Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/a47c1b38-8076-3f5c-9add-92942acecb65.roa
File:                     a47c1b38-8076-3f5c-9add-92942acecb65.roa (raw, json)
Hash identifier:          aviU/a4fFFzC5r1nGYbo3xffmnlYy79Nv1eEiwdk4fc=
Subject key identifier:   CE:A4:A4:E2:04:F1:EE:9D:5B:B3:4C:04:0A:FC:E8:53:80:66:A3:F3
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584F58CD660F26C4DF6A51DF0C80
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/a47c1b38-8076-3f5c-9add-92942acecb65.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     12037
IP address blocks:        167.176.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:66:0f:26:c4:df:6a:51:df:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=2a390523-24a0-4293-a17d-760fb7671d57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:50:46:5c:57:a7:e7:1d:37:1a:1a:0c:0a:ef:
                    f2:75:74:d3:a7:9a:c3:77:cf:92:d5:c7:d3:e9:e5:
                    a4:44:0b:94:94:ef:33:cc:75:ac:bf:83:fa:44:35:
                    56:2f:04:fe:0e:47:e6:60:6b:08:da:ef:83:66:77:
                    19:ff:a3:42:ee:3c:22:67:e0:83:c6:48:55:08:51:
                    01:e3:47:aa:43:03:0f:8f:28:b8:55:32:9d:0f:23:
                    54:8a:f5:30:e9:15:6b:63:2d:37:49:52:d4:b7:ac:
                    c9:23:df:26:cb:ac:cd:90:16:d7:d7:a2:7f:59:ed:
                    a6:af:48:dd:a2:81:9b:ae:0f:a7:0c:df:20:65:2a:
                    fc:49:64:90:ad:94:bf:c4:af:26:d7:22:8a:c5:43:
                    8e:7d:f9:a1:bd:c2:7e:51:91:8b:16:47:4b:c4:cd:
                    6a:8c:af:1c:da:18:88:b9:8a:d3:9d:02:d3:30:80:
                    e8:8c:38:95:8b:e2:c7:9d:73:44:38:e8:a7:1b:bb:
                    d6:00:68:f6:8c:ec:da:28:35:8a:c6:59:8c:4e:61:
                    e1:3a:ea:84:25:28:0b:9a:6f:29:7a:4f:6f:f5:52:
                    23:a1:5a:25:35:a1:c9:6b:29:b1:b2:89:f0:1f:fa:
                    b4:2a:a3:ed:eb:4d:ad:a6:81:55:4a:db:ac:40:1b:
                    33:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A4:A4:E2:04:F1:EE:9D:5B:B3:4C:04:0A:FC:E8:53:80:66:A3:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/a47c1b38-8076-3f5c-9add-92942acecb65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:ed:53:77:24:a6:15:77:20:02:fc:e8:97:60:ea:41:cc:bd:
         d0:73:ef:8f:18:60:23:ad:8d:79:06:b2:2a:77:1f:d5:86:d6:
         e3:5f:0f:06:b0:21:4e:49:c4:ab:90:3d:a1:61:c9:a9:66:fd:
         21:01:fb:f4:e2:19:29:51:47:ed:9e:b0:17:b8:69:e4:07:d4:
         2b:20:84:15:09:5d:e1:a2:33:62:fa:9a:e7:9b:b8:93:09:d6:
         3a:02:e6:fc:10:a7:f1:7a:40:6c:3d:60:75:86:53:9c:c4:62:
         7f:17:95:bf:e2:89:18:f6:4e:e4:f0:70:f7:88:a2:04:65:f3:
         85:0b:70:06:50:30:9c:79:f7:89:d5:49:c5:41:29:08:07:1a:
         51:97:3c:65:00:3a:90:ce:f1:bd:07:6e:ef:58:7b:7a:ca:08:
         61:bc:74:c4:61:d8:3b:ab:5f:0a:0a:6c:d9:65:6f:88:7c:ba:
         e6:99:4e:72:e6:5c:a4:8d:38:6f:34:8d:6c:ad:e7:21:66:f2:
         99:e1:07:8b:0a:38:a4:84:8c:94:75:49:27:f4:10:12:b3:47:
         9c:f5:83:02:34:88:c9:37:08:2a:8f:12:96:e7:c7:40:fe:32:
         b6:2e:f1:aa:2d:bd:48:35:62:c0:e3:6c:9d:fb:ea:60:43:88:
         d7:20:01:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:57:21 2026 by rpki-client