Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/716e143f-946d-3424-9321-a2ad6dc97697.roa
File:                     716e143f-946d-3424-9321-a2ad6dc97697.roa (raw, json)
Hash identifier:          7bOsukqtgR+pNkn0dB4pwXgSJEiD1JQWIlBZ4mIyyZU=
Subject key identifier:   FC:F9:E6:0B:97:A2:17:9A:CF:7D:7E:31:82:23:4E:BC:9C:74:3D:65
Certificate issuer:       /CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e
Certificate serial:       010D0C9F4328584C8FA18377CF203A5941431000
Authority key identifier: 2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/716e143f-946d-3424-9321-a2ad6dc97697.roa
Signing time:             Sun 18 Jan 2026 02:00:31 +0000
ROA not before:           Sun 18 Jan 2026 02:00:31 +0000
ROA not after:            Sat 18 Apr 2026 01:00:31 +0000
asID:                     33245
IP address blocks:        167.206.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:8f:a1:83:77:cf:20:3a:59:41:43:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e
        Validity
            Not Before: Jan 18 02:00:31 2026 GMT
            Not After : Apr 18 01:00:31 2026 GMT
        Subject: CN=f3c42a8d-fde1-4a91-a93b-6003d9f5089b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a4:7a:f8:94:e1:17:34:f9:87:38:60:4f:5c:
                    27:59:52:72:25:03:a3:65:39:a5:66:cd:8a:27:49:
                    48:23:b9:fa:45:40:e4:7b:81:21:23:cb:0c:c7:32:
                    0e:a5:2e:c1:eb:68:d2:4b:d8:14:d4:6a:47:8c:e3:
                    da:2a:bd:ff:fc:cc:81:61:7b:04:ea:cd:f8:80:67:
                    28:a7:7f:3f:97:1d:2f:dc:3f:09:37:1b:11:52:43:
                    ee:02:49:4a:ed:a2:03:03:00:5c:9f:d2:c9:39:8f:
                    1d:d1:6d:06:33:8b:13:a8:bc:73:79:25:bc:52:8b:
                    39:ec:6c:13:2c:02:f3:64:9c:3c:33:f4:84:71:1d:
                    bd:f9:f8:51:d3:1a:a9:71:32:d4:a6:73:8d:d0:74:
                    9a:31:3e:3d:30:f9:57:f3:c2:ab:a9:4c:cc:dd:62:
                    60:6a:c4:1f:42:59:9b:16:66:61:c3:31:85:01:50:
                    e5:de:6a:80:2b:f5:d7:56:2e:73:fd:1f:73:40:e2:
                    79:07:19:a8:d6:6e:32:03:e5:95:a4:df:0b:a4:79:
                    2f:15:9e:29:2d:06:4e:72:14:ef:15:b7:a8:80:bb:
                    0c:ee:5e:d7:53:08:36:97:1c:fd:c7:db:87:55:e8:
                    3d:27:25:9d:36:93:09:1c:91:f5:a0:46:87:a2:e3:
                    e6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F9:E6:0B:97:A2:17:9A:CF:7D:7E:31:82:23:4E:BC:9C:74:3D:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/716e143f-946d-3424-9321-a2ad6dc97697.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl

            X509v3 Authority Key Identifier:
                keyid:2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.206.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:6d:cb:79:5d:ae:92:b9:f8:8c:95:56:60:f1:b2:ab:c1:a9:
         de:27:8f:03:9f:3d:a1:41:98:79:35:2e:4b:a2:b2:3f:27:b1:
         04:fb:31:1e:58:b6:9b:dd:c6:22:49:63:f5:6f:86:75:44:45:
         9e:5d:c2:0d:56:2a:da:2c:f6:21:ac:0e:7c:c2:99:00:1e:9b:
         2f:8b:c6:7e:fa:c1:54:87:5e:fc:e7:50:d4:80:c9:fc:31:9e:
         29:7c:a8:9f:cd:41:a5:6f:af:36:c1:89:ea:46:52:ff:be:8d:
         f6:91:44:8f:6f:9f:fa:00:e3:95:de:cd:a4:3c:ef:f3:8e:77:
         b7:dd:55:b4:cd:7b:28:26:88:09:66:de:06:85:74:97:fc:73:
         2c:46:ee:c3:cc:18:57:5a:b2:89:0d:95:d2:65:00:ad:c1:98:
         f8:7b:8d:f6:f5:f6:2b:74:36:cc:13:df:11:16:58:43:2a:ff:
         2d:65:5a:57:d1:90:33:96:fb:13:76:fc:53:d6:4c:8f:de:95:
         6f:43:c5:e9:7c:ef:02:87:a6:e4:94:dc:09:49:cc:0b:a3:52:
         57:e0:12:1d:84:1a:ae:12:0a:54:6a:c9:56:aa:58:c7:64:4e:
         fb:17:99:29:c3:40:78:09:40:69:dc:a4:26:d0:26:d3:b9:6e:
         bf:cb:d7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:28:17 2026 by rpki-client