Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/a2a2fca6-4c51-39b2-8737-a4ac98592acb.roa
File:                     a2a2fca6-4c51-39b2-8737-a4ac98592acb.roa (raw, json)
Hash identifier:          JVUXRDwysiFXjHDs3UTjBK0p1z6q5r38VrM0DgUxo/o=
Subject key identifier:   8E:C4:79:0C:1D:69:D2:C2:BE:42:75:8C:0D:53:EA:7D:FF:F2:83:D2
Certificate issuer:       /CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
Certificate serial:       010D0C9F4328584DEDE0A25D5A8485FAB1385400
Authority key identifier: DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/a2a2fca6-4c51-39b2-8737-a4ac98592acb.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     14579
IP address blocks:        167.80.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:a2:5d:5a:84:85:fa:b1:38:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=515cb536-baed-4cd0-983c-5a54ea36b0c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f8:cd:ca:3e:34:6b:76:2e:12:f4:18:a3:f5:
                    dd:be:c8:8d:7b:81:72:e6:86:e3:ab:a3:88:05:37:
                    08:72:5f:3d:79:d2:96:85:26:8b:63:1c:7c:b8:a3:
                    62:b3:b3:d4:6b:11:e6:67:00:e3:44:fc:3d:50:aa:
                    e1:59:52:ab:e0:9b:22:83:70:c7:53:ef:0e:76:91:
                    a0:01:74:8e:f1:d9:c6:ae:0b:4b:1b:53:c7:30:26:
                    51:98:25:4c:3e:b9:5c:dd:6e:fa:2d:93:da:ff:47:
                    7b:9a:e6:f5:7d:89:5d:fd:f8:e4:5c:da:de:28:a3:
                    08:b5:01:4f:64:0e:cc:78:f5:f0:1a:9b:06:50:e1:
                    ff:d7:2a:36:e3:52:ce:c8:45:33:2b:a5:05:d3:e7:
                    bc:d1:6c:bc:1a:74:9b:53:93:ca:d6:f4:83:5d:b5:
                    c8:b2:e7:25:c6:17:7e:a0:fb:61:a0:c9:27:80:e4:
                    95:9c:85:9d:f0:c0:07:a2:ae:9a:30:37:4a:97:01:
                    ec:f5:f5:6f:30:6d:24:f8:ae:39:4d:b5:ba:3a:2b:
                    29:00:8a:d1:7c:b8:8f:7e:c8:65:f7:68:92:35:d5:
                    dc:ba:41:9a:e9:a1:33:9d:f9:3e:06:e0:8e:85:f7:
                    0e:f0:8e:ab:0e:a0:df:43:b2:45:6a:8a:6c:e8:8e:
                    e9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C4:79:0C:1D:69:D2:C2:BE:42:75:8C:0D:53:EA:7D:FF:F2:83:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/a2a2fca6-4c51-39b2-8737-a4ac98592acb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl

            X509v3 Authority Key Identifier:
                keyid:DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.80.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:3c:d6:2c:1e:0d:0d:42:33:33:54:37:35:d5:98:fa:5b:66:
         ef:b7:ad:ec:66:36:5e:62:22:af:13:9c:94:30:92:9a:f9:a8:
         4d:9a:59:c5:6c:a6:78:ce:1b:79:8f:42:f4:a3:b1:0c:c8:4e:
         d1:fe:dd:fc:6d:0c:e1:ac:33:14:46:b0:08:05:f4:36:64:7e:
         c1:0c:97:ff:9e:e6:75:67:2e:76:6c:2f:59:4a:f0:16:cf:a6:
         91:15:fc:0b:88:91:3d:6e:91:c6:49:5c:e1:db:be:91:17:8d:
         1a:1b:9c:5c:a9:cb:3a:b1:99:2a:d5:22:fa:24:82:7e:b7:50:
         70:b5:0a:ed:3e:ac:b9:2b:c7:d8:6a:a5:e6:1b:72:71:66:3b:
         0d:c0:90:b0:5f:42:15:e1:54:b1:5a:25:94:e6:97:86:3d:94:
         c8:46:e8:8e:68:54:b6:6e:d0:c7:43:ce:3a:f1:fc:a7:31:6e:
         7b:8a:39:b3:72:2f:9d:0e:40:5e:de:46:f0:4e:85:5f:6d:46:
         0d:16:94:42:60:93:81:2c:18:94:9a:bb:bd:2a:b8:a5:9e:cb:
         f9:ac:cd:53:2d:a0:4a:72:47:c5:eb:83:66:4d:cd:4c:81:4e:
         b0:54:94:27:d5:25:5c:0e:1c:61:76:98:84:4c:33:f7:d0:d0:
         6c:54:0a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 03:38:24 2026 by rpki-client