Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/ecbcbba9-6da7-3c0a-b83e-ba2b4f1490e1.roa
File:                     ecbcbba9-6da7-3c0a-b83e-ba2b4f1490e1.roa (raw, json)
Hash identifier:          VOB3oND/HwYX23xKIrR+KKO5E7cQ0+XJSsGJx8XyN8I=
Subject key identifier:   4D:73:41:1D:A7:98:61:26:35:66:45:25:3E:6A:97:50:86:5A:F5:12
Certificate issuer:       /CN=9f4a0908-708d-490b-9f22-60855d3d69b3
Certificate serial:       010D0C9F4328584EA79140323E9AE5E247B7D580
Authority key identifier: 4B:A1:AF:02:F6:57:F1:AC:8C:2A:41:4E:2F:85:84:70:50:DA:81:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/ecbcbba9-6da7-3c0a-b83e-ba2b4f1490e1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        167.234.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:40:32:3e:9a:e5:e2:47:b7:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f4a0908-708d-490b-9f22-60855d3d69b3
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3fbb2317-48d1-42bc-8720-7da3172dfda9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:81:32:f9:25:96:56:8b:f1:78:cf:42:64:8d:
                    f2:d3:5d:d9:0f:b9:fc:6c:d9:29:65:f9:76:8e:3d:
                    78:97:8d:13:31:e1:de:ef:33:3b:21:76:04:f7:9e:
                    17:49:34:9c:ed:de:4c:5a:b5:de:53:a2:0b:7e:a5:
                    09:75:0b:1a:f7:e4:4c:43:2e:5b:92:1a:d9:dc:c7:
                    f4:bd:bb:47:e3:7d:e9:8a:f4:db:bb:65:ce:62:94:
                    10:44:82:51:01:aa:58:71:c6:28:b2:02:dd:39:6b:
                    2b:b4:11:cb:ff:62:2c:5f:b8:3b:df:45:b7:54:99:
                    2f:bf:be:d5:b6:ae:67:ae:d0:a2:75:48:2b:c2:f4:
                    ff:69:16:e0:db:f5:45:24:3e:b2:a7:b9:45:73:a7:
                    aa:17:08:d1:73:1e:e3:fc:76:44:5e:31:2b:bd:c2:
                    6e:c1:d2:6f:66:75:88:ca:b3:66:f6:59:75:90:26:
                    73:e1:66:50:35:ee:45:b4:e7:9a:6d:d2:96:9b:86:
                    e0:4c:b3:f9:f5:9e:a0:c5:18:b4:56:5f:82:83:01:
                    4a:b8:54:c1:32:d9:c2:ee:30:67:2c:4c:91:8c:f2:
                    bc:5c:98:cf:9b:26:f5:d5:d8:fc:dc:a2:e1:06:3b:
                    a1:df:45:3f:3b:67:fc:c6:b1:c2:bc:11:ed:1d:03:
                    56:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:73:41:1D:A7:98:61:26:35:66:45:25:3E:6A:97:50:86:5A:F5:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/ecbcbba9-6da7-3c0a-b83e-ba2b4f1490e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.crl

            X509v3 Authority Key Identifier:
                keyid:4B:A1:AF:02:F6:57:F1:AC:8C:2A:41:4E:2F:85:84:70:50:DA:81:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.234.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ed:0b:91:80:21:68:98:72:d4:1d:7f:41:fd:7a:17:0c:66:
         fd:4e:e3:db:06:c0:4c:d4:89:92:43:e0:8b:2f:15:31:0b:31:
         8e:a5:11:a8:e8:30:42:86:28:b8:6d:14:21:9d:d7:ca:5f:ef:
         0f:dd:2b:fc:c7:ff:d3:1c:bb:5b:93:d0:c8:cc:fc:92:61:16:
         35:4c:7f:bf:60:76:06:ef:7e:38:cf:a8:ab:1e:c0:64:cf:01:
         f0:b4:26:67:00:99:34:84:ee:1d:67:8d:a2:56:2d:a1:14:f4:
         80:42:2f:0d:44:17:98:34:da:5a:b0:8c:4d:54:03:66:9d:27:
         c1:e3:a7:1a:d1:28:8d:a4:1d:da:13:69:22:60:14:ec:e1:f4:
         f2:f5:93:96:c0:0f:66:f1:fc:40:af:31:dc:78:3a:d7:ea:e6:
         1d:32:3f:c1:20:ea:63:a4:43:83:57:22:b4:0f:bd:c2:2b:1f:
         7d:a0:0a:82:f6:84:ab:44:e3:9e:58:e6:05:cd:1e:44:93:f1:
         85:4d:d6:8d:5a:0c:5b:fe:a3:e4:9b:3e:2d:d8:00:3a:88:aa:
         02:3a:41:53:bc:ca:8f:71:c7:18:7f:57:53:ed:6f:4a:47:7f:
         11:f2:cc:f0:3a:e5:f2:f7:9f:31:50:fc:49:0c:ec:44:20:48:
         8d:b4:70:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:53 2026 by rpki-client