Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/a2a2fca6-4c51-39b2-8737-a4ac98592acb.roa
File:                     a2a2fca6-4c51-39b2-8737-a4ac98592acb.roa (raw, json)
Hash identifier:          H6poXbI1yC7fJ5HhjZC8DrArBrmUzJkNq7a7WLlXxbc=
Subject key identifier:   19:74:B1:C3:52:59:B9:16:B4:1B:B2:51:6B:42:EB:66:30:D6:A9:44
Certificate issuer:       /CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
Certificate serial:       010D0C9F4328584D0D426974E7B3608028DE8700
Authority key identifier: DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/a2a2fca6-4c51-39b2-8737-a4ac98592acb.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     14579
IP address blocks:        167.80.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:69:74:e7:b3:60:80:28:de:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=6bee15d1-4c9b-4bc3-84a6-82a72262657b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3a:7a:53:a8:da:b8:b7:b9:6e:90:75:ee:66:
                    1c:e8:97:00:e1:50:01:1c:38:11:ef:e8:10:33:0e:
                    a9:18:46:e4:89:9e:fd:bf:21:ba:90:61:88:28:2d:
                    19:1e:37:e6:c1:3f:7d:3f:e9:0b:76:d4:4b:7c:18:
                    06:6d:45:30:25:39:ca:ce:38:7d:3d:d7:ae:b4:cc:
                    f1:a7:3d:73:7d:90:fe:23:b3:9e:d4:c1:19:05:62:
                    5a:55:6d:e4:4e:ff:98:8f:69:f1:5a:51:c9:d9:92:
                    7d:85:ab:6a:e3:c3:a8:04:0e:07:e7:66:60:b3:1f:
                    5c:56:cf:42:d7:36:66:04:3b:15:af:f9:02:a6:fa:
                    37:00:d1:4e:2c:d5:73:0c:34:e7:d2:f9:95:fa:ad:
                    ec:d4:34:63:42:e3:0e:64:05:68:1c:e8:4d:4f:4b:
                    e3:4e:aa:10:7a:2f:0d:3a:8b:63:36:5b:32:0c:a3:
                    e6:62:5f:7d:ae:db:76:0a:ea:f1:f0:e2:e5:6d:3c:
                    91:84:37:4f:57:d2:f0:9e:8a:51:cb:54:bd:88:2b:
                    59:df:cf:f8:dd:b7:f1:7e:ac:8b:9f:23:e5:6d:a4:
                    7c:07:88:78:eb:ab:61:0d:59:13:1c:f1:d7:9f:67:
                    44:7b:3b:0c:2c:9d:f3:d0:21:31:f6:b3:60:dc:74:
                    22:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:74:B1:C3:52:59:B9:16:B4:1B:B2:51:6B:42:EB:66:30:D6:A9:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/a2a2fca6-4c51-39b2-8737-a4ac98592acb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl

            X509v3 Authority Key Identifier:
                keyid:DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.80.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:b6:b4:c6:f7:1d:af:aa:e0:94:b0:0c:f0:6f:8e:db:db:76:
         d3:09:1c:cf:19:f1:87:93:e7:a8:39:28:c4:47:45:8e:6f:39:
         77:fc:87:5e:5a:82:91:e3:8d:93:6f:4a:57:c7:fd:60:20:f1:
         34:74:30:6d:09:b7:45:0a:b4:cd:ea:2a:90:be:70:d8:31:bc:
         00:01:98:ea:5e:b4:f6:71:2f:aa:f3:73:fe:b1:d9:c3:31:05:
         26:8f:7e:7a:9d:09:36:93:f7:04:7e:87:49:de:7f:9f:8b:68:
         f1:17:66:03:7c:92:29:3e:a2:3f:a2:18:dc:2c:4c:71:b2:c7:
         a5:3b:fc:b8:6c:52:89:b2:58:58:c7:67:bb:11:02:8f:d7:d6:
         ad:bf:b1:98:6d:60:fa:43:91:9b:42:08:b9:c1:9b:66:57:73:
         22:08:6b:ae:6a:df:e7:c1:0d:39:07:b3:cd:63:9f:70:a7:99:
         1d:d4:b6:c2:8e:c5:6a:34:82:03:9c:59:9a:6d:28:42:fd:fa:
         89:2f:37:de:e6:ff:93:5b:d2:fc:67:a2:96:77:b0:cf:6a:a7:
         f0:96:9a:b6:43:e4:60:0f:63:0b:90:e8:e0:0e:4d:70:ff:a4:
         20:43:cb:7a:23:15:7a:51:0e:3c:32:f4:e0:2e:ae:15:97:07:
         65:bf:79:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 04:26:53 2026 by rpki-client