Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/42580d7e-7008-3503-91bc-d3e56a775613.roa
File:                     42580d7e-7008-3503-91bc-d3e56a775613.roa (raw, json)
Hash identifier:          81gCmAuZxbMHR1+BaqbHCLXOBpZt30mVkLZZFqqE1Kw=
Subject key identifier:   3F:1D:45:66:84:0D:CB:4C:12:83:96:7D:73:19:D5:77:97:37:17:05
Certificate issuer:       /CN=9f4a0908-708d-490b-9f22-60855d3d69b3
Certificate serial:       010D0C9F4328584D62A67568B221B8DF71EA80C0
Authority key identifier: 4B:A1:AF:02:F6:57:F1:AC:8C:2A:41:4E:2F:85:84:70:50:DA:81:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/42580d7e-7008-3503-91bc-d3e56a775613.roa
Signing time:             Fri 03 Apr 2026 16:06:11 +0000
ROA not before:           Fri 03 Apr 2026 16:06:11 +0000
ROA not after:            Thu 02 Jul 2026 16:06:11 +0000
asID:                     16509
IP address blocks:        167.234.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:a6:75:68:b2:21:b8:df:71:ea:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f4a0908-708d-490b-9f22-60855d3d69b3
        Validity
            Not Before: Apr  3 16:06:11 2026 GMT
            Not After : Jul  2 16:06:11 2026 GMT
        Subject: CN=0959ff59-f853-464f-9bf1-9779a1b9e317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4c:ad:f0:85:54:b6:6a:5f:bc:99:70:21:63:
                    2b:1f:8d:05:d4:f5:d8:a3:de:13:40:9f:c2:50:79:
                    b6:ec:00:e2:8c:1f:b5:7e:a7:f1:5b:d1:79:5c:1a:
                    c6:39:39:b8:70:fa:e8:78:14:cc:39:c7:08:f3:b7:
                    6b:35:15:6d:8e:1b:ac:43:0c:51:83:77:d4:a4:eb:
                    57:e3:b3:1d:fd:6b:5e:6c:ce:69:85:23:0c:ab:f6:
                    d4:11:4f:f7:8b:d4:04:47:45:1e:a1:ce:80:43:ba:
                    80:ad:7b:ad:64:46:07:be:48:55:92:68:69:fb:84:
                    fa:d7:9a:3b:05:8c:40:d0:7e:d1:03:8d:0a:08:99:
                    54:13:4e:8b:60:23:f0:b7:d4:f7:0f:96:d4:58:33:
                    69:be:c5:bb:f3:ab:8c:dc:f9:4f:c3:fe:53:d6:84:
                    4b:7b:a4:41:9b:9f:3a:1c:8a:e4:e8:85:f6:43:21:
                    02:51:ad:9f:14:f0:c3:87:a1:01:7e:9d:01:0e:29:
                    60:5e:26:97:18:34:91:67:9e:42:b9:86:1d:f8:07:
                    af:fc:59:41:81:1e:95:b3:e5:0a:3f:d6:07:c4:1a:
                    c8:57:4a:ac:09:d7:22:72:5e:a6:7c:02:5c:16:7f:
                    70:97:85:e9:91:ff:2f:0f:f5:46:7d:ca:10:87:f8:
                    7e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:1D:45:66:84:0D:CB:4C:12:83:96:7D:73:19:D5:77:97:37:17:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/42580d7e-7008-3503-91bc-d3e56a775613.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.crl

            X509v3 Authority Key Identifier:
                keyid:4B:A1:AF:02:F6:57:F1:AC:8C:2A:41:4E:2F:85:84:70:50:DA:81:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.234.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:ca:05:bb:08:71:46:ea:02:68:57:15:09:a2:dd:cc:76:56:
         30:ad:fd:cd:7f:28:a4:fc:86:62:2e:44:61:0c:95:7a:d9:fd:
         e8:3d:fe:fe:37:97:55:cd:6f:cd:3e:5c:79:15:4d:1e:09:fc:
         76:b0:d3:3b:1e:3b:d4:3f:88:5b:4a:08:0a:f0:4f:61:bc:a8:
         d4:93:b4:ad:c9:e3:53:09:50:d0:a4:49:f0:2f:56:3e:b4:3e:
         36:5f:59:36:4b:84:10:d0:8f:9a:7a:ea:0a:c6:29:4b:84:97:
         82:7b:7c:d5:e4:3f:d5:a5:35:b1:2c:52:6d:dd:f4:b6:c2:4d:
         07:07:91:6d:db:5f:6c:98:ac:08:30:44:3f:20:ef:d2:78:31:
         79:2a:26:2f:e0:f7:cb:f4:67:b9:69:cd:14:a2:40:8c:b0:c8:
         a0:08:14:11:41:6e:1e:d5:f3:59:d2:99:91:c7:e4:34:63:25:
         b0:c3:7c:e5:9a:88:30:17:41:28:32:0f:8a:65:ba:87:dd:0d:
         3c:34:47:9b:67:33:eb:0f:e8:1c:1e:15:84:70:fc:6d:89:a1:
         d2:ac:87:12:7e:c8:1c:61:64:07:41:93:9f:51:e1:c5:6a:02:
         f3:e9:47:fd:85:d9:20:10:a0:d0:60:06:1c:15:1e:5f:2a:c2:
         51:9c:30:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 21:39:10 2026 by rpki-client