Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/a47c1b38-8076-3f5c-9add-92942acecb65.roa
File:                     a47c1b38-8076-3f5c-9add-92942acecb65.roa (raw, json)
Hash identifier:          RgJmywJhemWGnYftWZhhiE3Aec3uIDNE+nFukAS+YOU=
Subject key identifier:   4D:DE:1A:FF:62:B3:47:8A:B4:36:CA:CB:29:E2:56:18:22:C2:AA:07
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584D343A38C9FF87199B6A44AF00
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/a47c1b38-8076-3f5c-9add-92942acecb65.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     12037
IP address blocks:        167.176.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:38:c9:ff:87:19:9b:6a:44:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=8eb418b4-9a10-4c95-914f-8e9fe64790ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ae:06:46:de:93:fd:e2:60:2b:4b:ac:87:b6:
                    a6:7c:63:56:90:71:98:0b:37:ef:49:1a:95:a6:a3:
                    48:e0:06:cd:3c:24:eb:1c:1b:c3:fb:4a:30:5e:12:
                    f8:eb:24:f1:d7:2c:ee:77:db:a6:ba:c9:ce:00:a6:
                    bb:a5:4d:0a:e2:a7:8c:83:a6:79:51:64:74:ca:13:
                    f5:b0:ba:3a:94:24:e1:33:89:6d:ca:60:f8:9c:b8:
                    73:86:59:b0:7c:e0:85:b0:96:87:af:9b:85:a3:1d:
                    7a:2a:f8:f1:69:c0:42:fb:8d:47:89:ac:ba:cb:84:
                    cc:a6:76:70:86:d6:6e:66:41:ba:ef:a5:24:9e:92:
                    bc:1b:0c:09:cb:57:39:67:c9:ce:31:e6:a5:4c:3e:
                    0d:87:ed:7e:1a:58:c1:e3:bf:35:e4:56:7b:e9:5f:
                    7f:46:36:03:e2:f2:76:9d:3c:1d:6e:12:a8:23:58:
                    29:42:c4:31:ff:e4:ba:11:ea:aa:14:3b:55:f7:4a:
                    9f:a7:e6:88:f1:e0:df:f9:59:ef:58:f7:98:a5:aa:
                    bb:89:d2:d2:5e:f3:d2:db:c9:6b:1a:ca:24:04:6b:
                    07:88:f9:ac:96:94:13:b4:b2:d7:c7:e6:17:18:f5:
                    bc:47:b0:f3:65:7d:38:68:f2:f5:d7:da:ea:54:ef:
                    49:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DE:1A:FF:62:B3:47:8A:B4:36:CA:CB:29:E2:56:18:22:C2:AA:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/a47c1b38-8076-3f5c-9add-92942acecb65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:d3:1f:84:f8:57:12:2c:e4:20:75:95:2c:d1:7d:32:6d:50:
         24:d3:76:80:32:a8:f3:1e:e6:1a:3f:26:11:f4:00:ac:9a:53:
         b5:4f:20:ef:e7:d3:fa:2c:49:50:2b:ee:8b:df:8a:5a:cf:4e:
         a4:f4:e9:c3:d0:65:db:0e:32:a1:9d:63:63:39:2b:53:41:97:
         2c:33:30:f6:03:b6:08:97:44:7e:37:cf:27:69:6d:c1:15:0d:
         58:5b:dc:58:c0:00:d6:e6:af:f2:1a:16:c3:cc:e9:c3:ea:6f:
         d7:21:c8:a8:58:38:04:2b:4a:06:60:76:10:fb:21:7f:ba:f3:
         d6:7c:b2:0a:4d:50:6e:ca:d9:73:fe:73:25:5b:8f:55:0a:91:
         fe:0e:02:cf:5f:91:d9:b0:cb:31:53:47:89:c5:a9:b0:ed:ea:
         11:c3:b3:6a:b5:1b:79:79:86:76:85:14:4c:39:3c:72:f0:b6:
         ab:69:e0:65:c5:4f:00:08:8d:c9:76:da:e5:a8:9d:61:21:00:
         c0:f7:c2:82:f6:93:ec:a4:61:b8:8c:fd:20:0c:a6:b8:87:78:
         9e:0f:cd:4f:f9:12:0b:02:92:25:49:34:b8:0d:c4:3b:36:54:
         b2:47:97:d6:93:dc:52:d8:43:ec:48:af:09:36:cb:ff:10:ff:
         44:3c:aa:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:17:31 2026 by rpki-client