Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/a3b3ac77-c7b0-3459-9b6e-a951ae86e7ad.roa
File:                     a3b3ac77-c7b0-3459-9b6e-a951ae86e7ad.roa (raw, json)
Hash identifier:          Syc4D0nSqx6CVYItVDvhRMINrFOw5rfucrmv7+g9iLA=
Subject key identifier:   D1:39:0E:17:AF:4B:D0:59:29:95:13:4E:94:C2:70:AC:F8:68:9D:62
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584EA798A58CCCFBF23D9EA32B40
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/a3b3ac77-c7b0-3459-9b6e-a951ae86e7ad.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12037
IP address blocks:        167.176.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:a5:8c:cc:fb:f2:3d:9e:a3:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d0a96957-ab64-4f79-9b3e-a0d303fc907c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5c:b1:d5:2c:1a:a6:ae:5d:82:83:11:3d:c0:
                    30:4a:2f:2a:60:67:84:10:0c:a8:3c:6e:0e:bd:01:
                    a9:91:ec:a2:be:4f:7d:6f:2b:32:18:cc:a3:a5:64:
                    ee:3d:a7:a3:7b:63:e1:17:9e:c0:73:a6:a8:cb:97:
                    a6:be:f7:de:a8:1e:2b:d2:66:94:69:c3:86:98:60:
                    14:6b:da:81:23:01:cc:9e:43:b7:4f:54:97:de:19:
                    0c:fd:b0:92:5f:77:ad:cf:4f:16:7d:f0:a6:60:11:
                    2a:ab:db:19:56:ce:fc:9e:c6:0c:0c:3c:c1:93:29:
                    0f:a9:29:97:8a:b4:65:d2:aa:06:f2:f0:82:d5:52:
                    07:69:d8:8a:7e:c4:67:f0:b9:e7:6e:f2:b3:52:0d:
                    1e:09:0e:56:ff:27:96:6f:c0:11:de:7b:af:83:43:
                    f4:58:91:c5:01:19:33:a8:7f:dd:34:2e:bb:5b:aa:
                    c2:dd:aa:44:cf:35:b3:55:ac:ec:d9:e2:50:aa:09:
                    d6:71:b1:64:94:fd:27:e6:56:b1:19:13:4c:f3:69:
                    b0:ce:c6:db:5b:d5:d9:3b:a1:9a:fb:b7:cd:2a:dd:
                    6f:4d:78:c9:79:6c:dd:81:5b:8d:f4:84:48:1d:36:
                    e3:91:a5:32:47:52:5b:6e:63:39:e0:27:f7:62:8b:
                    46:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:39:0E:17:AF:4B:D0:59:29:95:13:4E:94:C2:70:AC:F8:68:9D:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/a3b3ac77-c7b0-3459-9b6e-a951ae86e7ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:58:c2:ef:0c:7e:91:a0:6a:6c:da:c9:ab:a6:f1:ae:3f:e3:
         dd:ce:b5:8b:fa:76:bb:f6:1e:9f:2c:ba:af:ca:b9:94:bc:77:
         df:79:a4:0c:0d:63:64:28:ee:68:01:76:a9:b5:ce:d3:ce:1e:
         e7:51:b8:a7:34:be:1a:90:5a:df:3e:26:b7:0b:cc:e0:2e:c6:
         13:82:8c:d1:3f:71:3e:6b:22:4f:84:08:3d:aa:2e:9f:98:1d:
         65:51:8c:51:7b:79:11:54:8e:75:8e:74:24:8c:2a:03:6b:2b:
         bc:cd:bc:92:67:fd:01:c9:cc:ff:7d:73:0b:6b:3b:31:80:99:
         c0:0d:db:11:16:20:20:dd:f1:b8:58:a5:66:a5:f4:98:64:4c:
         5c:d9:5c:bb:8f:c8:ff:d8:5b:cd:c4:3c:8c:4f:72:79:ca:e9:
         c8:7e:9e:6b:0d:74:4f:61:c3:72:6f:5c:89:66:60:aa:76:a9:
         14:d7:9d:b0:6d:68:9b:39:38:ae:c3:b0:6e:be:0a:24:5a:67:
         12:37:6f:be:f7:10:92:15:34:8d:a7:9e:a6:be:3b:a5:d0:b8:
         d5:63:fd:82:ea:88:16:c6:eb:a2:4b:b4:14:88:48:ec:b6:40:
         3d:37:4a:96:42:7b:56:4a:11:f3:ed:be:54:11:91:d6:79:82:
         15:f1:fc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:13:12 2026 by rpki-client