Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/18ef6271-3783-3ae3-91b1-58c2dcf0c857.roa
File:                     18ef6271-3783-3ae3-91b1-58c2dcf0c857.roa (raw, json)
Hash identifier:          uAFMAPBqaEGgdvfbkreEhtIHoTo0NW44b20q9JjU3fY=
Subject key identifier:   9F:DC:93:32:2A:D4:95:6A:13:0F:8C:C1:6A:6E:A4:6E:17:CD:40:A0
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584EE0C215D0E41659D720AA0E20
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/18ef6271-3783-3ae3-91b1-58c2dcf0c857.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     22504
IP address blocks:        76.164.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:15:d0:e4:16:59:d7:20:aa:0e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=a83a1e65-056f-474a-9006-e171026541d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a7:68:f5:8f:54:80:c0:3f:67:f1:fa:05:4c:
                    57:6c:b8:dc:60:5a:59:58:ab:ba:0a:9a:3e:b8:24:
                    6d:62:2c:12:26:5e:55:0b:f7:b6:49:54:75:fb:65:
                    99:85:9a:ef:de:3a:75:e1:67:b9:d8:db:03:35:a6:
                    07:11:13:4c:f9:38:4b:da:c9:44:01:0d:97:fe:44:
                    d8:51:ce:b7:4e:78:f5:5a:6c:05:a5:a9:4c:45:c2:
                    8a:57:31:e8:d4:71:ae:f8:f7:62:91:6a:67:ea:38:
                    5f:24:ad:3e:15:41:da:5a:cb:99:9d:24:7c:4d:0c:
                    5d:1b:fe:98:e4:04:d3:21:c4:cf:66:9d:a0:65:f4:
                    fd:ee:8f:15:bd:a9:40:cf:87:5f:8a:72:99:0c:ac:
                    67:9c:10:61:bb:ef:54:ef:4f:66:46:1b:7e:7e:c3:
                    a2:31:4d:d3:3c:8a:6e:fa:dd:19:df:c4:10:7d:8b:
                    59:86:5a:52:3f:65:d1:49:3a:f1:a8:3d:59:4c:a4:
                    00:4f:ce:5d:88:e8:64:09:c4:54:e7:30:b0:19:42:
                    ef:27:ad:1b:77:51:2f:65:85:8f:1f:a2:0a:4d:47:
                    5d:b3:fa:45:f2:d1:2c:16:15:a1:ed:b2:05:f0:30:
                    48:69:96:8a:98:ad:d4:5e:f0:93:a9:84:e3:59:e6:
                    87:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DC:93:32:2A:D4:95:6A:13:0F:8C:C1:6A:6E:A4:6E:17:CD:40:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/18ef6271-3783-3ae3-91b1-58c2dcf0c857.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:1e:62:13:77:e2:e3:33:73:3f:65:f5:6d:78:0f:4b:c5:f7:
         c9:7e:77:ab:5a:dc:35:32:f9:45:71:1f:97:28:d3:1b:98:04:
         16:68:d6:78:4a:9b:4d:18:f1:6f:c1:b4:8b:99:eb:5d:9b:eb:
         ca:d9:26:d0:e2:1f:64:1d:8f:f5:45:dc:0d:89:7f:83:03:c6:
         97:bd:aa:8a:bd:85:0f:35:af:3f:bc:4f:6a:70:b8:c4:98:65:
         01:38:4c:16:ec:0e:35:3d:ae:85:43:14:0d:13:45:9a:e5:06:
         11:52:35:88:5a:7f:e9:fc:08:d4:0d:39:5f:d7:80:d1:93:7e:
         f4:95:fd:cc:3b:67:b6:12:eb:ed:39:a4:eb:b1:67:ed:b3:c2:
         2e:b9:99:e5:63:33:d3:78:cb:73:dd:9b:23:94:29:79:45:c8:
         16:13:02:5e:74:f3:b5:b3:21:b7:72:67:de:81:e3:51:88:1f:
         9e:7b:a1:42:38:85:a7:7b:3c:dd:56:91:0f:fd:7f:63:b6:47:
         ff:ac:4a:fc:ab:df:a8:33:9b:e3:ee:97:ba:be:72:db:c3:0a:
         4a:6f:93:18:f1:5c:8a:10:f7:f0:10:60:98:04:11:8e:7c:56:
         46:f1:81:c0:22:cb:60:36:42:33:82:f5:5a:41:2b:0b:17:23:
         72:83:cd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:38:13 2026 by rpki-client