Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/a2a2fca6-4c51-39b2-8737-a4ac98592acb.roa
File:                     a2a2fca6-4c51-39b2-8737-a4ac98592acb.roa (raw, json)
Hash identifier:          FqSdhxE1IU9yhXCgsGlGk4C86BzNh5fUXgbysxl+IR4=
Subject key identifier:   D1:C9:9F:DF:6A:9D:42:3A:A4:63:28:2C:06:30:FB:4A:84:95:01:D2
Certificate issuer:       /CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
Certificate serial:       010D0C9F4328584A6C55DD4007B156127365BF40
Authority key identifier: DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/a2a2fca6-4c51-39b2-8737-a4ac98592acb.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     14579
IP address blocks:        167.80.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:dd:40:07:b1:56:12:73:65:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=74f0ef3b-6612-4329-96f9-02600b9df225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:78:26:ea:a6:d2:23:c0:b1:43:00:47:53:b4:
                    a1:95:b4:d1:88:3b:96:4f:cf:1d:55:05:7f:85:58:
                    c9:12:56:e0:22:50:86:73:dd:6a:24:0f:5a:26:da:
                    50:cb:0d:4f:ca:6b:91:ac:6e:f0:0d:f4:a8:bb:64:
                    20:c6:24:2b:38:20:f1:c9:ea:9e:ae:12:d6:a0:e0:
                    4e:d2:b0:bf:35:b1:7b:8e:82:15:ac:61:af:be:78:
                    4f:a4:37:f0:e1:f1:c2:6d:d5:62:ae:ec:bd:74:31:
                    24:15:3c:2c:c4:5b:1d:0e:89:2f:bb:bf:e7:75:a4:
                    40:11:ce:e3:5b:d3:37:ca:7f:12:ff:ba:35:21:c0:
                    c9:4b:3f:52:14:38:6e:8f:8b:98:d9:d3:de:61:ad:
                    58:f7:67:98:ba:75:8f:a1:8d:52:a8:1c:bd:4f:22:
                    a5:52:46:87:83:90:75:ca:ba:9e:d8:f4:b2:b3:b6:
                    d7:6f:30:37:9a:41:f9:98:fb:1d:d3:fb:81:5d:bc:
                    81:30:8b:5b:1c:ab:a9:b3:d6:4f:07:1e:22:1a:aa:
                    21:e3:e0:47:43:0e:07:34:39:db:8d:13:83:b3:f4:
                    62:a5:5b:0b:00:73:7d:f0:40:2d:a9:77:c7:f4:d8:
                    ea:53:66:cf:57:fc:46:25:03:75:cf:86:fd:a0:25:
                    43:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C9:9F:DF:6A:9D:42:3A:A4:63:28:2C:06:30:FB:4A:84:95:01:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/a2a2fca6-4c51-39b2-8737-a4ac98592acb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl

            X509v3 Authority Key Identifier:
                keyid:DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.80.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:45:e4:4f:3d:dc:a5:b3:06:be:28:9e:2b:1a:31:65:83:69:
         2d:b5:00:f6:62:90:c2:cc:b4:df:a7:3a:a5:b7:88:ad:7e:d5:
         70:30:d7:16:46:6a:38:eb:12:81:70:b3:8a:b8:07:2b:3e:72:
         0e:18:7f:84:be:49:df:81:cd:29:97:34:c5:af:4f:c5:28:0b:
         6b:d6:41:c9:4b:3f:cb:26:1a:f6:7d:12:59:98:07:da:b7:2a:
         3d:95:11:cc:ad:a3:2c:bd:f6:d4:0c:42:f4:0d:3b:1a:f3:79:
         2a:17:76:ee:19:e0:74:ad:77:53:f3:d3:4a:e9:9b:e2:26:bf:
         80:7c:fe:33:e0:ec:29:95:56:74:35:28:c5:eb:c7:2a:51:ce:
         f6:05:bf:bd:3b:3d:13:c6:06:09:cc:e2:ba:aa:fe:e7:d1:d8:
         eb:90:75:bc:bd:a7:6e:61:c6:b5:c1:da:a5:f8:d0:d9:cd:74:
         72:23:d8:01:78:72:a5:49:d7:82:d6:fb:ab:ed:92:9f:d7:eb:
         65:89:c3:8a:fa:56:6b:cf:0a:39:84:9a:77:87:9f:d8:25:91:
         71:09:68:8c:8f:47:0a:3b:66:30:73:c4:05:c9:57:6c:cd:42:
         41:61:1f:71:73:c6:4c:d5:1f:76:7c:e0:78:b2:98:3c:8b:b9:
         b3:fc:4b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:06:12 2025 by rpki-client