Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/070da204-b714-36a4-b828-67f11d0cc12c.roa
File:                     070da204-b714-36a4-b828-67f11d0cc12c.roa (raw, json)
Hash identifier:          43TqD07t1m0DQVbLNKoDrMh7Qz+pgf2MHrlgDtwDPW8=
Subject key identifier:   86:5F:62:E3:9A:3A:B7:33:6A:5C:7E:F4:D0:F3:1E:EE:A0:94:BD:40
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584EB2B1F6E2B3D59DBFAAB8A700
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/070da204-b714-36a4-b828-67f11d0cc12c.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     12037
IP address blocks:        167.176.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:f6:e2:b3:d5:9d:bf:aa:b8:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=80dd1c05-a5c9-47d0-ade6-e3e2e78651d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:35:6f:05:4c:ff:c3:47:d2:75:39:08:50:bf:
                    2b:dd:c2:9d:92:65:7a:b9:fb:ed:c6:51:3f:f0:e5:
                    a8:dd:03:74:c9:98:dd:ea:92:d0:4b:7d:81:f5:3d:
                    29:7d:5d:1d:34:9a:d2:e6:2e:cd:f8:40:30:32:5d:
                    4d:3f:d0:3c:ee:b8:db:f6:f5:9d:d4:b2:3e:d6:69:
                    25:f9:d2:92:04:33:3b:b6:bc:ab:e9:a9:ca:60:ad:
                    7b:48:22:00:8c:d5:49:12:75:33:86:20:93:90:d6:
                    a7:3d:fd:19:05:fd:ae:6f:4b:7a:a6:ec:64:00:48:
                    43:d3:f2:55:16:2f:ec:34:6b:ff:51:12:e6:79:2b:
                    26:7c:cb:5d:1d:b5:36:09:b9:97:39:64:bc:81:e7:
                    f5:66:83:31:66:2b:79:4d:95:ac:86:28:ea:d5:c4:
                    12:44:2c:ba:8a:4f:d2:cf:ed:b6:64:17:dd:23:7c:
                    97:7d:5d:8c:6f:5e:ba:58:f6:89:db:f6:64:3d:88:
                    33:86:dc:8b:5d:26:3d:8d:7e:db:65:c0:42:a4:95:
                    35:64:cb:ad:77:24:52:95:b5:0a:c6:77:a0:0a:c9:
                    73:08:51:91:4b:1e:46:54:6e:e2:ed:d2:97:16:2e:
                    56:55:ba:ba:a2:2c:1f:d5:cd:81:8d:e2:42:8c:70:
                    1a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5F:62:E3:9A:3A:B7:33:6A:5C:7E:F4:D0:F3:1E:EE:A0:94:BD:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/070da204-b714-36a4-b828-67f11d0cc12c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:91:3c:c9:d6:ea:ef:73:87:f9:cd:89:bd:a3:7a:db:63:19:
         32:1a:b8:eb:be:8a:be:c6:55:a3:16:6c:62:b6:72:6e:29:97:
         f9:19:8b:19:5b:99:e3:30:20:63:41:c3:1f:e6:23:92:0e:4a:
         2c:05:e8:74:5a:68:81:d9:2c:ab:1b:98:98:c2:29:75:7e:6f:
         bf:4f:84:5e:4f:92:b8:56:42:7f:35:1f:21:8e:17:77:1e:23:
         71:26:e9:41:bd:6c:fd:a9:dd:86:db:b8:3b:f3:d7:f2:ff:a5:
         87:e9:27:bc:16:ad:e4:42:6f:87:43:39:fa:a1:ac:c7:42:e0:
         cf:5e:88:6f:22:da:ea:7e:d6:0c:02:9f:2b:86:4d:6d:8a:ef:
         0f:a0:c3:35:97:07:99:58:62:fe:7c:28:c4:12:c5:8e:10:21:
         aa:97:7a:66:b9:70:ad:80:d7:8f:f7:cf:be:1d:5d:88:15:dd:
         81:67:cb:8f:ca:23:70:1b:66:8f:43:28:17:35:3e:d8:45:a3:
         86:f6:c6:18:6d:93:4f:8d:78:4f:b7:f4:4a:f6:22:5c:04:bb:
         4a:0a:f9:fb:b0:1f:9a:77:f6:f2:f9:df:b6:45:36:95:4c:33:
         ff:8c:a0:ec:f4:74:b7:10:67:84:d5:f5:90:68:4e:db:14:7e:
         d2:02:ad:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:13:45 2026 by rpki-client