Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/c6c0dc72-6d3f-3691-8af8-f16c688a8509.roa
File:                     c6c0dc72-6d3f-3691-8af8-f16c688a8509.roa (raw, json)
Hash identifier:          k4ZVHYOe57hky2Vi28fo0q18zDLwJxjtVYIuAA/E02M=
Subject key identifier:   FE:79:CB:00:30:89:19:55:41:6C:46:31:4A:0F:10:C6:C3:8B:19:DA
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584B6EFAA6EA0ADE7C6CA540A780
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/c6c0dc72-6d3f-3691-8af8-f16c688a8509.roa
Signing time:             Mon 06 Oct 2025 16:31:39 +0000
ROA not before:           Mon 06 Oct 2025 16:31:39 +0000
ROA not after:            Sun 04 Jan 2026 17:31:39 +0000
asID:                     394089
IP address blocks:        167.176.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:fa:a6:ea:0a:de:7c:6c:a5:40:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Oct  6 16:31:39 2025 GMT
            Not After : Jan  4 17:31:39 2026 GMT
        Subject: CN=94840706-5682-445c-a3ff-ddaa933c959a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d3:18:ce:53:5c:3b:1c:a8:b6:46:c6:f6:66:
                    7e:58:01:cc:10:b4:3b:9b:f9:42:41:80:9f:46:c2:
                    1a:91:cc:61:88:4a:33:0c:f8:e2:b2:98:76:fb:ce:
                    67:5d:e7:0d:7a:3a:0f:1d:5c:0b:c1:6a:e2:48:b0:
                    6d:f0:29:3e:5a:d6:1b:71:83:fc:3d:c2:ae:aa:2d:
                    d6:23:7d:21:7a:5b:3f:46:d2:ab:65:b4:27:a4:96:
                    30:c2:f7:39:3a:fe:17:25:63:8c:05:aa:0e:ef:b6:
                    67:9d:8f:08:3f:f3:75:39:6f:33:c8:6a:70:7c:76:
                    73:8a:16:74:cc:a2:e1:2a:db:7f:5d:6e:5c:26:aa:
                    08:35:c0:22:e2:47:7d:df:db:60:dd:dc:4e:48:b3:
                    d5:49:5e:ce:cf:53:6b:82:2d:be:26:89:5f:69:e5:
                    6b:a0:83:91:02:a6:93:e8:3f:66:09:c0:f4:e6:d7:
                    9f:60:d0:bb:50:c9:4e:f0:e6:08:26:2f:30:92:3c:
                    76:90:bf:69:f1:d3:49:18:1d:c8:76:84:12:b9:95:
                    2a:de:e1:5a:04:e1:c9:61:cd:f8:fc:d0:42:36:53:
                    93:5f:b2:ca:08:56:2c:45:5f:44:fc:1c:71:74:af:
                    90:96:de:78:ba:34:42:20:fb:ad:c4:0d:92:ef:ed:
                    70:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:79:CB:00:30:89:19:55:41:6C:46:31:4A:0F:10:C6:C3:8B:19:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/c6c0dc72-6d3f-3691-8af8-f16c688a8509.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:22:65:6e:18:cc:ac:95:e0:f9:d9:81:86:56:c1:64:31:a6:
         08:21:49:f7:86:aa:4a:62:28:b1:5c:07:3e:3f:89:2f:f9:de:
         a7:73:fc:b1:44:da:70:f6:b0:2f:54:ca:e2:15:07:50:3c:bb:
         ba:a2:79:a8:07:49:c8:25:d9:41:96:70:82:6b:d9:9b:88:03:
         aa:b8:83:0c:ff:8f:3e:2c:83:25:72:10:e8:ea:00:ab:54:78:
         c6:27:29:ed:58:a5:f7:37:09:05:1d:07:70:e8:3a:8d:74:17:
         fd:27:6d:63:99:25:89:ba:a0:e1:31:b6:e4:09:1d:43:64:00:
         31:63:79:72:ee:4b:bc:73:f9:98:6b:a5:40:6c:89:27:36:70:
         d8:b7:19:a9:69:fc:78:bb:d2:fe:c8:ad:b7:6a:55:74:d3:f1:
         35:28:10:14:9d:1a:5a:13:b4:b9:45:64:9f:48:39:fa:1d:14:
         c0:40:2b:68:73:b7:7c:58:4a:87:a0:bd:e0:1b:f8:59:36:94:
         12:b1:33:30:94:fd:6d:4b:59:d2:16:67:a7:40:3a:00:4b:21:
         48:1a:03:36:8b:71:2f:28:f0:eb:a9:e2:01:ab:c6:5a:f9:5e:
         80:bf:4f:db:9e:e6:de:aa:cd:40:91:ce:8a:a7:7c:96:23:39:
         4d:1e:75:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:11:30 2025 by rpki-client