Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/29a85c30-a52d-36a6-9030-0ec6daf5320c.roa
File:                     29a85c30-a52d-36a6-9030-0ec6daf5320c.roa (raw, json)
Hash identifier:          vHhSYxVaeB5kto7qGW89ANtz/nxfJCgUlBchhrCqtik=
Subject key identifier:   FA:99:30:DB:AD:7C:D9:6F:35:1D:E1:52:38:3E:22:98:9E:C9:2B:94
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584F549D4D7D9C105C3216BA51C0
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/29a85c30-a52d-36a6-9030-0ec6daf5320c.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        167.176.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:4d:7d:9c:10:5c:32:16:ba:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=e5ded7b8-ccda-472d-ab34-ac978f25cc32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6f:f9:a6:87:f7:5d:26:8e:28:3e:01:3c:ea:
                    b0:98:87:1b:db:f8:49:95:c8:c8:b8:4e:73:13:e1:
                    9f:63:e7:78:46:da:ad:17:2f:32:cd:64:66:ca:a2:
                    3b:e1:38:1c:d2:07:a3:72:08:2c:ee:03:82:b1:e4:
                    a3:b5:02:ef:b0:30:5b:cb:10:69:b9:32:30:a8:68:
                    ed:80:41:a9:c0:14:b8:0e:80:34:d0:67:c0:80:f4:
                    64:d7:e8:08:72:94:ed:7b:28:d2:6b:f4:f9:27:c5:
                    dd:6b:dc:ac:bd:2b:fe:87:86:f6:3e:cf:0f:1d:7c:
                    2a:54:38:4b:84:17:e4:bf:fc:2e:c9:52:f4:cd:12:
                    20:fd:df:2b:e1:d3:62:52:e8:60:4b:cc:b8:b9:43:
                    5d:eb:5b:bd:40:09:68:44:85:4f:4d:68:15:91:e1:
                    21:66:c2:58:16:d4:62:26:b8:51:10:a9:f6:a2:ed:
                    2f:93:72:85:7c:2c:7d:f9:aa:56:6e:5b:1f:c3:da:
                    90:d2:2c:d3:cc:ba:6d:bb:93:21:52:8b:f5:76:4b:
                    11:53:4e:4a:6b:6a:f0:ec:94:db:a4:59:16:d9:25:
                    98:b5:31:89:be:b3:9c:cd:40:ab:90:26:0b:d5:d7:
                    a3:ca:72:18:4b:16:4a:56:fd:73:7d:60:10:68:49:
                    95:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:99:30:DB:AD:7C:D9:6F:35:1D:E1:52:38:3E:22:98:9E:C9:2B:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/29a85c30-a52d-36a6-9030-0ec6daf5320c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:29:84:76:31:aa:f2:28:68:ae:6e:89:d7:7b:c3:da:03:60:
         12:e2:73:36:28:77:ba:92:29:a6:61:ff:69:10:b4:e2:75:02:
         d7:5f:e8:ae:0c:d3:1a:b2:66:cb:88:ba:c0:17:da:d6:c2:7b:
         43:c8:87:00:4c:1d:9c:41:86:a6:4c:95:06:20:66:89:2f:31:
         f3:e9:01:c6:34:92:cc:b2:41:17:f3:31:b6:11:9a:3e:86:0a:
         21:74:5b:4f:33:e2:4a:06:2c:2c:cb:87:57:3a:55:a5:05:c3:
         e6:7f:59:c6:35:0d:4d:ed:0b:bc:78:1d:67:ad:39:1a:e1:fc:
         51:16:88:31:83:f2:a2:62:e1:fc:d2:82:7a:9e:aa:0e:14:ac:
         cc:35:37:24:4c:92:14:b9:f3:b7:77:3d:2a:ed:9f:bb:88:76:
         d7:20:59:e3:65:c5:ce:64:8a:75:da:e0:74:c0:59:cd:20:ad:
         8d:9c:d8:ca:0b:2c:dc:ca:84:2b:08:51:fd:3b:e4:00:72:41:
         62:d0:6c:da:86:3b:1d:7e:9f:ce:a3:c9:a6:8e:20:71:21:e3:
         a8:c0:ca:6e:6f:9a:9f:33:13:ca:96:73:51:bb:c4:8e:d1:60:
         1c:b1:e4:29:0b:8f:b8:28:75:63:2d:33:5d:47:dd:4a:c0:88:
         8a:45:63:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 04:03:26 2026 by rpki-client