Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/df1d5c84-0603-3a6e-8b97-6347fffa8312.roa
File:                     df1d5c84-0603-3a6e-8b97-6347fffa8312.roa (raw, json)
Hash identifier:          xpzgWILEWOvKpWMGVw1nCgt6m0uSyw2ye9s+5yq1hDU=
Subject key identifier:   0A:74:6A:20:E0:62:84:A6:DD:40:60:E7:FD:DC:04:A3:30:50:71:64
Certificate issuer:       /CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
Certificate serial:       010D0C9F4328584EA015506BD5E496EFF7712360
Authority key identifier: DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/df1d5c84-0603-3a6e-8b97-6347fffa8312.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     14579
IP address blocks:        167.80.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:50:6b:d5:e4:96:ef:f7:71:23:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=a2e88c05-737f-4ce8-acf2-487a581227e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:13:fe:93:9a:92:f4:a5:da:fe:f2:01:37:ff:
                    8f:bb:ef:7d:39:47:d5:a5:31:ee:85:cb:25:aa:c6:
                    68:d6:88:7a:4a:7f:0e:67:a5:17:68:d9:22:57:25:
                    be:97:77:ec:f5:11:7d:44:68:e6:52:dc:e0:25:46:
                    d6:ee:97:4d:07:db:76:0b:8a:d1:20:f3:fb:7a:10:
                    b9:ff:5d:a8:4a:60:3f:0f:26:05:c6:c2:0a:f5:55:
                    98:ba:13:2c:1e:11:0c:53:e5:72:38:5e:e8:03:cb:
                    8e:17:6d:b7:bd:c5:d0:b7:79:60:79:0b:e8:60:73:
                    55:43:3c:81:4f:36:57:f5:e2:1d:c2:02:71:1e:4e:
                    8a:08:19:9e:fb:22:59:a6:0b:ce:97:e0:91:20:d3:
                    42:41:4c:d6:b3:f7:21:86:76:7b:bf:c4:c7:08:57:
                    2f:b1:1f:21:04:16:0e:11:bc:54:58:c6:0e:90:99:
                    19:60:56:5e:9f:68:79:3a:07:3c:34:fb:1a:f2:6e:
                    d6:8f:29:67:6d:4c:58:d5:6f:b3:05:82:46:97:e3:
                    24:69:82:30:6b:9a:a0:a9:81:92:7b:ea:20:aa:99:
                    f3:e5:f8:a5:41:02:d0:0a:b3:f1:10:5f:98:ce:e8:
                    a0:2f:1a:af:4f:2e:6a:35:0b:8f:58:a0:5e:be:18:
                    5a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:74:6A:20:E0:62:84:A6:DD:40:60:E7:FD:DC:04:A3:30:50:71:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/df1d5c84-0603-3a6e-8b97-6347fffa8312.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl

            X509v3 Authority Key Identifier:
                keyid:DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.80.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:65:2d:9e:47:5c:33:0d:cf:f8:06:b1:d7:5b:38:95:fe:8e:
         57:c8:75:cb:0c:7d:e7:34:a6:2a:78:37:a1:6c:96:5e:7f:84:
         48:28:1d:98:1b:27:4e:44:59:e4:78:d5:46:a0:ae:2f:0f:7c:
         84:4a:df:19:93:ce:33:e5:f8:b6:41:87:f8:30:ce:13:b9:bc:
         5b:67:4c:42:1a:03:dd:20:46:de:58:b5:be:15:67:fd:36:b5:
         86:f6:94:e6:25:ca:09:7d:fa:fa:2c:0d:51:75:50:ba:06:cb:
         15:35:62:c2:c9:84:7c:5f:6f:a6:14:c8:37:3b:d3:7c:c1:1d:
         9f:08:cb:08:9f:12:8b:da:85:fb:b5:84:7f:bd:25:88:00:a2:
         ee:a5:b2:c1:1f:43:0a:18:f0:9f:66:08:e7:47:b8:c0:c3:11:
         08:2d:a9:14:ff:8f:70:66:71:31:fd:6c:a8:73:44:6f:fb:ba:
         6f:ca:93:f3:17:60:d6:e0:d4:46:7e:ec:6c:4e:71:6d:eb:6d:
         83:86:3c:e0:1c:95:d6:38:d0:ea:fc:6b:e7:87:29:c8:ab:94:
         ee:fc:90:2c:30:35:7f:c7:24:cf:18:48:b3:89:dc:95:de:f4:
         62:8f:0f:10:66:cb:2c:ba:ab:74:15:59:2d:9c:13:d3:05:d7:
         37:ba:44:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:23:40 2026 by rpki-client