:1a:cb:6f:f9:6a:26:1e:c6:79:d0:46:51:38:12:
         37:23:44:ac:43:0f:36:f7:f9:20:7b:3a:1e:49:10:79:02:6c:
         cc:ad:69:b3:c5:76:e7:de:b1:4b:00:21:41:40:d8:39:c8:72:
         9e:92:78:18:0e:2e:6b:05:26:2f:f3:83:57:70:9a:f5:4b:4d:
         13:69:2f:d1:24:3e:85:a6:4e:4a:ae:81:a0:e8:46:96:6a:1b:
         fb:88:0b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:21:17 2026 by rpki-client