Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/6d70cc53-b157-3df4-baf6-a493f1610869.roa
File:                     6d70cc53-b157-3df4-baf6-a493f1610869.roa (raw, json)
Hash identifier:          6ddjldBfrfJenRP67J7sXHiRckC+mLMTQG1C1vEwCQI=
Subject key identifier:   D3:0D:25:09:3B:A9:14:EB:F6:85:8C:D8:AE:88:9E:DF:34:99:27:34
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F4328584F03A77DE21F510B96BFEBDC80
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/6d70cc53-b157-3df4-baf6-a493f1610869.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     398324
IP address blocks:        167.94.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:7d:e2:1f:51:0b:96:bf:eb:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=e3edcef6-295a-46c1-b031-f77cba74ea8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:48:40:b9:ff:41:6e:15:68:e9:80:bd:c3:
                    39:75:45:f8:34:0a:7e:fc:59:71:5b:28:8a:f8:80:
                    3e:50:1d:a3:31:9b:d7:97:73:6d:c3:32:c7:6d:b7:
                    03:77:53:82:c1:a6:50:a5:0d:a0:6a:bf:bb:de:95:
                    12:88:6e:43:a3:b9:7e:50:b7:cc:20:e8:fd:fc:2e:
                    81:e9:24:d1:90:28:1e:af:9b:5e:d7:95:de:be:1a:
                    cd:a7:35:82:3f:1b:41:ae:21:0d:64:c7:8f:95:d9:
                    7d:b1:bf:74:b6:8b:e0:d2:d6:de:c0:8b:a9:ed:ba:
                    8c:02:b3:dc:0c:d5:24:1c:8f:57:45:93:e5:aa:81:
                    ea:6f:d5:fe:a0:24:d0:6d:2b:30:a9:da:1f:da:39:
                    10:99:95:be:18:1a:3a:70:15:f7:7a:ef:ba:89:39:
                    ff:a0:ed:b8:86:3a:ac:4b:be:59:f2:f5:61:c4:d8:
                    fe:05:bf:ff:55:0d:67:ca:4b:83:cd:4e:ab:db:41:
                    95:60:b4:4f:47:d1:79:3d:eb:c3:c2:de:2c:96:e8:
                    c0:f5:1f:35:1c:90:a8:5c:cd:ef:de:2a:b7:a7:9d:
                    9d:b1:e1:86:a6:cb:b3:2a:b1:85:3b:31:de:a6:4d:
                    71:ad:81:1d:eb:1d:77:fa:06:0e:c0:de:c7:5a:36:
                    da:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0D:25:09:3B:A9:14:EB:F6:85:8C:D8:AE:88:9E:DF:34:99:27:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/6d70cc53-b157-3df4-baf6-a493f1610869.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.94.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:cc:46:7c:b3:4b:11:0a:d4:b0:a3:6d:bd:a9:9c:ab:0f:ab:
         06:2d:3a:fe:54:9a:9b:6b:40:1a:f3:d3:bc:cb:a7:1e:25:58:
         9e:ea:f8:76:dd:76:e9:87:f6:ba:7c:45:9d:ec:3c:de:17:19:
         d9:ba:61:cb:d1:88:3c:ce:16:8b:f8:ea:45:28:d9:17:9e:17:
         dd:b5:ea:05:cb:4e:10:6a:85:38:25:e2:72:5b:ea:ff:c9:ea:
         06:42:59:29:66:e3:15:30:d9:09:22:5d:1b:de:3b:b8:cf:9d:
         ee:3a:97:05:59:0b:dd:fb:a7:c5:00:34:b7:02:0d:20:5e:a8:
         32:27:cf:cd:fe:1f:f9:98:43:06:63:30:02:73:4b:2b:e3:06:
         07:5e:20:8e:b3:b3:d3:3f:2d:5d:51:17:62:11:16:f8:f4:8d:
         df:71:ec:7f:a9:2e:67:7f:22:e8:da:8c:10:93:d1:b2:b2:b7:
         24:75:a0:81:a3:70:86:c6:4b:96:a8:f9:66:ab:ed:46:f7:57:
         83:55:0a:e6:ab:8d:fa:ac:7e:4f:94:46:9c:c6:06:68:b1:5d:
         01:d0:5e:1c:73:69:bc:d3:b0:72:03:00:84:38:32:10:0b:2e:
         ea:af:f7:63:25:0d:10:f0:9a:53:a7:3c:00:2d:d3:1a:25:18:
         7a:ca:b6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 09:45:09 2026 by rpki-client