Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2/2c00b969-31c6-39cf-887a-d4c674d20b23.roa
File:                     2c00b969-31c6-39cf-887a-d4c674d20b23.roa (raw, json)
Hash identifier:          uqi7cXDh7KfAFYWQ0h8B4wyo9j36uYzis1fIMwrO7L4=
Subject key identifier:   2F:DC:4A:52:EB:7F:06:40:5C:95:BE:CF:09:75:C2:0F:5E:2C:0E:B1
Certificate issuer:       /CN=a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2
Certificate serial:       010D0C9F4328584EC20C657EC0570073BCA67540
Authority key identifier: 39:D9:61:2C:61:AC:B8:5B:95:58:7F:A5:1C:AF:6E:31:87:58:78:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2/2c00b969-31c6-39cf-887a-d4c674d20b23.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     40147
IP address blocks:        170.76.222.0/24 maxlen: 24
                          170.76.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:65:7e:c0:57:00:73:bc:a6:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=3f95c3fa-6650-4956-a7fc-5d7120c518d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0b:bf:dd:d9:e7:4e:13:08:7e:c3:a5:77:44:
                    1f:9c:7f:bd:1c:da:cc:68:4c:a9:ad:fc:b7:8b:81:
                    4f:2c:b3:34:c3:23:89:a4:1b:a9:cd:18:89:04:f1:
                    88:1c:1e:c2:2e:00:29:23:0f:f2:6a:05:c3:3f:64:
                    eb:85:ea:0f:57:15:fa:2f:da:ac:48:c9:e1:49:1b:
                    3d:84:b9:9b:1d:0b:72:fd:a6:a8:51:28:ad:ba:38:
                    0f:2d:bd:6f:b4:0b:a5:13:c9:3f:c7:2d:f6:57:72:
                    ea:1b:39:cc:4b:85:eb:7a:c1:52:58:e8:87:cf:49:
                    87:9a:38:39:f9:55:8f:2b:1a:ac:55:87:94:b4:9c:
                    a0:53:25:e7:bb:e4:a5:a3:1b:e3:53:49:a0:95:a9:
                    fd:b4:f8:c0:73:90:b5:4a:40:d1:24:b7:b1:da:8b:
                    45:22:9d:0b:d5:c2:ac:06:a9:dd:0d:ed:d7:8a:72:
                    c1:5a:9e:55:92:79:91:de:d7:25:dd:64:bc:b7:58:
                    fe:51:dd:62:c9:e6:65:95:00:8d:fe:af:ac:89:9d:
                    1e:e7:11:35:2d:b3:29:48:aa:25:2a:47:bd:66:1f:
                    81:48:61:af:cf:b2:3f:76:46:8c:23:e2:83:24:01:
                    00:6a:ac:38:9a:df:47:96:58:a6:10:e6:96:ce:54:
                    83:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DC:4A:52:EB:7F:06:40:5C:95:BE:CF:09:75:C2:0F:5E:2C:0E:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2/2c00b969-31c6-39cf-887a-d4c674d20b23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2.crl

            X509v3 Authority Key Identifier:
                keyid:39:D9:61:2C:61:AC:B8:5B:95:58:7F:A5:1C:AF:6E:31:87:58:78:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.76.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:61:5d:2a:00:3b:79:6d:2a:83:49:5f:d2:c4:d8:78:f3:1a:
         43:3e:b7:a7:1e:db:22:a6:80:e2:24:14:14:51:ad:31:c4:e9:
         6e:8e:1b:c2:bf:bb:63:f0:ad:ee:ec:83:93:f8:f7:3c:7d:24:
         52:a6:14:4d:4f:3f:41:7c:13:2a:1a:a8:6d:e8:71:cf:ce:eb:
         41:cb:26:f2:01:f3:cd:f9:12:1f:70:09:7c:9b:11:d1:ff:9c:
         be:fc:38:5a:ec:5a:de:a9:52:fc:30:4d:bf:e2:69:41:2b:2d:
         db:70:ba:68:da:a9:17:fa:2e:a5:cc:4b:13:c2:45:87:5e:75:
         96:af:0b:ba:1d:b2:fb:99:8a:bd:ca:90:52:a6:23:4a:d6:f5:
         f7:69:2b:54:2e:61:f0:07:35:32:69:39:00:5b:23:cf:58:90:
         a9:d8:54:9e:02:4c:37:c1:6a:74:84:78:4b:5e:f7:ab:ec:dd:
         a4:65:71:db:71:46:a9:8f:01:ee:34:88:28:57:e9:3f:c8:2d:
         a2:85:86:2a:95:29:ae:33:10:16:91:9d:6f:1f:66:d2:d9:a6:
         c6:e3:1a:c1:b7:55:52:f0:f7:a2:ea:c0:98:1f:59:20:c0:66:
         fc:f5:24:2c:c5:ba:10:15:c2:01:e2:4d:2f:1a:0b:ad:3c:ea:
         15:66:1d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 21:18:28 2026 by rpki-client