Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/17b0cc31-e4b1-32c1-a0b7-c537c5a94ce5.roa
File:                     17b0cc31-e4b1-32c1-a0b7-c537c5a94ce5.roa (raw, json)
Hash identifier:          I1+jcMDl6rX41ex2lKDe4bxCsyreTdh/cAgBL41IVrc=
Subject key identifier:   C6:7F:6E:1C:61:D4:87:E6:C1:B9:9B:A1:59:6C:FD:0D:84:93:D3:3E
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584F549DAE512E220BD4CE50C9C0
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/17b0cc31-e4b1-32c1-a0b7-c537c5a94ce5.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     12037
IP address blocks:        167.176.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:ae:51:2e:22:0b:d4:ce:50:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=e45cc154-0e74-4348-98aa-9c75548c53da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5b:71:16:a6:af:3e:e1:d3:7c:28:5f:31:2e:
                    00:7c:0a:12:4b:88:fc:65:0d:17:c3:c1:eb:e0:3e:
                    ec:5a:47:45:1a:95:50:df:ab:94:71:0f:66:9b:40:
                    50:42:32:f7:e7:fd:f2:c5:04:3a:13:6c:b9:ad:72:
                    75:fb:52:61:7e:f8:99:90:1e:ac:41:e3:5a:63:02:
                    33:e7:79:a6:d8:7f:0d:cd:82:c6:fc:f5:bd:31:c3:
                    26:52:e4:4e:02:86:1b:a6:4a:49:d3:10:d1:cc:f5:
                    5f:23:ae:05:b9:38:b7:7b:72:fb:ce:a0:3c:91:9c:
                    a2:3a:f8:5f:8d:23:f7:07:09:8c:98:cd:a2:d5:d7:
                    49:93:01:13:d2:f2:22:47:65:42:8d:ad:90:95:a1:
                    66:f2:71:46:4b:11:04:71:a1:7e:e9:95:1b:41:2c:
                    d5:ce:4e:f2:a9:26:70:5b:f6:ad:ea:2e:40:ad:df:
                    67:6d:65:40:85:74:09:3b:c2:a6:b8:3f:f4:68:18:
                    40:eb:aa:36:25:28:df:96:05:7f:9b:28:c4:76:46:
                    f8:0a:27:b1:5b:1f:93:4c:58:19:e4:81:6e:87:df:
                    e4:f3:a6:0c:3b:7b:0f:af:2e:b1:e7:48:69:a8:a3:
                    2d:15:aa:c1:3e:76:b3:3e:f2:be:c5:1d:a1:0c:42:
                    ac:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7F:6E:1C:61:D4:87:E6:C1:B9:9B:A1:59:6C:FD:0D:84:93:D3:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/17b0cc31-e4b1-32c1-a0b7-c537c5a94ce5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:cf:dd:91:82:a9:12:9c:96:a6:ff:2e:c0:12:05:29:55:30:
         6c:24:3f:90:2a:08:31:f3:4e:1c:f9:e1:00:ea:fc:a0:cb:23:
         82:d0:6e:bc:0b:89:0e:b7:92:51:22:29:03:54:45:5e:38:66:
         a9:c8:27:7b:6a:0f:7f:56:19:3f:b0:0c:7b:d8:ce:f3:1b:03:
         c3:08:91:ac:e1:4d:74:f5:49:a2:e1:e0:7a:db:64:de:36:c6:
         af:41:ae:9b:8e:5e:a6:e7:6e:b1:02:6b:fa:b7:e6:e4:f5:52:
         bf:c5:64:bb:29:c5:39:8f:5c:2b:3e:52:80:d9:46:80:af:23:
         f2:7e:91:1c:4f:20:57:d3:5a:e2:e6:60:e9:27:0a:1b:12:e4:
         6c:a9:db:b5:04:87:e4:ba:bc:3d:f4:29:dd:3a:20:59:ef:45:
         9d:5f:ce:3d:37:e6:24:c8:a1:d2:37:de:cc:c0:be:43:7c:67:
         25:49:a7:2c:c4:50:ff:85:b0:23:d3:25:52:ba:eb:23:29:0f:
         56:c8:f0:c6:fc:82:85:7d:b4:8b:ae:77:0c:b8:8f:ba:a8:4a:
         35:20:9c:c1:43:cb:8b:10:4e:5e:06:14:02:91:82:55:fc:25:
         ae:8c:be:20:5c:b1:43:cb:29:99:93:42:6d:1e:40:7d:a4:ba:
         4f:f1:82:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:57:17 2026 by rpki-client