Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/c6c0dc72-6d3f-3691-8af8-f16c688a8509.roa
File:                     c6c0dc72-6d3f-3691-8af8-f16c688a8509.roa (raw, json)
Hash identifier:          FjE09qQWLZNkVirVO56EmV6bKOAkkbN0cBC1Eu06cz4=
Subject key identifier:   C3:54:63:9C:49:69:E3:90:48:A5:35:6E:A8:70:2E:81:50:4A:CA:3F
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584EB2B1AEF0D2CC6B6AC3A41880
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/c6c0dc72-6d3f-3691-8af8-f16c688a8509.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     394089
IP address blocks:        167.176.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:ae:f0:d2:cc:6b:6a:c3:a4:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=ea80a57e-806f-4a9d-977e-89653a667bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a6:6d:c0:ff:bc:60:9a:d0:1c:01:0b:60:22:
                    fb:bf:89:88:62:6f:89:47:9d:05:6f:15:32:21:84:
                    fc:49:c6:e3:9e:2b:cb:88:9c:9f:61:68:f4:09:72:
                    1e:bb:90:50:e7:76:84:d5:36:6e:7b:c5:1d:91:e6:
                    57:0f:be:d3:04:54:f8:5a:59:3c:d2:a0:41:ad:2e:
                    81:93:a1:82:76:dc:ad:80:07:8c:7e:bc:11:78:b7:
                    2d:51:19:7c:92:5e:0d:60:de:84:5f:30:95:fa:12:
                    1c:8b:9d:8d:69:64:20:55:0a:79:97:44:af:26:b7:
                    bd:b7:03:2a:36:a3:ea:18:ef:f4:26:54:1c:a5:4b:
                    ce:85:44:0f:63:06:8e:73:0e:f0:32:c5:ec:92:0a:
                    2a:b6:68:6d:a6:c6:50:c1:d0:11:05:dd:d4:6b:d1:
                    d1:59:3b:3d:f7:0c:80:6b:cb:92:6f:cc:2a:ff:47:
                    ce:19:e1:ff:5d:ff:5b:6f:3e:08:99:5a:29:f1:e7:
                    78:4f:1b:7a:83:b6:c3:14:e6:fb:65:76:1d:ad:c2:
                    6b:a9:3b:54:b8:4f:d8:fb:07:66:03:c7:36:c3:03:
                    b8:3d:27:38:9c:db:9d:e6:8c:4c:46:50:1a:33:94:
                    d1:e8:55:78:af:99:f0:5e:74:48:16:4f:24:a9:c7:
                    23:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:54:63:9C:49:69:E3:90:48:A5:35:6E:A8:70:2E:81:50:4A:CA:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/c6c0dc72-6d3f-3691-8af8-f16c688a8509.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:d0:88:a8:5c:cb:17:ee:84:84:85:8c:41:2c:bb:60:9a:df:
         5b:dc:ff:6a:20:09:c6:8b:a3:a8:78:b9:54:11:fd:41:c2:6d:
         c5:c1:85:4c:cc:88:71:b2:85:c4:9f:8c:02:ea:d9:3d:2f:95:
         0e:c3:6c:4f:9b:e8:d1:9f:9e:90:67:f1:bf:81:24:c1:ed:2a:
         3f:02:88:16:b9:41:b6:5e:4c:5e:91:1c:30:be:48:4e:dc:2b:
         fa:c9:da:4c:3b:37:fe:db:75:8b:87:e1:28:ec:3f:47:17:15:
         94:75:52:19:9e:53:e0:e8:39:24:d8:e1:b5:dc:6f:d3:a9:c0:
         2c:ad:93:54:11:78:d6:9e:b4:30:b2:c1:37:96:ab:76:ef:3c:
         1c:9f:16:ca:a0:6c:a5:fc:f6:3f:11:28:8e:8a:c2:5d:c6:42:
         61:a3:0d:2b:05:0f:cf:7c:f2:a9:14:57:21:1f:7c:a3:51:31:
         03:4a:81:fc:c1:b9:b6:70:95:e8:1d:ee:9e:eb:0e:5c:ff:e9:
         00:78:11:16:da:3e:6c:e6:8d:60:96:60:57:38:c7:94:42:6c:
         af:66:45:74:97:f0:1c:b1:de:78:3f:47:b3:9f:fc:cc:0d:ca:
         e8:b0:97:4e:7c:cf:25:9e:3f:f5:52:24:d8:ff:75:81:b5:4b:
         13:ee:46:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:15:53 2026 by rpki-client