Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/e54ae87b-de00-3927-aa34-2443b7874e14.roa
File:                     e54ae87b-de00-3927-aa34-2443b7874e14.roa (raw, json)
Hash identifier:          65ZgFcGLKyn6/pL1+mj6OxQrQqiR5Nw3wtWDqWoWddI=
Subject key identifier:   9E:FE:86:2F:E7:5E:C2:96:66:23:FF:4A:9C:D6:77:0A:16:7E:65:1B
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584B6EFA32D26F6223D142E45780
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/e54ae87b-de00-3927-aa34-2443b7874e14.roa
Signing time:             Mon 06 Oct 2025 16:30:44 +0000
ROA not before:           Mon 06 Oct 2025 16:30:44 +0000
ROA not after:            Sun 04 Jan 2026 17:30:44 +0000
asID:                     16509
IP address blocks:        167.176.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:fa:32:d2:6f:62:23:d1:42:e4:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Oct  6 16:30:44 2025 GMT
            Not After : Jan  4 17:30:44 2026 GMT
        Subject: CN=aaf5ae99-2d96-4a7e-909e-9be8bec30726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5a:be:04:60:8b:d7:8b:bb:d3:13:6b:77:ac:
                    0a:7f:08:75:21:94:94:9d:86:90:d7:4e:11:89:38:
                    9e:cb:8a:5b:b4:0a:f2:8a:06:94:22:e4:9e:26:f8:
                    55:4e:9d:c5:95:c4:97:6c:2f:4b:a7:54:46:79:20:
                    bb:f7:d0:28:ca:77:c9:7b:02:ae:69:25:4d:3a:33:
                    7a:d6:33:70:47:93:e9:84:c0:ab:95:bd:55:93:b4:
                    5e:17:e4:23:70:4d:1a:14:7b:23:cd:9d:b2:a5:6b:
                    41:bf:a3:28:c0:3f:f3:7c:81:18:fc:69:32:b3:af:
                    38:a0:14:81:bb:6a:a1:4a:b3:13:cf:69:96:53:46:
                    ee:6e:f5:54:df:9d:3a:61:d3:f0:52:c6:a5:cf:8c:
                    69:ba:75:d8:65:83:3b:31:8a:f9:14:34:0e:36:50:
                    20:e5:40:96:6c:48:11:63:8a:67:1c:96:06:75:83:
                    4e:ce:47:3f:49:1c:2b:c8:0b:72:13:67:93:dd:d4:
                    db:8f:f2:46:1a:1d:a7:4d:c8:70:20:a7:4c:19:57:
                    54:19:8e:ba:c4:36:37:ec:d2:41:6e:a2:49:e3:20:
                    de:52:01:27:fa:20:1b:b1:cd:d5:5c:23:72:e8:c1:
                    00:54:a4:1f:8d:67:20:cb:60:d4:18:53:6d:0e:b1:
                    63:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:FE:86:2F:E7:5E:C2:96:66:23:FF:4A:9C:D6:77:0A:16:7E:65:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/e54ae87b-de00-3927-aa34-2443b7874e14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:a7:50:d8:42:1e:e7:53:a5:26:44:37:db:9a:49:d6:32:eb:
         b4:18:91:16:f1:3c:b2:d5:03:da:6a:3c:b7:10:fd:b7:e4:0d:
         55:54:32:25:97:f8:d6:0e:b7:50:ba:fc:cb:3d:85:f1:e6:12:
         e3:95:d5:f4:c9:ce:bc:37:78:bd:e4:30:ec:26:67:56:bd:10:
         6b:52:95:77:1f:c9:d3:6a:5e:e8:fa:e0:41:2c:fc:da:4a:8d:
         57:f0:2b:31:4c:7f:f2:b1:72:80:8d:7a:7b:95:fa:c7:77:41:
         20:f7:e9:dc:ba:eb:ac:51:93:d3:b0:1d:67:3a:a1:c9:29:13:
         37:d9:69:44:10:c5:18:00:35:95:9f:fc:45:54:35:c7:31:fd:
         c6:1e:18:96:bc:69:06:58:b8:fa:59:a2:f1:56:96:43:ea:eb:
         c2:f3:f1:48:e5:d4:45:97:f7:0b:f6:54:24:5c:13:49:a4:8b:
         ea:0e:dc:88:3e:31:e1:72:a2:4a:b9:b6:ee:da:81:c7:52:47:
         e2:cc:ee:fd:6d:7c:b1:27:ee:09:27:f7:e2:dc:39:88:05:46:
         1a:44:6e:74:af:35:b1:90:21:0b:65:d7:be:4d:eb:eb:88:ab:
         02:95:20:9b:36:13:2d:1c:6e:eb:31:4e:97:5a:d9:40:31:c1:
         7b:9e:c2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 22:58:42 2025 by rpki-client