Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/4c6d56b7-a1aa-38f8-b748-aa85d63dc817.roa
File:                     4c6d56b7-a1aa-38f8-b748-aa85d63dc817.roa (raw, json)
Hash identifier:          p/i5fFe/gweoj19RqR7dQ7AWuKZT0mPl2fmQmNBgNtw=
Subject key identifier:   06:25:A1:3B:A9:E9:F9:8A:EE:57:52:0D:60:AE:87:C9:AC:4A:4F:D8
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584EF3C7949DA2120962B4CD5D00
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/4c6d56b7-a1aa-38f8-b748-aa85d63dc817.roa
Signing time:             Tue 25 Aug 2026 08:32:04 +0000
ROA not before:           Tue 25 Aug 2026 08:32:04 +0000
ROA not after:            Mon 23 Nov 2026 09:32:04 +0000
asID:                     400903
IP address blocks:        167.234.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f3:c7:94:9d:a2:12:09:62:b4:cd:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Aug 25 08:32:04 2026 GMT
            Not After : Nov 23 09:32:04 2026 GMT
        Subject: CN=9dd0e750-daf5-405c-8173-5190ffcc1a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:81:8b:8a:2a:16:b9:fb:8a:c9:b7:ed:39:1d:
                    f6:b6:9c:bc:ce:34:c1:aa:3f:c2:dd:aa:16:be:3d:
                    06:3e:d1:38:4a:7d:9b:49:39:80:13:3e:66:38:5d:
                    f3:2a:5d:6c:54:01:69:59:50:cb:ad:27:6d:63:69:
                    ad:d8:51:ea:4e:44:01:bd:92:25:73:7a:92:33:bb:
                    f8:71:3d:69:10:20:8c:56:c8:2f:d3:bc:bb:ae:ef:
                    97:05:65:8e:ce:cb:56:6b:35:53:c5:29:02:38:61:
                    7a:10:28:b6:ad:41:dd:c4:f9:2a:b5:26:41:db:3e:
                    53:12:a7:48:1e:32:d0:4b:1b:c2:33:85:4f:3d:0e:
                    e3:46:db:9a:2a:59:e1:c1:74:04:c0:13:75:33:33:
                    6f:58:ef:11:ff:b6:17:94:77:0c:66:6c:c7:58:4a:
                    80:94:6a:12:5f:e5:f8:e8:3c:35:8f:c8:e3:50:86:
                    61:a2:ce:39:d6:dc:ac:5d:72:a0:03:71:0a:b3:5e:
                    38:fe:07:cf:79:53:bd:bb:ed:06:58:ab:ef:22:1f:
                    46:da:89:33:a5:09:7e:a4:6a:09:19:b5:9d:1d:f0:
                    06:02:57:54:21:bc:92:79:28:fa:32:8d:74:05:64:
                    03:da:4d:4e:b3:20:13:b1:62:3d:e9:59:76:da:06:
                    88:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:25:A1:3B:A9:E9:F9:8A:EE:57:52:0D:60:AE:87:C9:AC:4A:4F:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/4c6d56b7-a1aa-38f8-b748-aa85d63dc817.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.234.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:9b:e2:1d:49:9b:7b:fb:2b:df:c0:4e:8b:38:81:53:a8:f6:
         02:35:5a:90:e0:1b:02:f4:f7:6c:8a:79:d3:4e:44:1b:ed:0e:
         ff:16:83:f6:6c:cb:dd:15:21:1b:dc:6a:47:e1:0e:9c:de:c2:
         e1:cf:2a:91:63:49:06:92:1e:46:c7:c2:4b:80:07:a5:eb:31:
         4b:64:59:62:ad:ec:e7:4f:1f:3c:e2:8e:f9:c8:ee:09:18:aa:
         20:30:fc:2b:eb:f0:d3:0a:19:47:5f:54:02:0b:81:07:8e:ab:
         6f:93:47:f6:96:e0:e1:95:46:aa:43:7d:a1:a0:6b:2e:b0:1c:
         72:3e:e2:36:95:20:2b:1d:2f:49:08:af:87:a4:30:0b:3a:e4:
         e2:77:56:af:ca:c4:36:8d:d0:33:fc:b2:a0:3d:fc:f6:68:a7:
         74:38:0b:35:32:28:89:69:7e:58:39:38:d3:a9:9b:66:72:ed:
         81:78:3f:b5:5a:06:95:c1:a2:dd:06:61:05:6d:13:3b:67:42:
         0b:45:3c:0e:e7:58:3b:a6:f3:e7:80:5d:14:9a:d0:10:92:b2:
         71:14:ca:9c:03:f9:64:08:ca:0e:86:97:46:48:f0:03:05:8b:
         57:f0:ca:9f:75:58:3b:4a:6e:67:b1:2e:c6:7e:a7:ce:09:44:
         0c:a4:2e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 00:39:46 2026 by rpki-client