Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/bb9a3eac-f30c-3261-bdb7-8c7bfb6a5fe5.roa
File:                     bb9a3eac-f30c-3261-bdb7-8c7bfb6a5fe5.roa (raw, json)
Hash identifier:          XrbjqLip3ygYQ+rQO86G4yjHpMiyc3Uai3k0JoPvJq0=
Subject key identifier:   7B:87:59:4D:8B:7B:5E:4A:62:29:37:03:0F:96:44:8F:24:26:2B:B4
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584F549D4669E914C766B7DF0F40
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/bb9a3eac-f30c-3261-bdb7-8c7bfb6a5fe5.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        167.176.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:46:69:e9:14:c7:66:b7:df:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=ca51a025-8ba2-4322-a339-e9be277126ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c3:01:b5:1d:9a:11:c2:22:62:1c:bb:74:60:
                    b2:ff:a1:fd:a4:7a:48:06:7e:9c:18:a6:2f:f4:c2:
                    39:07:d7:bc:dd:4b:39:55:60:ba:c7:98:5b:aa:bc:
                    b2:16:4d:17:cc:5d:90:fd:d9:3d:0c:54:ea:35:09:
                    eb:d6:b3:bf:cc:09:f3:9c:5e:90:59:db:b0:55:39:
                    bb:06:68:a5:b8:5b:31:10:85:c1:b9:0a:cf:70:f7:
                    cc:85:b9:b4:63:cc:fe:63:7f:ad:39:3b:51:9b:40:
                    7b:87:ed:86:0c:cc:2c:31:2a:b5:b6:48:8d:6c:03:
                    de:a0:ae:37:2e:52:04:a0:57:4d:2f:51:db:8e:be:
                    c2:82:41:1b:04:ff:82:cc:fd:e9:e5:25:4f:ae:93:
                    1c:28:62:1d:86:32:07:93:ae:c0:65:2e:94:05:e1:
                    26:b4:2d:c0:b8:4a:93:5f:e8:c7:bb:75:25:c8:fe:
                    05:d9:93:5e:f1:74:50:8b:4b:db:a1:63:27:f8:a5:
                    a8:a7:19:72:dd:a7:5d:1d:92:c7:a0:8a:89:7c:e9:
                    2f:8b:8c:0f:87:b3:e9:72:83:67:43:b5:fa:d0:1b:
                    07:3c:cc:b3:c2:ee:49:90:c0:fb:d9:47:fa:f8:87:
                    2a:4c:75:46:98:93:a7:a8:3f:e7:6b:a4:f7:97:e3:
                    e0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:87:59:4D:8B:7B:5E:4A:62:29:37:03:0F:96:44:8F:24:26:2B:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/bb9a3eac-f30c-3261-bdb7-8c7bfb6a5fe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:44:b6:c2:5b:b1:c2:23:13:a9:2d:39:a8:4b:f7:fa:40:03:
         fb:13:97:91:6c:67:ee:44:e6:c1:c3:dc:a2:6b:84:29:66:b9:
         8a:13:32:33:46:41:ac:12:d9:86:2f:43:e4:5a:84:f6:bc:b3:
         f8:23:a0:c0:c1:27:d0:16:e0:35:e6:ca:86:dd:c2:8b:25:90:
         b4:27:cc:50:00:3e:14:7c:7c:8c:d2:45:db:33:b4:52:f9:4f:
         84:31:c3:6b:0a:36:14:40:7c:51:f6:e6:a5:62:77:0b:39:f3:
         da:f4:cf:3c:5e:c4:f3:78:81:e8:35:bb:7d:39:8c:ce:5f:ae:
         ef:e7:2f:68:58:a9:71:e4:68:91:a5:d1:19:72:13:41:d0:c4:
         59:53:ce:23:16:4f:0f:01:a0:3e:3c:3b:02:3b:a6:4d:d8:a4:
         bd:e3:e5:86:3e:e2:5d:e4:1e:de:96:29:89:57:77:1f:03:c9:
         e9:1f:11:f2:93:1b:d2:67:84:78:6a:32:4a:03:db:11:06:dd:
         5e:2f:4b:7f:0f:73:a1:b8:98:4e:8a:d4:bc:a0:97:92:78:ce:
         6d:ef:8c:a2:d7:99:01:be:26:94:b4:53:7b:12:ac:30:9e:74:
         ea:20:ac:72:c0:69:0c:99:17:3b:b7:ec:ab:ec:3f:17:68:ee:
         73:ef:49:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:13:42 2026 by rpki-client