Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/921ce088-dc6b-3fea-aaf3-8d91de71d46d.roa
File:                     921ce088-dc6b-3fea-aaf3-8d91de71d46d.roa (raw, json)
Hash identifier:          M/GFss2TyhGA+tOJ6ehrQPYgDGi2xJ7xuRLovDPm6O8=
Subject key identifier:   63:D4:EB:26:95:3C:AB:CB:63:9F:EC:4C:DD:FC:E1:66:5F:14:76:5E
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584EB2B1A620091726BC4CBECDA0
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/921ce088-dc6b-3fea-aaf3-8d91de71d46d.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     394089
IP address blocks:        167.176.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:a6:20:09:17:26:bc:4c:be:cd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=f3fa9307-684e-4e68-9cad-fb783e354185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:23:92:62:c1:54:26:e5:2f:47:ce:5b:b5:71:
                    ca:8b:89:01:14:7b:9f:d2:8b:8e:50:ce:aa:4f:8e:
                    5e:1f:91:05:e2:97:f6:00:cc:24:66:ee:5e:16:42:
                    44:cb:3b:48:81:0d:33:bc:d8:9a:26:6f:70:c9:90:
                    bd:0f:5d:0a:21:f1:71:f9:29:26:e1:73:0e:ad:6c:
                    cb:7b:6b:86:55:ca:ba:a3:64:9d:83:b0:ba:16:bf:
                    e2:5c:eb:1c:d8:37:03:38:fb:83:09:ae:85:e4:f4:
                    46:72:54:19:06:9e:fe:a9:da:30:79:19:ff:1c:8c:
                    c2:7d:94:e8:7f:92:cc:d2:27:64:12:20:d5:85:7c:
                    71:0d:b9:eb:78:3d:09:3a:b4:ce:f9:cf:03:a8:19:
                    c7:15:14:9d:4f:b5:45:53:9b:f9:09:7f:7c:b9:ad:
                    03:ac:57:7e:93:35:ab:a0:38:b9:0d:0e:dc:bb:6c:
                    4e:e2:84:af:9c:57:4d:fd:07:23:b4:bf:c5:40:d5:
                    5b:51:b5:50:28:cb:24:95:83:42:4e:cc:e4:54:52:
                    72:94:79:10:3f:66:bc:25:7c:c4:1c:70:56:e0:05:
                    39:75:5d:d0:8d:0a:e7:88:a0:e9:f8:75:27:85:0d:
                    5e:51:d6:aa:7b:cc:e3:e4:9f:bb:74:9a:8f:17:9a:
                    e3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D4:EB:26:95:3C:AB:CB:63:9F:EC:4C:DD:FC:E1:66:5F:14:76:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/921ce088-dc6b-3fea-aaf3-8d91de71d46d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:54:f1:67:11:a2:0c:96:5d:ed:c5:54:35:2e:67:b8:2c:2c:
         cc:3e:80:3b:64:6d:7b:6d:39:b3:eb:43:ca:33:a6:67:56:d1:
         b9:9d:56:bb:52:2e:4f:95:7b:c2:4e:50:d8:7f:ce:75:e6:aa:
         e9:b4:e2:2a:1f:b5:9b:6b:d1:be:9f:a1:4a:7f:4b:75:99:45:
         fc:e6:f6:4b:13:5c:81:20:45:6f:2a:44:f3:58:b2:63:eb:b1:
         e6:d9:66:2e:f9:42:b8:a4:3c:24:f1:c2:8a:74:09:08:90:ac:
         65:58:c7:72:7e:29:53:46:59:ba:2b:70:bd:94:53:ce:e6:3f:
         df:ed:69:7b:1c:b9:03:e2:62:47:43:a0:dc:69:e4:8f:23:9f:
         79:75:1b:d2:92:42:f0:7d:83:c1:11:00:5a:2b:69:fc:99:f8:
         e5:50:19:56:82:0c:51:16:b4:10:a1:fc:f1:ac:c9:c1:bc:6b:
         7d:0f:70:48:dd:6e:31:e7:b7:21:ac:af:bc:71:8c:c7:02:c1:
         d8:b4:ab:c7:a2:4c:94:8f:db:04:12:a8:9d:4b:04:8d:4d:6d:
         55:1c:d5:a5:7e:25:34:9b:fc:d7:51:e1:0c:6c:5a:e9:0c:f6:
         08:5c:57:f9:ca:0c:c2:b6:2d:cf:c0:77:d6:4f:30:36:d3:ac:
         8d:de:6f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:10:29 2026 by rpki-client