Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/4165bfa9-bcad-3306-ad9b-3e539ede1d16.roa
File:                     4165bfa9-bcad-3306-ad9b-3e539ede1d16.roa (raw, json)
Hash identifier:          oe6+4dsllB12piM8WQY4tacQABllQuUJvHX8+18Pq1I=
Subject key identifier:   29:B7:30:BD:7F:35:A0:43:EB:D3:0B:82:DE:44:AF:A1:F0:27:4F:A9
Certificate issuer:       /CN=af121a54-266e-447b-8176-bfcd1dc7867c
Certificate serial:       010D0C9F4328584E4AEF504FFCEE597B5A248E80
Authority key identifier: 32:75:5C:C5:49:C0:69:09:D2:34:6E:3D:E4:13:8B:5C:5F:FC:E5:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/4165bfa9-bcad-3306-ad9b-3e539ede1d16.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     152117
IP address blocks:        80.73.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:50:4f:fc:ee:59:7b:5a:24:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af121a54-266e-447b-8176-bfcd1dc7867c
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=cd7625ec-5aab-4601-ab89-5353846243cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:28:11:8d:34:75:eb:f3:08:4f:bb:21:cd:fc:
                    ed:51:4f:c1:6a:a8:41:48:96:81:89:3a:e5:e2:0d:
                    d9:b9:34:6c:52:46:0b:8c:03:0d:f1:fa:8c:b4:47:
                    19:f0:27:41:83:2e:55:a4:40:fe:0d:bf:56:af:8d:
                    1e:bc:af:a9:dc:fe:93:22:05:b5:58:9a:da:4a:45:
                    c6:d1:38:a2:08:85:7b:b0:7a:0c:4c:5b:72:89:12:
                    cc:15:44:fa:ac:3e:d2:a9:12:e6:3e:2b:ce:c1:14:
                    68:e4:65:8d:95:79:3a:0c:62:bf:78:30:4c:15:23:
                    d1:63:61:30:3d:b1:b4:97:5a:1d:37:dd:2b:a4:22:
                    17:71:01:db:4e:64:78:fc:a9:b1:a6:88:50:ac:86:
                    18:13:c5:c6:9e:2b:d6:3f:ea:cb:bb:b2:b2:dd:5b:
                    c4:ce:20:b3:e7:7f:95:68:de:be:52:a1:e6:80:a9:
                    ed:7e:85:2d:d8:12:b9:e9:e0:c0:84:74:44:88:ec:
                    92:7f:33:60:29:5a:6f:b4:09:9e:5f:b2:7f:25:40:
                    74:20:9f:5d:b6:a2:c0:b7:e7:58:10:58:6b:f3:84:
                    2a:5f:2f:62:33:7b:7f:15:63:c2:84:2a:9f:38:91:
                    ec:25:a8:7a:95:36:86:f4:c8:4e:7a:b4:41:76:51:
                    9a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B7:30:BD:7F:35:A0:43:EB:D3:0B:82:DE:44:AF:A1:F0:27:4F:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/4165bfa9-bcad-3306-ad9b-3e539ede1d16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.crl

            X509v3 Authority Key Identifier:
                keyid:32:75:5C:C5:49:C0:69:09:D2:34:6E:3D:E4:13:8B:5C:5F:FC:E5:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.73.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:69:4c:b9:f4:5a:3d:6f:58:cf:39:36:7d:ad:c3:bd:45:52:
         e9:3a:95:1e:85:7d:47:70:0e:24:bb:91:92:5d:1e:19:fe:e0:
         8a:ce:e7:98:e3:f1:29:bd:9a:a3:88:81:60:c5:b8:42:f8:c3:
         8f:ac:e1:86:94:5f:12:2b:61:b4:76:be:b5:90:4d:da:6b:38:
         ad:ab:ea:0d:3b:5e:17:b7:91:aa:70:87:21:db:8a:74:5a:10:
         63:62:8a:c3:72:c4:06:d0:36:db:e1:5f:36:17:13:cc:7c:d6:
         f9:e9:65:e9:51:14:a4:6e:23:40:e1:3a:d0:a2:a0:f1:9a:6e:
         dc:7e:f2:d8:37:5f:a2:b6:5c:6d:04:ec:4e:a4:05:3a:a4:40:
         78:a0:b9:58:74:25:9a:cf:11:0b:4c:f0:6c:fa:5d:11:39:7c:
         73:9f:18:51:b0:c4:10:3a:42:13:5c:a8:1b:2a:3b:44:6c:b2:
         1f:ea:3a:33:ea:34:8e:70:de:1a:23:3f:2d:03:e6:fc:8d:d8:
         5b:ea:72:ee:3f:ee:04:16:3e:24:87:38:09:70:b2:2c:c8:8e:
         cc:56:c5:9f:56:6a:06:d6:50:21:f8:ee:3f:36:f5:df:8c:45:
         2e:0e:2b:13:37:51:c8:6f:d9:b4:b1:b3:04:0f:69:f5:c5:d9:
         b5:86:37:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 11:19:16 2026 by rpki-client