Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/88b913d8-a0fd-3f43-8246-a3bff0523a3f.roa
File:                     88b913d8-a0fd-3f43-8246-a3bff0523a3f.roa (raw, json)
Hash identifier:          sPyEJnWN/ZNAbnG/0I5D06lI/6q8YgaFnSUPAXFheoE=
Subject key identifier:   2A:9F:6B:93:BA:8D:22:28:5E:73:FB:FC:2F:08:A8:D3:EC:7F:E6:7F
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584E104F31340B8CE0F010A3FE00
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/88b913d8-a0fd-3f43-8246-a3bff0523a3f.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     394089
IP address blocks:        167.176.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:31:34:0b:8c:e0:f0:10:a3:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=a36deec3-9685-4377-a008-cdd3ce789c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:24:c0:cc:a4:d3:8b:f2:8a:7a:4f:8b:2b:
                    e3:6f:df:5d:85:48:5d:01:38:eb:40:63:6c:77:b9:
                    8e:ad:85:b3:69:be:f1:21:2d:cf:5e:34:78:80:f1:
                    ff:4b:b0:fb:bf:af:24:e9:89:90:25:cb:c5:b8:75:
                    8b:b1:24:59:f9:8a:59:20:42:44:f9:ca:97:56:ba:
                    53:94:7b:e6:4a:28:c6:c6:6d:3c:ee:e0:e8:29:0c:
                    68:4f:f2:14:23:c3:2d:ac:01:e9:e0:0d:12:61:2b:
                    09:f8:fa:21:23:a6:bf:42:42:07:09:0f:22:e5:0f:
                    25:48:a2:71:08:a7:ab:97:56:9c:9f:c7:a3:b4:e8:
                    2a:cb:00:b7:2e:f9:8f:50:fc:ac:0d:86:27:18:41:
                    25:28:9a:fc:fa:e3:58:e1:f1:20:5a:8b:0a:61:cb:
                    1a:f4:ce:80:0e:c5:98:45:62:81:4b:1d:47:04:f6:
                    77:c2:fb:32:02:55:f2:53:d4:b0:34:a4:01:cb:b1:
                    6a:e5:8e:e9:ae:cd:c5:67:4e:96:e4:84:6c:29:f1:
                    ff:aa:31:d1:98:35:e0:a3:35:3b:e8:54:44:b6:42:
                    8d:64:32:e0:76:45:45:84:6a:1e:80:3e:91:4b:90:
                    16:3f:ae:82:8d:c6:f1:2e:02:2c:7f:f4:00:76:f2:
                    95:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9F:6B:93:BA:8D:22:28:5E:73:FB:FC:2F:08:A8:D3:EC:7F:E6:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/88b913d8-a0fd-3f43-8246-a3bff0523a3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:28:aa:34:ed:ae:0c:8a:33:99:1b:eb:16:91:df:6e:54:1c:
         f4:21:de:80:8b:f7:9c:b3:e3:67:0c:f9:0e:23:f3:3b:60:13:
         04:c7:7d:29:71:41:a5:21:6a:24:9f:3b:92:35:46:6e:de:5e:
         b4:4a:2d:b8:80:dd:aa:b9:b7:a2:52:2c:e6:ce:a7:e4:93:fc:
         7d:11:66:05:28:c4:a1:aa:f7:98:bd:f5:e2:b5:55:88:37:14:
         05:0c:b8:32:07:7b:9f:c2:ca:ad:8b:34:60:3d:36:df:5d:78:
         0d:9d:92:08:d9:16:14:e3:e5:f5:15:26:f2:43:6e:a1:f7:47:
         29:9a:a4:0a:e8:67:c7:84:df:02:3e:9b:5d:47:32:f0:41:46:
         5d:75:7b:ed:4b:c4:b4:60:aa:e6:97:28:b0:13:48:e2:63:26:
         0b:f4:81:a6:13:19:b5:cc:78:d6:7b:a3:a7:a4:e7:5c:52:95:
         40:7b:a9:4e:3f:32:86:47:ce:8b:a6:25:1f:b0:65:d2:36:b0:
         21:bf:d2:bd:4b:2b:8e:e2:d5:42:11:32:88:e4:83:bb:35:4a:
         26:f8:d9:c2:2f:86:4b:5e:a9:e5:a5:55:33:13:8d:d9:5f:46:
         12:d3:a3:f1:bd:f8:01:ae:96:da:ab:9a:35:36:67:f3:44:81:
         ec:0a:35:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTzE0C4zg8BCj/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm
ODhhMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk
YTM2ZGVlYzMtOTY4NS00Mzc3LWEwMDgtY2RkM2NlNzg5Yzk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJEkwMyk04vyinpPiyvjb99dhUhdATjrQGNs
d7mOrYWzab7xIS3PXjR4gPH/S7D7v68k6YmQJcvFuHWLsSRZ+YpZIEJE+cqXVrpT
lHvmSijGxm087uDoKQxoT/IUI8MtrAHp4A0SYSsJ+PohI6a/QkIHCQ8i5Q8lSKJx
CKerl1acn8ejtOgqywC3LvmPUPysDYYnGEElKJr8+uNY4fEgWosKYcsa9M6ADsWY
RWKBSx1HBPZ3wvsyAlXyU9SwNKQBy7Fq5Y7prs3FZ06W5IRsKfH/qjHRmDXgozU7
6FREtkKNZDLgdkVFhGoegD6RS5AWP66CjcbxLgIsf/QAdvKVMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCqfa5O6jSIoXnP7/C8IqNPsf+Z/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj
YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvODhiOTEzZDgtYTBmZC0z
ZjQzLTgyNDYtYTNiZmYwNTIzYTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj
YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw
Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw
Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7ByMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFAoqjTtrgyKM5kb6xaR325UHPQh3oCL95yz42cM+Q4j8ztgEwTHfSlx
QaUhaiSfO5I1Rm7eXrRKLbiA3aq5t6JSLObOp+ST/H0RZgUoxKGq95i99eK1VYg3
FAUMuDIHe5/Cyq2LNGA9Nt9deA2dkgjZFhTj5fUVJvJDbqH3RymapAroZ8eE3wI+
m11HMvBBRl11e+1LxLRgquaXKLATSOJjJgv0gaYTGbXMeNZ7o6ek51xSlUB7qU4/
MoZHzoumJR+wZdI2sCG/0r1LK47i1UIRMojkg7s1Sib42cIvhkteqeWlVTMTjdlf
RhLTo/G9+AGultqrmjU2Z/NEgewKNeQ=
-----END CERTIFICATE-----
Generated at Sat Jun 6 20:53:47 2026 by rpki-client