Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/07035a44-8ee6-3179-a861-75b7ee9f686e.roa
File:                     07035a44-8ee6-3179-a861-75b7ee9f686e.roa (raw, json)
Hash identifier:          Z7zl4Fpk3SZUWqb+hI1oSR5hOOVPZAsX0RuSSFRPEEs=
Subject key identifier:   6D:FC:34:C6:1B:59:4F:67:2A:1A:59:97:33:CA:BD:DE:45:66:D3:FC
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584EB2B1FE54B9519F6D443E6600
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/07035a44-8ee6-3179-a861-75b7ee9f686e.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     396982
IP address blocks:        167.176.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:fe:54:b9:51:9f:6d:44:3e:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=436d0e5c-e3ba-4dbd-9bb1-af7772b55660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4a:0d:1e:c1:eb:07:ef:47:3f:50:b9:4b:74:
                    41:31:48:32:2d:1c:89:69:9e:24:e6:bc:5c:dc:4d:
                    49:3e:90:c6:79:8f:a2:b0:1c:3b:b9:22:49:79:54:
                    f6:b0:24:7c:f3:ec:37:bc:4a:89:92:4d:72:2e:e9:
                    ab:36:b9:1a:67:c3:0a:9a:cf:11:e2:bd:95:cb:aa:
                    7e:93:ce:a7:ba:fe:4f:77:93:c8:24:cf:a0:65:63:
                    a4:67:57:ee:04:df:e7:a8:f9:bf:f2:85:68:18:1f:
                    b9:50:f0:2a:fd:17:2c:b8:cb:33:e4:b7:bf:22:63:
                    7e:d8:b7:7a:3c:18:c6:30:1e:25:4e:59:ee:c6:9a:
                    da:15:2e:7a:1e:0c:46:fe:00:7c:c8:c4:a0:00:52:
                    16:9c:d6:43:4d:8f:1f:b0:33:e2:7e:86:f0:cb:65:
                    f4:86:ad:c3:83:9b:10:14:9d:ed:71:52:f4:a5:db:
                    59:c8:88:86:56:e0:03:0b:3e:b4:05:d5:8e:0c:4f:
                    1c:f7:8e:9d:ef:87:ca:4f:26:25:e2:16:f1:67:0c:
                    f2:c3:0f:88:4a:f3:cc:59:f2:e5:d6:5e:fe:42:a6:
                    05:f5:65:75:c2:80:5d:9d:28:fa:36:bb:17:e1:03:
                    a1:e0:89:ce:6a:f3:a5:ff:e8:1b:24:70:5a:ac:ec:
                    59:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FC:34:C6:1B:59:4F:67:2A:1A:59:97:33:CA:BD:DE:45:66:D3:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/07035a44-8ee6-3179-a861-75b7ee9f686e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:3e:21:d1:f9:4f:d8:84:f4:8e:50:9b:19:b7:f8:f4:2c:6c:
         52:9c:9a:7f:45:ed:de:a4:3e:4c:9a:46:29:a4:2b:fc:31:2f:
         6b:fb:9c:a8:2f:30:c1:96:38:03:60:c9:fc:c7:1e:62:58:cc:
         50:5e:22:4e:b7:7e:db:d4:ec:1c:59:25:b9:97:cf:ae:43:8b:
         38:6e:a8:e4:f2:15:56:9a:79:3f:81:bc:37:b8:d5:c4:c9:00:
         95:cb:02:f8:f1:99:a5:41:79:97:5b:98:6b:5c:30:84:c3:9e:
         cc:d3:f5:7d:02:14:cb:1e:a8:70:15:f7:d5:97:d3:24:e7:e3:
         d1:7f:0e:7b:65:ad:99:3c:f8:27:cb:cf:4e:98:ac:dc:ce:30:
         3f:c4:61:e3:fe:f5:08:cb:37:e1:9a:60:57:64:fb:19:4f:3b:
         ab:a8:54:ca:4e:63:13:ac:eb:c0:f8:33:aa:9e:16:95:94:e5:
         81:d6:bf:a1:23:f6:ec:2d:85:a3:e1:d6:4f:e8:e4:96:04:a9:
         4e:cc:d7:25:37:d4:76:bf:62:61:75:16:9f:d5:c9:c4:67:10:
         a5:37:46:ff:4e:cf:0a:d9:e3:66:1d:c3:52:13:22:08:c7:86:
         ee:9f:b8:ba:c0:69:83:87:bf:91:ba:0f:d1:c5:be:55:67:fd:
         a6:02:a3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:13:55 2026 by rpki-client