Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/ac16105b-d7ad-3ec5-9328-92e7a29bcf43.roa
File:                     ac16105b-d7ad-3ec5-9328-92e7a29bcf43.roa (raw, json)
Hash identifier:          5+bnTM410NbAH5yE/O/HnINyDCEznb9qiM5htjmMCtY=
Subject key identifier:   DB:52:56:A4:E0:6D:A7:74:31:C1:A3:26:1A:97:E3:DA:0C:55:AE:CE
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584EB2B1A48041948A149015BEC0
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/ac16105b-d7ad-3ec5-9328-92e7a29bcf43.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     14618
IP address blocks:        167.176.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:a4:80:41:94:8a:14:90:15:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=9774f67e-d255-4257-b1f2-ef75eace7a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ef:46:a2:ca:47:9e:3e:86:cf:ab:b9:58:0f:
                    50:db:1b:b3:73:9c:13:c7:c3:2c:be:76:c6:49:d7:
                    c6:9e:b9:55:00:c5:c7:13:fc:75:41:ea:34:1c:12:
                    21:ea:41:ad:17:09:33:62:2c:33:f0:64:40:af:05:
                    d6:74:1e:24:d9:bf:15:c4:7d:7c:bf:d5:2c:d8:9f:
                    d8:fb:ae:78:90:40:a9:9b:e5:15:73:e9:fa:27:7b:
                    88:87:41:f0:59:bb:ad:84:0a:21:b6:a1:dd:c1:17:
                    39:92:a8:cc:58:61:e1:68:ab:4c:be:3f:d9:e3:f1:
                    7e:c5:c7:e5:7e:87:94:c2:fd:71:c2:8e:c0:81:62:
                    2a:76:69:9b:80:3d:89:bc:d9:e2:89:bb:a4:74:14:
                    a3:1a:56:17:bb:8e:06:3a:08:eb:93:2d:61:c8:82:
                    33:e9:be:7e:b9:b4:7e:cc:6d:4f:fe:d8:03:6a:44:
                    c6:a5:1f:36:1b:b5:29:b1:72:13:17:b5:31:e4:57:
                    c9:a5:30:d4:54:e2:6c:c3:f7:a3:b7:21:a0:bf:c6:
                    18:5d:7d:3b:ba:6c:2c:9a:f9:cf:57:de:1b:61:c8:
                    8f:c2:86:90:b3:36:93:a7:18:2d:37:0d:09:07:37:
                    b5:da:b7:e6:f7:98:cc:75:58:ad:0e:98:ee:85:0f:
                    0f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:52:56:A4:E0:6D:A7:74:31:C1:A3:26:1A:97:E3:DA:0C:55:AE:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/ac16105b-d7ad-3ec5-9328-92e7a29bcf43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:cf:87:bb:23:09:a4:31:85:eb:5d:8b:74:fd:c8:a2:78:56:
         c3:12:8d:82:cb:5c:98:16:10:f9:d5:6f:34:98:e2:9f:e2:aa:
         fa:43:4b:7c:2c:f9:ce:7e:d7:68:be:16:73:de:e7:2e:38:06:
         96:6e:d1:4a:f4:b0:61:2c:80:10:15:7a:79:8f:97:05:f2:47:
         f5:20:62:29:78:97:c6:d2:04:23:d0:42:66:b4:ed:9e:ff:41:
         e6:69:c2:41:66:32:b7:11:55:87:7f:68:a1:90:f9:4f:28:82:
         61:35:32:7f:8e:6b:27:33:b6:7f:6b:b5:17:63:5c:4e:a0:b2:
         b5:25:b1:25:7a:8d:9a:5d:c7:c4:3e:5a:22:c8:46:c4:2b:41:
         b9:15:81:05:b1:5f:d6:02:8f:dd:37:7d:76:15:85:9f:7d:73:
         37:07:6d:54:89:9b:6b:7a:37:7f:65:9b:cb:ab:a4:db:90:6e:
         2d:6f:7a:6f:60:25:68:e1:ab:89:f2:e3:8f:43:a5:01:5f:d3:
         ab:f5:6b:0f:a3:75:9a:8a:79:b9:a6:e6:ff:6f:58:16:14:d1:
         5c:80:3d:af:2b:b9:25:57:47:6c:a4:4b:5f:17:fb:b0:58:0b:
         e7:d4:19:af:c9:17:8f:01:f9:f4:6d:19:07:4d:34:c7:ac:16:
         53:b7:cf:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:53 2026 by rpki-client