Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/a2a2fca6-4c51-39b2-8737-a4ac98592acb.roa
File:                     a2a2fca6-4c51-39b2-8737-a4ac98592acb.roa (raw, json)
Hash identifier:          LoKIbNjDhy9Xk5iIdo5sgMSwwlk3fumS04rcTg4wPY0=
Subject key identifier:   43:AD:97:D6:1A:2E:58:B3:0D:B9:0E:E5:D2:64:44:A7:C9:F6:60:EE
Certificate issuer:       /CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
Certificate serial:       010D0C9F4328584B4D11DD3472477C272D903980
Authority key identifier: DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/a2a2fca6-4c51-39b2-8737-a4ac98592acb.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     14579
IP address blocks:        167.80.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:dd:34:72:47:7c:27:2d:90:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=fcdb7400-efcd-43d1-89cd-9533a9070eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a1:79:27:3c:c6:98:f4:97:2d:6a:a3:85:02:
                    3c:11:22:41:b9:e6:fa:22:2e:2f:91:1f:46:cd:96:
                    dd:c0:40:12:fa:ae:89:43:b4:c7:43:c7:93:c9:5a:
                    c5:19:84:19:6c:71:00:bf:1d:7e:9c:85:93:36:2f:
                    11:58:8f:db:10:8e:91:63:48:ee:b5:52:74:05:2b:
                    38:e0:cf:00:07:2d:66:10:19:80:79:c4:71:69:02:
                    67:6a:77:0b:e5:a8:2f:55:94:6c:72:06:f4:38:6e:
                    47:50:06:e8:1c:2c:8c:07:21:cd:09:7e:03:85:97:
                    58:5f:47:a3:1e:23:50:11:d6:5b:c7:50:5e:54:6c:
                    27:16:aa:7b:f3:73:fd:54:58:ed:a3:43:c5:b4:89:
                    15:9d:af:1d:9e:b9:14:83:be:1f:ce:2c:f3:39:7b:
                    fc:98:dc:d1:0f:ca:20:bb:35:c0:fa:f2:28:2d:c4:
                    ca:0c:f7:d0:52:fb:4d:6c:71:7e:46:67:00:2a:66:
                    3c:9d:70:44:e8:3d:8e:07:57:72:29:18:0e:2a:a5:
                    76:21:84:77:5e:13:d7:fa:4b:60:84:50:9e:81:af:
                    60:1e:e8:98:86:04:93:12:7a:7d:47:ce:c8:b4:69:
                    db:3b:86:a0:95:ed:cb:06:ff:17:0c:2d:fa:5b:49:
                    f7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AD:97:D6:1A:2E:58:B3:0D:B9:0E:E5:D2:64:44:A7:C9:F6:60:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/a2a2fca6-4c51-39b2-8737-a4ac98592acb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl

            X509v3 Authority Key Identifier:
                keyid:DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.80.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:df:6b:94:a9:58:3f:03:77:ef:c4:f9:48:4a:75:f8:a7:01:
         77:3d:0f:da:bb:46:bc:69:98:62:a0:b6:94:9f:b2:dd:43:bf:
         52:65:b0:8f:25:ca:18:1f:be:ef:4f:d1:80:af:10:8c:45:c9:
         2e:f9:38:0f:ec:ae:ba:c8:b0:d4:41:ae:97:93:79:a6:86:48:
         9c:bd:26:a1:69:1a:b1:ff:de:4c:dc:ca:3a:e5:70:d1:9b:7a:
         42:fe:3e:e9:21:fd:46:10:3b:4c:fc:91:de:c0:2a:47:ae:17:
         40:ba:0e:3e:76:8f:a7:ce:e1:bf:9a:96:ab:ee:bb:c3:9b:db:
         80:c6:d8:c0:0d:5b:3e:a7:e3:13:16:69:a8:2a:d7:44:d7:11:
         80:f4:93:8c:86:44:42:43:18:50:ce:40:31:84:c1:a8:0e:74:
         c0:5b:98:f5:8f:0b:f1:2e:4b:be:ce:d2:79:38:73:c8:65:bd:
         45:2e:4c:a9:c7:1a:66:90:01:db:c9:9f:3f:ad:f4:84:8e:5f:
         21:bd:a3:2f:8d:ac:1b:04:30:7a:b4:a6:93:eb:01:e1:ff:4e:
         e0:d9:18:59:41:f8:f2:00:22:4d:5b:3f:99:a4:a6:5e:e1:6b:
         38:ea:94:b1:0c:a5:de:20:2d:48:f7:f5:58:1c:0a:16:ca:5d:
         99:f8:2a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:44:39 2025 by rpki-client