Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/4165bfa9-bcad-3306-ad9b-3e539ede1d16.roa
File:                     4165bfa9-bcad-3306-ad9b-3e539ede1d16.roa (raw, json)
Hash identifier:          rTGnG4RTCARUro4T6sSjGLGE7sg2IFSzd14pphUxwH4=
Subject key identifier:   22:1B:A8:DC:AC:3E:F1:8D:A3:FE:0F:62:0F:30:10:DD:29:1A:28:D3
Certificate issuer:       /CN=af121a54-266e-447b-8176-bfcd1dc7867c
Certificate serial:       010D0C9F4328584F8F3DCCE14F0DCE9FC4A4F080
Authority key identifier: 32:75:5C:C5:49:C0:69:09:D2:34:6E:3D:E4:13:8B:5C:5F:FC:E5:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/4165bfa9-bcad-3306-ad9b-3e539ede1d16.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     152117
IP address blocks:        80.73.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:cc:e1:4f:0d:ce:9f:c4:a4:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af121a54-266e-447b-8176-bfcd1dc7867c
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=fe776701-e437-4c3b-ae40-dfde601e9970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:94:11:b3:89:c4:e8:25:6b:92:96:11:11:a3:
                    e2:11:74:a6:f4:ce:00:fd:c1:57:f2:b7:a4:bf:f9:
                    a7:3d:54:fc:4f:11:f9:ea:66:70:d7:fb:a7:13:ff:
                    ec:59:69:f8:ba:2c:e8:b9:dd:20:18:0b:fc:e8:7f:
                    e6:ed:43:bf:88:f8:ef:94:f0:7f:62:cb:64:50:62:
                    2b:d2:a4:58:c8:9e:1a:4e:3b:30:bd:bd:88:f9:7a:
                    33:7c:5b:24:82:62:01:38:e2:a5:74:db:05:ac:5e:
                    fc:7e:a5:08:09:7a:30:74:52:a1:ab:82:40:22:a8:
                    ec:ff:c5:77:91:b8:58:9f:87:a8:56:17:57:b8:2a:
                    cf:dc:1a:39:ed:50:ff:65:ac:22:63:13:fd:03:d2:
                    dd:21:c9:9f:75:41:69:97:bc:61:40:55:55:ad:60:
                    89:7f:69:fa:04:4f:2c:76:c0:eb:ac:5d:9d:81:0b:
                    be:5b:11:67:8c:c1:e2:97:ce:b7:76:bb:63:0b:b4:
                    0c:62:55:ce:b5:7a:3e:d8:a1:cd:74:ef:a1:01:df:
                    34:a8:e5:7a:d2:10:9a:ec:d0:c4:c8:57:c1:39:35:
                    20:2c:c1:72:a8:e2:9d:fd:5a:1b:5c:0e:b1:d1:74:
                    6b:ae:aa:58:6d:87:09:2b:e2:87:49:a9:7d:b6:3d:
                    70:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1B:A8:DC:AC:3E:F1:8D:A3:FE:0F:62:0F:30:10:DD:29:1A:28:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/4165bfa9-bcad-3306-ad9b-3e539ede1d16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.crl

            X509v3 Authority Key Identifier:
                keyid:32:75:5C:C5:49:C0:69:09:D2:34:6E:3D:E4:13:8B:5C:5F:FC:E5:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.73.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:3d:ec:24:9c:7d:4e:b9:5b:45:96:b8:5e:ef:26:2a:f3:35:
         c8:4e:0b:9f:6f:93:94:ba:bd:89:6b:e5:62:d0:76:be:79:59:
         78:cd:52:7c:59:99:0e:d9:4b:ef:7d:2d:4f:98:cf:24:50:11:
         ad:e9:4f:51:8e:54:38:41:68:48:bb:6c:35:84:1f:fc:96:6b:
         93:72:97:f6:ff:83:b6:14:16:00:ed:08:80:c4:e4:d4:0f:aa:
         c1:10:8f:f2:bd:5a:d1:0f:28:71:66:5e:8a:8c:41:6d:db:0f:
         f9:81:f4:e7:bd:a5:a8:81:d0:84:5e:00:fb:e0:57:db:f1:0b:
         30:ef:ca:95:12:b5:9f:9c:b5:d3:a7:f5:6c:3c:5a:09:48:4c:
         1b:2a:86:72:36:12:c4:6e:8b:2c:0e:17:8a:1b:4e:50:a5:cb:
         8e:90:26:c0:f7:39:c0:19:3a:a7:19:af:07:e6:b7:4e:06:a4:
         55:d4:fe:0d:4d:cf:81:4c:28:80:46:ea:43:ce:09:60:f4:a6:
         7f:9d:76:8d:9f:fe:d0:75:8a:aa:76:10:58:cc:58:e2:02:ae:
         a6:ec:87:42:f7:f3:33:f9:04:4d:06:f2:5a:d7:9a:35:01:41:
         79:4d:0a:ba:61:a2:1a:ca:3b:21:65:02:da:5f:7d:9b:9e:de:
         6b:e9:26:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:27:35 2026 by rpki-client