Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/b7629b89-1150-32e3-8305-e4665d557986.roa
File:                     b7629b89-1150-32e3-8305-e4665d557986.roa (raw, json)
Hash identifier:          ou0yADQVR2fyD+KoaVHZ3MHsl49ddIDZsK+JmdsfrTo=
Subject key identifier:   C8:27:1A:B5:7E:9C:B4:38:5D:F6:72:4E:36:A9:90:B1:D0:5D:2C:7B
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584EB2B1FC4A21266106F1353980
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/b7629b89-1150-32e3-8305-e4665d557986.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     16509
IP address blocks:        167.176.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:fc:4a:21:26:61:06:f1:35:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=66a5233c-708f-44af-b7a0-6771d55ec46d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a6:6d:b3:56:2b:a1:c3:30:d7:3a:d1:36:4b:
                    d9:53:89:cb:f6:83:20:dd:9c:fe:15:e3:c8:22:c1:
                    df:43:c5:f4:52:a9:11:d1:11:77:d9:3e:4b:69:68:
                    56:40:b4:11:1b:0d:e8:1a:0a:6e:b2:2d:99:89:e1:
                    56:86:2e:78:07:a9:fc:38:8e:11:c5:2e:76:df:47:
                    7f:76:cd:03:75:2f:9c:8e:24:69:76:67:72:22:0f:
                    fa:f3:9e:b2:c6:58:4a:44:5c:b4:1a:96:d3:9d:13:
                    9f:65:fb:de:ce:7a:4b:4b:f1:2c:64:0a:f6:fc:a8:
                    45:3a:6e:a9:15:bd:bb:89:b0:4d:b0:ba:20:fa:61:
                    b1:a2:0f:01:62:9e:71:27:66:2b:3a:06:bc:6f:02:
                    b8:08:46:aa:00:71:01:ad:3d:a4:41:3e:31:6f:07:
                    5c:3c:ab:19:19:b6:62:88:c3:56:02:a6:c6:ce:ed:
                    be:c2:86:40:3f:61:89:2e:e5:65:a5:fc:53:9c:a5:
                    f2:43:d0:0c:84:cc:83:7c:40:52:51:91:fa:f6:3e:
                    08:1e:5d:7c:70:e8:5b:12:07:5f:a2:f8:69:52:1e:
                    27:0e:2a:b2:a8:7d:59:7b:b7:50:81:52:2f:a8:19:
                    d2:4a:68:d0:1c:6c:a5:0b:da:70:73:49:4f:d7:53:
                    bd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:27:1A:B5:7E:9C:B4:38:5D:F6:72:4E:36:A9:90:B1:D0:5D:2C:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/b7629b89-1150-32e3-8305-e4665d557986.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:f8:6d:a7:e8:2e:66:08:93:fc:ac:b3:a8:b2:14:55:2f:50:
         16:45:34:ac:26:63:db:4a:1d:1f:9d:17:99:2d:4b:3e:30:50:
         24:a9:f8:3e:b1:3d:5e:c0:27:55:93:2e:1a:33:f2:f0:58:59:
         a9:1f:9f:d2:a5:93:44:e6:6d:9a:94:60:f4:7b:e2:f7:f7:a8:
         d8:42:72:75:8d:ee:e4:b0:27:e7:8a:5e:63:be:b9:ce:6c:0e:
         9a:95:d1:7f:78:25:0d:79:b2:7a:89:bc:eb:a4:09:f9:c4:87:
         c2:7b:dc:fa:10:6c:ba:00:90:c7:b1:0d:d3:e1:88:53:82:2a:
         a5:26:a1:38:b3:b8:19:95:6b:ce:18:35:a5:1f:0d:ae:91:57:
         23:63:e8:8d:6e:78:75:16:8e:d4:43:59:a3:1e:a6:56:82:b9:
         22:20:39:9b:db:9a:c7:d4:8c:bc:94:6a:01:e0:42:80:c2:94:
         18:6d:7b:ce:7a:b2:3f:57:23:91:59:83:ff:f6:17:bf:df:3b:
         e2:8f:7b:53:0d:fc:36:3e:53:72:e8:0f:14:0c:67:f2:42:89:
         3b:3d:1b:9b:69:b6:f5:58:2f:c7:45:86:6d:80:da:03:50:c6:
         89:c2:35:5e:ee:79:8a:be:3a:cd:14:01:b1:c8:17:58:ab:91:
         60:07:7b:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysfxKISZhBvE1OYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm
ODhhMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
NjZhNTIzM2MtNzA4Zi00NGFmLWI3YTAtNjc3MWQ1NWVjNDZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKZts1YrocMw1zrRNkvZU4nL9oMg3Zz+FePI
IsHfQ8X0UqkR0RF32T5LaWhWQLQRGw3oGgpusi2ZieFWhi54B6n8OI4RxS5230d/
ds0DdS+cjiRpdmdyIg/6856yxlhKRFy0GpbTnROfZfveznpLS/EsZAr2/KhFOm6p
Fb27ibBNsLog+mGxog8BYp5xJ2YrOga8bwK4CEaqAHEBrT2kQT4xbwdcPKsZGbZi
iMNWAqbGzu2+woZAP2GJLuVlpfxTnKXyQ9AMhMyDfEBSUZH69j4IHl18cOhbEgdf
ovhpUh4nDiqyqH1Ze7dQgVIvqBnSSmjQHGylC9pwc0lP11O9cwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMgnGrV+nLQ4XfZyTjapkLHQXSx7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj
YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvYjc2MjliODktMTE1MC0z
MmUzLTgzMDUtZTQ2NjVkNTU3OTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj
YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw
Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw
Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7BzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE74bafoLmYIk/yss6iyFFUvUBZFNKwmY9tKHR+dF5ktSz4wUCSp+D6x
PV7AJ1WTLhoz8vBYWakfn9Klk0TmbZqUYPR74vf3qNhCcnWN7uSwJ+eKXmO+uc5s
DpqV0X94JQ15snqJvOukCfnEh8J73PoQbLoAkMexDdPhiFOCKqUmoTizuBmVa84Y
NaUfDa6RVyNj6I1ueHUWjtRDWaMeplaCuSIgOZvbmsfUjLyUagHgQoDClBhte856
sj9XI5FZg//2F7/fO+KPe1MN/DY+U3LoDxQMZ/JCiTs9G5tptvVYL8dFhm2A2gNQ
xonCNV7ueYq+Os0UAbHIF1irkWAHe/Q=
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:13:42 2026 by rpki-client