Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/6a217e75-968e-36fe-8c97-6ed61fa0dfca.roa
File:                     6a217e75-968e-36fe-8c97-6ed61fa0dfca.roa (raw, json)
Hash identifier:          AxTQSGdxk1t0sk1jtGcAfAXvmjb7iA9JR45Jo7W+Ook=
Subject key identifier:   B0:1E:44:85:5E:EA:43:40:EC:DD:83:27:91:52:FE:5A:90:91:AE:A1
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584D300A3A810285A969ECF47CC0
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/6a217e75-968e-36fe-8c97-6ed61fa0dfca.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     12037
IP address blocks:        167.176.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:3a:81:02:85:a9:69:ec:f4:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=94970394-d1eb-42ec-96a8-e76dd73012e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:19:48:ee:54:ce:fa:9e:73:0a:55:7e:af:62:
                    4d:85:eb:1e:bd:22:f2:84:09:13:3d:6f:d7:a8:89:
                    7f:08:ef:cd:c3:8b:00:6b:44:57:0c:28:33:20:80:
                    16:48:5f:a0:48:2b:92:ac:cf:78:22:b2:56:e6:51:
                    14:b3:52:e8:3b:a6:75:92:06:b2:7e:10:a3:c8:69:
                    93:2e:86:3b:94:18:1d:83:e5:66:d2:f7:0c:51:3f:
                    26:6f:0b:26:0e:71:57:ec:76:a2:8c:6d:28:b9:0a:
                    6c:91:d4:d4:9b:d5:f2:24:67:21:07:b4:e2:d6:0d:
                    49:39:d6:46:21:90:8c:71:62:4e:07:bd:34:dc:c4:
                    33:03:a0:27:c8:ad:78:60:03:60:57:a7:3b:8e:db:
                    ff:b1:5d:31:d4:60:fb:ae:bf:85:1e:90:67:0d:97:
                    58:cc:46:b6:03:24:11:c3:d5:bc:0c:0a:de:ba:25:
                    1a:cc:4f:49:f8:c8:9d:5a:db:94:f9:1d:ad:66:09:
                    f4:a6:c5:e1:ae:63:59:5f:36:e5:af:fa:2e:8d:3f:
                    de:c4:0d:13:78:d5:85:f2:2c:dc:30:89:90:e7:cb:
                    32:fd:64:40:47:43:af:cd:be:f6:4b:5a:ac:f7:82:
                    3e:cb:1b:6c:7e:a1:88:71:54:93:f3:e1:9d:30:0d:
                    68:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1E:44:85:5E:EA:43:40:EC:DD:83:27:91:52:FE:5A:90:91:AE:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/6a217e75-968e-36fe-8c97-6ed61fa0dfca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:6e:00:cf:4c:85:e8:5a:e0:c9:4d:dd:d4:43:a6:58:86:cd:
         ee:29:47:60:e9:71:32:70:4f:2f:48:70:dd:7a:46:73:ff:18:
         c1:7b:1a:e2:b8:20:97:41:69:2f:37:81:90:bf:28:f1:67:d7:
         e7:2f:c7:2a:79:7b:c9:39:93:7b:fa:27:25:bc:8d:46:8c:41:
         8c:7f:71:9a:de:30:ba:db:af:7c:9f:6d:5b:eb:0c:7c:52:58:
         92:60:ba:a5:04:d1:5c:d5:72:e2:57:92:38:06:5d:2e:ae:ed:
         c2:6d:df:10:ae:84:c2:b3:51:6c:4c:3c:da:e5:9a:ae:6c:fc:
         32:3f:ad:98:35:8f:33:21:f9:2d:ef:bd:9d:c7:af:88:e0:2a:
         49:b8:91:24:d1:25:cf:91:3e:73:2e:b8:c1:9d:28:bc:14:39:
         a0:03:22:7c:8b:1f:d5:c2:fb:22:9d:16:52:23:e2:be:d5:40:
         6d:86:cd:63:ed:65:6c:b8:3a:0e:b1:3c:75:46:4a:cc:f8:3c:
         4d:54:84:2a:91:6b:d0:41:3f:f7:7e:16:f6:5f:43:5f:34:7c:
         9e:eb:25:12:f7:c2:10:30:d9:eb:92:ef:d8:07:84:92:c1:e6:
         c9:4d:ae:ff:fa:7e:8d:b2:14:5b:43:66:12:2a:5c:81:0e:0c:
         eb:5c:e6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:14:21 2026 by rpki-client